Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/Bze-Rm5IWgOV-FjRldN78I8wg2I.roa
File:                     Bze-Rm5IWgOV-FjRldN78I8wg2I.roa (raw, json)
Hash identifier:          uoDtbjdHtz35lz85YsTA67fadwtjJ630aWTqYBIOp+o=
Subject key identifier:   07:37:BE:46:6E:48:5A:03:95:F8:58:D1:95:D3:7B:F0:8F:30:83:62
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0205
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Bze-Rm5IWgOV-FjRldN78I8wg2I.roa
Signing time:             Wed 31 Jul 2024 01:29:05 +0000
ROA not before:           Wed 31 Jul 2024 01:29:05 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        202.43.68.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 517 (0x205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:05 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=0737BE466E485A0395F858D195D37BF08F308362
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:57:a2:04:cc:70:ab:06:be:4c:af:97:10:25:
                    5c:26:77:11:36:5a:c7:ec:23:93:8b:ac:36:fc:f5:
                    c8:85:a2:08:0e:5d:11:5c:7e:ae:93:d9:8d:6f:bd:
                    75:5a:78:fd:a1:f1:c1:ec:17:a5:12:f9:91:31:bd:
                    b4:97:f6:f1:af:bb:36:c6:92:db:30:9b:7e:e1:7f:
                    77:2e:5a:68:10:bb:f4:5a:38:2d:bb:67:ed:64:76:
                    a7:93:61:62:02:a2:6a:8a:eb:f1:4e:64:ad:0b:07:
                    3c:8b:22:67:7f:89:58:f1:84:57:09:7f:65:7c:f7:
                    e4:63:ff:57:b5:c8:e2:ae:10:86:10:58:a1:da:3e:
                    13:e0:e3:a4:70:64:04:93:18:3e:b7:f8:a8:7f:19:
                    c3:70:f9:bf:3e:0d:52:b3:3d:b2:2e:bf:c9:38:03:
                    22:1d:0c:f2:d9:28:35:11:b7:dc:3d:86:5c:0c:fa:
                    82:b8:0d:25:dc:8e:cf:d4:4a:c1:db:eb:0f:a2:d1:
                    73:bd:ff:f6:f0:ec:1d:41:d7:50:72:ac:42:9b:fd:
                    a3:95:f1:f2:a4:e6:88:02:47:85:cb:10:49:a5:69:
                    25:0e:a1:8c:83:0f:2b:83:75:e8:63:81:66:0b:33:
                    c7:01:59:bc:aa:8b:c2:be:e6:19:f4:1e:a8:3b:56:
                    c8:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:37:BE:46:6E:48:5A:03:95:F8:58:D1:95:D3:7B:F0:8F:30:83:62
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/Bze-Rm5IWgOV-FjRldN78I8wg2I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.43.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9b:a5:de:21:32:d4:23:19:24:9b:77:0b:57:88:da:74:2c:e8:
         ad:a7:5c:ca:b8:41:ca:5b:d5:5e:fd:64:77:b5:39:9b:7d:62:
         2b:5a:7c:26:37:8a:3f:cd:47:a2:81:c2:71:66:b1:19:bf:cc:
         c8:55:04:78:39:29:ef:d6:b9:2e:f0:ea:0d:57:4d:d1:0b:2a:
         a9:5b:b6:55:e9:44:6a:b5:4e:db:e1:89:63:d3:fa:db:18:e4:
         cb:e2:26:5e:7a:20:48:c2:90:21:ed:ba:7b:0f:a1:6a:86:64:
         29:a7:28:7a:c2:e9:6a:8b:ff:97:3c:20:4f:fc:1b:5c:9b:89:
         f3:18:10:69:66:30:c8:33:53:93:b7:d3:15:05:dc:ad:df:8b:
         9f:cb:63:6a:68:bb:cf:79:dc:68:aa:e4:1f:37:77:7c:18:fd:
         89:0d:4b:81:33:ac:0a:c4:13:ac:62:e7:24:96:df:73:10:06:
         7f:92:d0:be:c2:58:80:06:f1:dc:2b:b5:4a:10:19:5c:16:fd:
         94:09:c1:3c:63:af:12:04:56:94:32:2d:db:ea:5f:21:a9:e1:
         0a:00:5e:c5:81:ef:7b:10:0a:17:64:65:bd:37:08:cf:08:df:
         af:07:b3:f5:a0:32:ca:d1:fb:f1:74:c6:d9:28:4f:ae:c4:ea:
         c9:a7:39:68
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAgUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw
MTI5MDVaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDA3MzdCRTQ2NkU0ODVB
MDM5NUY4NThEMTk1RDM3QkYwOEYzMDgzNjIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC+V6IEzHCrBr5Mr5cQJVwmdxE2WsfsI5OLrDb89ciFoggOXRFc
fq6T2Y1vvXVaeP2h8cHsF6US+ZExvbSX9vGvuzbGktswm37hf3cuWmgQu/RaOC27
Z+1kdqeTYWIComqK6/FOZK0LBzyLImd/iVjxhFcJf2V89+Rj/1e1yOKuEIYQWKHa
PhPg46RwZASTGD63+Kh/GcNw+b8+DVKzPbIuv8k4AyIdDPLZKDURt9w9hlwM+oK4
DSXcjs/USsHb6w+i0XO9//bw7B1B11ByrEKb/aOV8fKk5ogCR4XLEEmlaSUOoYyD
DyuDdehjgWYLM8cBWbyqi8K+5hn0Hqg7VshnAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUBze+Rm5IWgOV+FjRldN78I8wg2IwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL0J6ZS1SbTVJV2dPVi1GalJsZE43OEk4d2cySS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALKK0QwDQYJKoZIhvcNAQELBQADggEBAJul3iEy1CMZJJt3C1eI2nQs6K2n
XMq4Qcpb1V79ZHe1OZt9YitafCY3ij/NR6KBwnFmsRm/zMhVBHg5Ke/WuS7w6g1X
TdELKqlbtlXpRGq1TtvhiWPT+tsY5MviJl56IEjCkCHtunsPoWqGZCmnKHrC6WqL
/5c8IE/8G1ybifMYEGlmMMgzU5O30xUF3K3fi5/LY2pou8953Giq5B83d3wY/YkN
S4EzrArEE6xi5ySW33MQBn+S0L7CWIAG8dwrtUoQGVwW/ZQJwTxjrxIEVpQyLdvq
XyGp4QoAXsWB73sQChdkZb03CM8I368Hs/WgMsrR+/F0xtkoT67E6smnOWg=
-----END CERTIFICATE-----
Generated at Fri Nov 22 11:45:57 2024 by rpki-client on console-ams.rpki-client.org