Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
File:                     fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa (raw, json)
Hash identifier:          UeFokHKOsv9/QXW/6AyHfEun+Kd/KJbX4ugFZz4clM0=
Subject key identifier:   7C:A6:67:77:AF:F2:D7:41:4F:D4:6A:BF:30:5E:D5:B5:72:95:F5:5C
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0172
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
Signing time:             Wed 31 Jul 2024 01:34:17 +0000
ROA not before:           Wed 31 Jul 2024 01:34:17 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        210.148.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 370 (0x172)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:17 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=7CA66777AFF2D7414FD46ABF305ED5B57295F55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:5f:0f:d4:f1:c6:01:43:ae:d7:11:fe:03:6e:
                    63:90:26:2f:35:c9:ec:20:ea:78:f4:8b:63:a9:8c:
                    1f:6a:bd:77:81:73:72:ee:0c:93:c9:24:a3:a1:6f:
                    66:a6:1f:0e:c4:b8:b1:f5:34:f4:72:1f:74:ac:86:
                    50:fb:6b:77:0f:05:68:ba:88:38:1e:93:fc:00:5f:
                    39:16:9e:93:cd:5d:77:c4:6d:b2:de:d9:3b:f9:11:
                    14:35:82:45:23:16:99:60:06:d4:78:68:ef:2c:af:
                    fc:b3:4e:f3:56:47:62:15:cb:43:a8:7b:e4:16:fd:
                    ef:fe:79:00:b1:e0:c4:e9:8b:71:ab:22:4b:bf:73:
                    76:fb:63:bb:4a:23:71:01:17:ac:4a:d2:9b:b8:fe:
                    97:3e:7a:a2:ed:97:9d:0b:4a:e9:2b:48:12:c9:6c:
                    6e:0b:03:65:39:94:31:38:cf:29:84:05:b8:ea:bb:
                    b8:b1:24:eb:8f:c9:cf:98:7c:35:e8:e5:39:83:bb:
                    f1:c6:bf:79:08:99:8d:64:76:57:80:08:05:d0:12:
                    fb:15:eb:ab:37:39:82:6e:69:76:9e:46:05:92:71:
                    74:28:5f:ca:01:92:77:66:32:a5:e8:51:40:0a:01:
                    91:52:1e:ec:a7:03:df:d3:90:a9:f4:a5:57:d2:e0:
                    1a:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:A6:67:77:AF:F2:D7:41:4F:D4:6A:BF:30:5E:D5:B5:72:95:F5:5C
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/fKZnd6_y10FP1Gq_MF7VtXKV9Vw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3d:a1:d1:32:c9:fe:52:ab:22:c9:66:d6:0e:f5:7c:5a:8b:2a:
         95:70:e2:d1:70:8d:9d:3c:32:f6:b5:ff:b3:19:1b:a8:9f:88:
         b2:61:91:b6:71:ab:90:90:23:b9:d2:dc:bb:f7:00:19:69:69:
         38:18:a2:bd:a2:00:d9:cd:7b:9a:c4:92:93:a4:97:56:0a:e8:
         73:d0:63:23:d6:e4:45:d4:52:48:12:e5:d4:90:95:ca:db:83:
         24:e7:9d:bf:f9:98:52:5a:ba:a2:64:5c:2a:13:4e:95:84:05:
         fd:81:32:c4:9f:3c:a4:bc:63:61:95:30:9c:14:87:79:6e:34:
         4b:3e:ee:f7:60:22:b3:1c:ec:ef:41:4d:e0:07:c9:35:f6:1f:
         1c:5e:4f:23:cc:28:66:21:cb:eb:77:b8:78:fb:56:ce:6b:54:
         9c:9c:41:f6:bf:a9:5b:99:d8:62:01:28:55:50:b3:b8:a1:a2:
         0e:4d:aa:aa:40:a6:6f:5c:9d:35:84:39:3a:68:da:c8:ae:30:
         0a:2e:05:71:47:74:86:45:46:6a:7e:ed:6f:b9:66:b2:d1:00:
         a9:1f:1d:f1:3c:32:62:78:3c:8f:02:a0:10:c4:c9:36:5c:5d:
         e9:99:24:13:9f:2a:c6:5d:f5:5e:49:46:89:16:c1:6c:37:6b:
         cb:4f:d8:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgICAXIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA3MzEw
MTM0MTdaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDdDQTY2Nzc3QUZGMkQ3
NDE0RkQ0NkFCRjMwNUVENUI1NzI5NUY1NUMwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDBXw/U8cYBQ67XEf4DbmOQJi81yewg6nj0i2OpjB9qvXeBc3Lu
DJPJJKOhb2amHw7EuLH1NPRyH3SshlD7a3cPBWi6iDgek/wAXzkWnpPNXXfEbbLe
2Tv5ERQ1gkUjFplgBtR4aO8sr/yzTvNWR2IVy0Ooe+QW/e/+eQCx4MTpi3GrIku/
c3b7Y7tKI3EBF6xK0pu4/pc+eqLtl50LSukrSBLJbG4LA2U5lDE4zymEBbjqu7ix
JOuPyc+YfDXo5TmDu/HGv3kImY1kdleACAXQEvsV66s3OYJuaXaeRgWScXQoX8oB
kndmMqXoUUAKAZFSHuynA9/TkKn0pVfS4BqNAgMBAAGjggIfMIICGzAdBgNVHQ4E
FgQUfKZnd6/y10FP1Gq/MF7VtXKV9VwwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZktabmQ2X3kxMEZQMUdxX01GN1Z0WEtWOVZ3LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAeBggrBgEFBQcBBwEB/wQPMA0wCwQCAAEwBQMD
ANKUMA0GCSqGSIb3DQEBCwUAA4IBAQA9odEyyf5SqyLJZtYO9XxaiyqVcOLRcI2d
PDL2tf+zGRuon4iyYZG2cauQkCO50ty79wAZaWk4GKK9ogDZzXuaxJKTpJdWCuhz
0GMj1uRF1FJIEuXUkJXK24Mk552/+ZhSWrqiZFwqE06VhAX9gTLEnzykvGNhlTCc
FId5bjRLPu73YCKzHOzvQU3gB8k19h8cXk8jzChmIcvrd7h4+1bOa1ScnEH2v6lb
mdhiAShVULO4oaIOTaqqQKZvXJ01hDk6aNrIrjAKLgVxR3SGRUZqfu1vuWay0QCp
Hx3xPDJieDyPAqAQxMk2XF3pmSQTnyrGXfVeSUaJFsFsN2vLT9ia
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org