Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8RSvbLO7LGxU7iYyLvFteFjlvA.roa
File:                     g8RSvbLO7LGxU7iYyLvFteFjlvA.roa (raw, json)
Hash identifier:          rHogyXi4ez44DbClOx6T1p6DTwzQ67wPlABY3OeikL8=
Subject key identifier:   83:C4:52:BD:B2:CE:EC:B1:B1:53:B8:98:C8:BB:C5:B5:E1:63:96:F0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       EE
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8RSvbLO7LGxU7iYyLvFteFjlvA.roa
Signing time:             Fri 23 Jun 2023 04:42:08 +0000
ROA not before:           Fri 23 Jun 2023 04:42:08 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.130.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 238 (0xee)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jun 23 04:42:08 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=83C452BDB2CEECB1B153B898C8BBC5B5E16396F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:50:1a:44:c6:aa:39:89:94:c0:32:16:f0:a2:
                    8e:06:c3:bf:1a:04:88:04:ac:41:72:61:d9:e2:7f:
                    42:a0:3b:9a:c4:12:93:3e:80:b3:fa:47:3e:ef:f2:
                    db:f4:b1:29:74:b1:41:75:7b:e3:05:ad:d7:63:d2:
                    23:09:f1:85:fa:16:8c:fc:9b:7a:9e:af:89:12:12:
                    92:4b:c0:2a:cc:28:21:cf:ee:8a:c6:a1:bd:12:62:
                    b6:1f:a9:77:75:20:01:82:11:40:7a:f5:6f:80:c2:
                    44:86:5a:ff:e8:a7:a1:9c:cc:11:4e:be:99:5b:33:
                    9b:b9:a2:d4:ed:5b:91:ab:ed:2e:89:bb:f2:0f:66:
                    97:7b:9f:38:8f:6e:ea:95:d6:b5:65:9e:a9:87:38:
                    69:f8:c1:6d:74:04:e8:37:e7:99:c0:51:81:7d:8a:
                    18:5b:2f:2f:76:ab:ef:29:bb:86:21:65:cd:8a:53:
                    ea:68:b9:06:e3:83:de:7d:7d:2b:0e:96:0e:5e:c2:
                    9e:ca:96:1c:b8:b6:84:8b:85:bf:71:d1:90:2f:76:
                    b6:13:5e:80:50:89:4f:69:98:16:9e:ff:19:71:0b:
                    bf:ab:83:bf:d7:c4:78:e2:b0:3d:fa:6c:2a:c5:24:
                    8b:54:55:a0:0d:3b:53:8d:72:fe:80:2d:6b:14:68:
                    db:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:C4:52:BD:B2:CE:EC:B1:B1:53:B8:98:C8:BB:C5:B5:E1:63:96:F0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/g8RSvbLO7LGxU7iYyLvFteFjlvA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.130.0/24

    Signature Algorithm: sha256WithRSAEncryption
         58:ed:f5:ff:ae:38:3a:4d:b1:a9:84:08:74:59:2c:de:d9:96:
         ea:1b:c6:1e:66:d2:a0:7a:98:85:94:be:e2:fe:7e:08:15:da:
         61:e1:d0:ef:35:83:19:68:4c:d0:26:79:26:73:c4:49:17:9a:
         48:02:08:10:22:26:fb:58:11:94:e5:d6:77:0e:07:fd:ac:ed:
         46:72:8f:92:17:67:eb:c4:f6:2c:d1:59:a5:e6:fb:31:86:a1:
         58:cb:80:42:67:a9:91:dd:73:b4:50:01:7a:a6:bf:54:f5:c8:
         89:94:8a:bb:83:fe:d4:f6:e0:21:ee:24:ca:36:24:e9:75:2f:
         e0:53:56:f1:e2:4c:39:58:26:32:7f:bf:7f:45:a3:24:c7:7d:
         d3:69:09:95:76:a6:a6:22:1f:12:15:1a:b4:57:33:b4:50:cf:
         73:b7:d3:89:a2:31:dc:f3:d0:67:d7:c7:16:5d:6e:aa:32:3c:
         01:65:f1:d7:63:6f:ef:7a:73:42:36:a9:65:18:4f:13:04:7f:
         b6:57:55:df:7b:3f:af:46:b5:b4:95:7b:b3:c7:24:94:48:b9:
         41:5e:8b:17:b1:9f:c6:b2:b3:43:2f:24:af:ef:1c:14:c2:3e:
         da:8c:13:8d:e3:81:c0:61:b4:7c:92:45:7a:b4:aa:61:0f:a8:
         44:3c:97:a0
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAO4wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yMzA2MjMw
NDQyMDhaFw0yNDA2MTQwMTMwMDJaMDMxMTAvBgNVBAMTKDgzQzQ1MkJEQjJDRUVD
QjFCMTUzQjg5OEM4QkJDNUI1RTE2Mzk2RjAwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDtUBpExqo5iZTAMhbwoo4Gw78aBIgErEFyYdnif0KgO5rEEpM+
gLP6Rz7v8tv0sSl0sUF1e+MFrddj0iMJ8YX6Foz8m3qer4kSEpJLwCrMKCHP7orG
ob0SYrYfqXd1IAGCEUB69W+AwkSGWv/op6GczBFOvplbM5u5otTtW5Gr7S6Ju/IP
Zpd7nziPbuqV1rVlnqmHOGn4wW10BOg355nAUYF9ihhbLy92q+8pu4YhZc2KU+po
uQbjg959fSsOlg5ewp7Klhy4toSLhb9x0ZAvdrYTXoBQiU9pmBae/xlxC7+rg7/X
xHjisD36bCrFJItUVaANO1ONcv6ALWsUaNsDAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUg8RSvbLO7LGxU7iYyLvFteFjlvAwHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvZzhSU3ZiTE83TEd4VTdpWXlMdkZ0ZUZqbHZBLnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
ANKUgjANBgkqhkiG9w0BAQsFAAOCAQEAWO31/644Ok2xqYQIdFks3tmW6hvGHmbS
oHqYhZS+4v5+CBXaYeHQ7zWDGWhM0CZ5JnPESReaSAIIECIm+1gRlOXWdw4H/azt
RnKPkhdn68T2LNFZpeb7MYahWMuAQmepkd1ztFABeqa/VPXIiZSKu4P+1PbgIe4k
yjYk6XUv4FNW8eJMOVgmMn+/f0WjJMd902kJlXampiIfEhUatFcztFDPc7fTiaIx
3PPQZ9fHFl1uqjI8AWXx12Nv73pzQjapZRhPEwR/tldV33s/r0a1tJV7s8cklEi5
QV6LF7GfxrKzQy8kr+8cFMI+2owTjeOBwGG0fJJFerSqYQ+oRDyXoA==
-----END CERTIFICATE-----
Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org