Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/ABdhFIsqysgbyh5mGrSchfbbMVk.roa
File:                     ABdhFIsqysgbyh5mGrSchfbbMVk.roa (raw, json)
Hash identifier:          3RVgV4826cyUcYHV1Dc/4CJWCa/SoFhSFZ1qHe0H5C8=
Subject key identifier:   00:17:61:14:8B:2A:CA:C8:1B:CA:1E:66:1A:B4:9C:85:F6:DB:31:59
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0193
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ABdhFIsqysgbyh5mGrSchfbbMVk.roa
Signing time:             Sun 01 Oct 2023 01:34:36 +0000
ROA not before:           Sun 01 Oct 2023 01:34:36 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        180.92.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 403 (0x193)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:36 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=001761148B2ACAC81BCA1E661AB49C85F6DB3159
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:4d:5a:30:b2:43:8f:b1:d7:ef:02:0e:60:d5:
                    0e:45:46:d4:77:3c:63:fd:42:f0:c4:35:10:fb:c5:
                    1a:86:7f:58:94:65:14:09:42:41:19:80:a5:1a:21:
                    8f:f8:5c:9d:73:63:9b:20:44:29:19:99:36:0e:f8:
                    40:51:a1:4c:2d:34:9a:1a:d6:5b:d1:b5:6e:82:58:
                    21:87:d3:41:97:39:d4:47:96:aa:b4:a2:e8:59:93:
                    22:fb:bc:7c:0a:d7:b6:4e:fe:9c:f8:80:56:46:3d:
                    68:95:60:58:3f:2a:61:5f:77:c6:1d:db:3a:f8:4f:
                    be:38:1e:e7:ba:a2:13:b8:ec:84:7f:98:7b:d9:86:
                    b0:e9:38:b1:ac:6d:e1:a0:d7:3c:e5:9e:ea:9d:96:
                    f2:bb:b4:a6:d9:1d:ff:d6:12:31:71:27:90:1b:ee:
                    65:3e:02:c6:7d:2e:95:af:d5:b7:e5:07:75:7c:26:
                    b6:2d:99:06:25:6a:d3:90:85:1d:fd:5e:a9:66:51:
                    f5:64:36:1f:c3:f9:0e:13:07:c3:97:30:3e:c7:99:
                    20:fd:d2:b0:36:61:23:b2:96:a6:ff:91:a2:16:e8:
                    e0:7f:ad:cc:1e:d1:eb:40:49:81:ce:98:9f:82:d6:
                    34:10:ea:8f:93:df:ea:79:0c:a5:94:d6:30:74:f7:
                    4c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:17:61:14:8B:2A:CA:C8:1B:CA:1E:66:1A:B4:9C:85:F6:DB:31:59
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/ABdhFIsqysgbyh5mGrSchfbbMVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.92.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8f:c7:e4:9a:ad:c7:2a:01:20:9a:4e:4b:d8:98:0c:f7:77:d1:
         bc:24:f7:b9:42:ea:3d:31:68:13:dd:6f:ed:05:62:dc:76:eb:
         49:57:d6:9e:35:a1:b7:3b:34:aa:99:5b:11:02:bc:16:55:c4:
         bf:62:58:4d:c4:20:4b:5b:42:05:1a:bc:65:47:23:4a:90:4b:
         45:19:ba:ad:b2:88:d6:95:45:0c:7d:15:34:37:e9:9f:32:66:
         bd:fc:ae:66:cd:46:84:ae:3a:cd:09:cc:f9:c8:c4:e1:78:37:
         a6:5e:f1:72:06:19:7d:0f:94:8f:09:9f:1b:3b:21:57:d6:7e:
         4e:17:e6:23:fa:95:6c:c7:ff:b6:7c:00:0c:4c:73:97:2b:9a:
         84:b4:0c:36:b2:2c:a6:7e:f2:d4:2e:11:16:a0:9f:59:26:71:
         09:6c:b6:4b:40:51:ae:71:94:3d:e3:d1:17:a9:fb:71:49:b0:
         b1:5c:7d:48:88:f4:2c:e9:cf:c6:26:62:3d:dd:53:a5:dd:3e:
         55:49:a8:f6:7e:01:4e:73:eb:c7:30:c0:1e:4a:bc:b3:80:f9:
         d8:8c:78:d2:44:d9:b5:79:01:40:63:01:60:fe:ce:ab:a7:bc:
         e3:ca:5e:f2:0b:12:fb:56:a2:7c:bb:a8:92:72:7a:9d:c5:31:
         d6:97:7d:75
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAZMwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MzZaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDAwMTc2MTE0OEIyQUNB
QzgxQkNBMUU2NjFBQjQ5Qzg1RjZEQjMxNTkwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+TVowskOPsdfvAg5g1Q5FRtR3PGP9QvDENRD7xRqGf1iUZRQJ
QkEZgKUaIY/4XJ1zY5sgRCkZmTYO+EBRoUwtNJoa1lvRtW6CWCGH00GXOdRHlqq0
ouhZkyL7vHwK17ZO/pz4gFZGPWiVYFg/KmFfd8Yd2zr4T744Hue6ohO47IR/mHvZ
hrDpOLGsbeGg1zzlnuqdlvK7tKbZHf/WEjFxJ5Ab7mU+AsZ9LpWv1bflB3V8JrYt
mQYlatOQhR39XqlmUfVkNh/D+Q4TB8OXMD7HmSD90rA2YSOylqb/kaIW6OB/rcwe
0etASYHOmJ+C1jQQ6o+T3+p5DKWU1jB090zTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUABdhFIsqysgbyh5mGrSchfbbMVkwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0FCZGhGSXNxeXNnYnloNW1HclNjaGZiYk1Way5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAW0XCAwDQYJKoZIhvcNAQELBQADggEBAI/H5JqtxyoBIJpOS9iYDPd30bwk
97lC6j0xaBPdb+0FYtx260lX1p41obc7NKqZWxECvBZVxL9iWE3EIEtbQgUavGVH
I0qQS0UZuq2yiNaVRQx9FTQ36Z8yZr38rmbNRoSuOs0JzPnIxOF4N6Ze8XIGGX0P
lI8Jnxs7IVfWfk4X5iP6lWzH/7Z8AAxMc5crmoS0DDayLKZ+8tQuERagn1kmcQls
tktAUa5xlD3j0Rep+3FJsLFcfUiI9Czpz8YmYj3dU6XdPlVJqPZ+AU5z68cwwB5K
vLOA+diMeNJE2bV5AUBjAWD+zqunvOPKXvILEvtWony7qJJyep3FMdaXfXU=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org