Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/j9vBieJeZRMRoOM3eS1tZBeD6J4.roa
File:                     j9vBieJeZRMRoOM3eS1tZBeD6J4.roa (raw, json)
Hash identifier:          ++cXMBg4qWHhsd2pcWwH5rVjzxdQ0hPwgD/brtn/CKo=
Subject key identifier:   8F:DB:C1:89:E2:5E:65:13:11:A0:E3:37:79:2D:6D:64:17:83:E8:9E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       018F
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/j9vBieJeZRMRoOM3eS1tZBeD6J4.roa
Signing time:             Sat 31 Aug 2024 01:29:15 +0000
ROA not before:           Sat 31 Aug 2024 01:29:15 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     38628
IP address blocks:        163.131.80.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 399 (0x18f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:15 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8FDBC189E25E651311A0E337792D6D641783E89E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:95:54:4e:5b:ed:75:f0:15:d6:96:72:aa:9a:
                    7c:f9:34:51:03:90:1d:5f:51:53:91:c1:db:a8:11:
                    c2:46:25:50:47:c0:46:de:50:2d:26:09:2b:82:9b:
                    bf:c7:34:bd:06:09:b0:ea:9f:d1:62:83:d2:30:62:
                    55:85:9c:45:54:ea:f1:bc:1b:5c:ae:73:9a:37:7e:
                    19:f8:15:b8:cd:23:74:d7:64:9c:e6:bf:70:0b:7f:
                    58:07:be:80:29:83:e1:1a:2c:2b:d1:a1:9c:c2:d3:
                    d6:30:c5:69:cc:23:56:85:b8:1a:1a:03:7e:f9:98:
                    3f:4c:20:b3:ad:c3:35:e1:cb:93:c4:81:65:f7:37:
                    b5:1e:4b:27:3c:af:01:d0:87:aa:e2:c3:dc:b7:26:
                    3b:e2:28:fe:17:7c:33:4d:a8:ee:24:e4:5e:3d:19:
                    1a:ea:c3:24:d2:dc:b9:d8:92:b2:5e:7a:1d:62:56:
                    8d:fc:eb:f5:72:48:44:a9:d1:bc:41:a2:9c:f1:1b:
                    2d:f0:49:0b:75:cc:73:d4:46:f6:bc:63:92:b0:35:
                    c1:bb:73:cf:1d:fa:d9:3d:cd:d2:ea:8c:12:fe:93:
                    c2:38:0b:5c:63:cc:2e:df:76:4a:90:e5:aa:e3:f6:
                    27:37:fd:0e:5c:7e:e2:5f:12:cc:12:32:0e:4c:7a:
                    db:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:DB:C1:89:E2:5E:65:13:11:A0:E3:37:79:2D:6D:64:17:83:E8:9E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/j9vBieJeZRMRoOM3eS1tZBeD6J4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.131.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:47:1a:95:fb:b5:8a:4a:53:ab:4d:9d:7d:93:e7:7e:ac:ce:
         94:b5:b2:35:78:02:4c:d0:c5:ec:63:dc:55:3f:db:28:71:b5:
         c2:b3:47:ba:de:d8:bf:8b:39:5a:40:89:58:ed:b3:5c:ca:ec:
         5f:93:34:08:ee:d0:26:6f:65:e5:fe:0f:df:b3:93:c6:8e:95:
         21:14:87:45:b3:75:b3:e3:f5:46:7b:b4:70:2d:66:6b:ad:77:
         9e:1a:e7:ba:a1:1f:6d:13:c7:70:06:5a:70:54:61:89:e3:0d:
         4a:42:c8:9d:f4:e1:0e:6b:fa:40:7e:2b:f2:2a:d9:28:53:0c:
         c1:b6:5a:87:91:75:14:65:eb:f8:7f:40:94:81:eb:4e:36:ec:
         4c:d8:55:be:6b:2e:38:fc:aa:d9:98:cd:7e:d9:7e:0f:2e:77:
         eb:7b:05:8a:90:9f:41:7b:16:29:7e:a3:de:7f:6b:4b:79:ea:
         1b:86:c0:9e:c3:75:45:5a:61:33:fc:eb:94:7a:3a:3c:09:b4:
         9f:7b:19:2c:ac:9f:21:92:3b:93:ea:f5:e3:72:69:c6:b7:f5:
         51:79:40:d3:12:5a:41:c3:0d:c3:67:6b:f2:e5:96:0b:ec:a7:
         31:fd:35:51:f6:9a:c9:c4:61:57:cc:e7:dc:58:60:a0:1e:2a:
         a6:06:a2:26
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgICAY8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoMjk4
M0NGRDVGOENBRkEwMDY4RDJFQkEyNUVEMEY3MDEyNDRCMTJGOTAeFw0yNDA4MzEw
MTI5MTVaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDhGREJDMTg5RTI1RTY1
MTMxMUEwRTMzNzc5MkQ2RDY0MTc4M0U4OUUwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC/lVROW+118BXWlnKqmnz5NFEDkB1fUVORwduoEcJGJVBHwEbe
UC0mCSuCm7/HNL0GCbDqn9Fig9IwYlWFnEVU6vG8G1yuc5o3fhn4FbjNI3TXZJzm
v3ALf1gHvoApg+EaLCvRoZzC09YwxWnMI1aFuBoaA375mD9MILOtwzXhy5PEgWX3
N7UeSyc8rwHQh6riw9y3JjviKP4XfDNNqO4k5F49GRrqwyTS3LnYkrJeeh1iVo38
6/VySESp0bxBopzxGy3wSQt1zHPURva8Y5KwNcG7c88d+tk9zdLqjBL+k8I4C1xj
zC7fdkqQ5arj9ic3/Q5cfuJfEswSMg5MettTAgMBAAGjggIgMIICHDAdBgNVHQ4E
FgQUj9vBieJeZRMRoOM3eS1tZBeD6J4wHwYDVR0jBBgwFoAUKYPP1fjK+gBo0uui
XtD3ASRLEvkwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBkBgNVHR8EXTBbMFmg
V6BVhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzYvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JMRXZrLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvS1lQUDFmakstZ0JvMHV1aVh0RDNBU1JM
RXZrLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgbkGCCsGAQUFBwELBIGsMIGpMF8GCCsG
AQUFBzALhlNyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzYvajl2QmllSmVaUk1Sb09NM2VTMXRaQmVENko0LnJvYTBGBggr
BgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3JyZHAv
YXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgME
BKODUDANBgkqhkiG9w0BAQsFAAOCAQEAmUcalfu1ikpTq02dfZPnfqzOlLWyNXgC
TNDF7GPcVT/bKHG1wrNHut7Yv4s5WkCJWO2zXMrsX5M0CO7QJm9l5f4P37OTxo6V
IRSHRbN1s+P1Rnu0cC1ma613nhrnuqEfbRPHcAZacFRhieMNSkLInfThDmv6QH4r
8irZKFMMwbZah5F1FGXr+H9AlIHrTjbsTNhVvmsuOPyq2ZjNftl+Dy5363sFipCf
QXsWKX6j3n9rS3nqG4bAnsN1RVphM/zrlHo6PAm0n3sZLKyfIZI7k+r143Jpxrf1
UXlA0xJaQcMNw2dr8uWWC+ynMf01UfaaycRhV8zn3FhgoB4qpgaiJg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org