Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/u-IwJQ3vQh2IzLDbTLOsz5LwrwU.roa
File:                     u-IwJQ3vQh2IzLDbTLOsz5LwrwU.roa (raw, json)
Hash identifier:          XGRyGqGNyNOoGnteonqs0ot7inCycPvNR6/fGI8R7us=
Subject key identifier:   BB:E2:30:25:0D:EF:42:1D:88:CC:B0:DB:4C:B3:AC:CF:92:F0:AF:05
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       58
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/u-IwJQ3vQh2IzLDbTLOsz5LwrwU.roa
Signing time:             Thu 29 Feb 2024 01:31:09 +0000
ROA not before:           Thu 29 Feb 2024 01:31:09 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        210.193.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Feb 29 01:31:09 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=BBE230250DEF421D88CCB0DB4CB3ACCF92F0AF05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:d9:e8:29:52:3f:7b:7f:35:4c:b4:2b:9c:85:
                    b1:6b:6a:e8:8e:6c:de:a8:51:86:1f:df:90:ae:fc:
                    eb:d7:ea:c2:0d:bb:76:0a:a4:d3:30:1d:37:2e:8a:
                    5e:04:ae:2d:21:ff:f9:42:1e:3b:ec:33:c5:57:e3:
                    27:22:fb:bb:96:0f:cd:35:19:38:85:f9:95:15:3f:
                    72:b6:35:6c:8f:be:9f:ea:94:3a:15:12:82:15:68:
                    ab:5c:26:02:2f:d3:bf:b7:c7:b4:b8:7e:26:83:82:
                    03:7d:2c:95:c7:a8:60:91:8c:d0:34:83:91:00:29:
                    79:63:95:fd:47:0b:aa:92:d5:14:2f:8e:03:25:42:
                    aa:a5:1b:cb:49:38:65:21:0b:c5:14:30:32:96:1c:
                    02:97:cb:e7:dd:a2:11:3c:ce:50:bf:46:c1:af:c1:
                    61:55:61:ee:ca:df:5c:61:a9:21:e3:84:03:b7:b9:
                    06:d4:9f:b3:06:5d:f7:e4:ee:8c:c0:ec:65:c5:99:
                    b9:56:94:05:5a:bc:5a:9a:53:a5:c2:29:bf:55:ba:
                    64:5e:01:38:73:63:9c:b6:f2:42:d3:b1:00:5f:78:
                    77:bb:c7:ac:f6:5c:5d:0b:69:12:9d:6a:02:57:27:
                    c5:59:49:52:0a:e9:3e:6e:a0:10:c5:67:3f:33:4b:
                    ee:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:E2:30:25:0D:EF:42:1D:88:CC:B0:DB:4C:B3:AC:CF:92:F0:AF:05
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/u-IwJQ3vQh2IzLDbTLOsz5LwrwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.193.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:8d:40:a2:23:c1:3d:51:9d:0c:ab:70:8c:55:88:47:d8:93:
         f1:a6:70:c9:a2:b0:89:8b:dd:65:ce:40:ee:2a:c0:38:ee:58:
         df:eb:29:fa:e9:ed:1a:72:2b:04:3a:bb:b1:d6:0c:2a:1b:6c:
         af:88:3b:dd:78:a0:e0:b3:a1:80:c4:72:af:46:40:bb:d9:d1:
         db:4f:bb:f8:01:59:57:ae:d1:c1:34:98:15:9b:3d:4b:e7:2f:
         75:84:4d:25:49:4f:ca:b8:ff:05:0d:a1:c6:05:d1:da:a9:4a:
         35:23:89:8f:53:16:d5:62:c7:d5:fa:e5:33:29:ad:2d:4b:81:
         0c:ee:6b:ca:55:ef:16:96:0c:34:16:c4:1b:2d:6a:4d:15:28:
         6b:74:de:53:3e:ed:d2:eb:20:ec:67:b6:0f:52:f1:11:d3:c8:
         23:b6:97:cd:63:03:21:cf:12:38:06:66:68:18:60:0b:72:a4:
         06:5f:97:b3:fd:df:99:6e:75:62:27:2f:75:7d:ec:18:51:a0:
         88:fe:b5:78:fa:f4:05:27:43:9d:a5:44:6a:55:4c:96:f2:c1:
         53:b0:dc:59:82:43:68:cf:a9:2c:18:9b:5b:62:52:bb:f1:34:
         3d:73:12:ad:cc:ac:08:84:9d:ce:5d:6a:5d:46:5e:b4:78:33:
         06:2a:d3:ab
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg0RUZG
MUFCNkVBREEyNzNCQTA2NkRCMEY3N0I3OUQ2QTBEOTAxNTQyMB4XDTI0MDIyOTAx
MzEwOVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQkJFMjMwMjUwREVGNDIx
RDg4Q0NCMERCNENCM0FDQ0Y5MkYwQUYwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJXZ6ClSP3t/NUy0K5yFsWtq6I5s3qhRhh/fkK7869fqwg27dgqk
0zAdNy6KXgSuLSH/+UIeO+wzxVfjJyL7u5YPzTUZOIX5lRU/crY1bI++n+qUOhUS
ghVoq1wmAi/Tv7fHtLh+JoOCA30slceoYJGM0DSDkQApeWOV/UcLqpLVFC+OAyVC
qqUby0k4ZSELxRQwMpYcApfL592iETzOUL9Gwa/BYVVh7srfXGGpIeOEA7e5BtSf
swZd9+TujMDsZcWZuVaUBVq8WppTpcIpv1W6ZF4BOHNjnLbyQtOxAF94d7vHrPZc
XQtpEp1qAlcnxVlJUgrpPm6gEMVnPzNL7qkCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBS74jAlDe9CHYjMsNtMs6zPkvCvBTAfBgNVHSMEGDAWgBRO/xq26tonO6Bm2w93
t51qDZAVQjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNjAyL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcyUUZVSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1R2OGF0dXJhSnp1Z1p0c1BkN2VkYWcy
UUZVSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC82MDIvdS1Jd0pRM3ZRaDJJekxEYlRMT3N6NUx3cndVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEANLBcTANBgkqhkiG9w0BAQsFAAOCAQEAV41AoiPBPVGdDKtwjFWIR9iT8aZw
yaKwiYvdZc5A7irAOO5Y3+sp+untGnIrBDq7sdYMKhtsr4g73Xig4LOhgMRyr0ZA
u9nR20+7+AFZV67RwTSYFZs9S+cvdYRNJUlPyrj/BQ2hxgXR2qlKNSOJj1MW1WLH
1frlMymtLUuBDO5rylXvFpYMNBbEGy1qTRUoa3TeUz7t0usg7Ge2D1LxEdPII7aX
zWMDIc8SOAZmaBhgC3KkBl+Xs/3fmW51YicvdX3sGFGgiP61ePr0BSdDnaVEalVM
lvLBU7DcWYJDaM+pLBibW2JSu/E0PXMSrcysCISdzl1qXUZetHgzBirTqw==
-----END CERTIFICATE-----
Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org