Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/VwgoIU88lgBkZeTVDFrkQZTVcUI.roa
File:                     VwgoIU88lgBkZeTVDFrkQZTVcUI.roa (raw, json)
Hash identifier:          4TyLulNs0XV2D2bhrLlk3ZvNc0zhY4XM9WNAkYhnR94=
Subject key identifier:   57:08:28:21:4F:3C:96:00:64:65:E4:D5:0C:5A:E4:41:94:D5:71:42
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02A1
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VwgoIU88lgBkZeTVDFrkQZTVcUI.roa
Signing time:             Sat 31 Aug 2024 01:40:40 +0000
ROA not before:           Sat 31 Aug 2024 01:40:40 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        210.172.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 673 (0x2a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:40:40 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=570828214F3C96006465E4D50C5AE44194D57142
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:06:ac:fc:d1:ea:b1:49:03:ec:8f:dd:9c:0b:
                    47:4f:fd:c9:cd:48:79:69:3c:65:25:9e:02:33:cd:
                    d8:f0:d9:1b:38:7e:2f:14:15:b7:81:cf:c8:1b:55:
                    f7:83:99:8d:f2:e4:59:69:56:1c:9d:3d:9e:17:86:
                    46:60:21:d4:7d:a3:fa:7c:a7:23:27:39:34:93:c0:
                    ae:18:e2:d9:86:33:5a:dc:cf:09:6c:70:eb:d9:d8:
                    14:a4:8c:59:75:7a:9a:61:13:52:ec:a4:91:06:57:
                    dc:ea:ba:2b:b6:a8:cb:79:eb:7d:f8:01:90:cb:76:
                    74:ea:f1:5c:3f:da:03:22:72:8e:29:a3:d4:25:02:
                    47:8a:d3:89:fa:99:28:84:d3:48:da:82:da:7a:58:
                    a1:bf:06:88:0a:b0:d0:49:c1:20:9d:89:a9:8f:51:
                    fd:33:3f:b9:ef:e7:cb:11:c4:19:a3:7d:3b:a7:47:
                    42:8c:74:bf:68:ea:86:4b:19:42:99:f7:dd:81:d1:
                    09:f9:13:34:f5:af:20:32:56:2c:20:c2:3f:41:2d:
                    cd:4f:79:9d:bd:bc:6e:8c:67:eb:5c:32:62:cb:21:
                    7a:c0:88:dc:41:3d:b5:44:7c:28:a1:48:39:b3:60:
                    20:f4:a8:ca:92:75:64:bb:61:54:6d:e6:3c:3d:4b:
                    e5:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:08:28:21:4F:3C:96:00:64:65:E4:D5:0C:5A:E4:41:94:D5:71:42
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/VwgoIU88lgBkZeTVDFrkQZTVcUI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1c:8f:9a:0c:9d:b8:33:04:8c:94:1c:50:cd:2f:fc:04:a4:59:
         02:dc:ea:d2:e3:e1:76:c7:00:73:30:d9:8e:9e:08:02:bd:38:
         58:bc:d1:cb:79:bc:09:b8:ac:00:fe:99:ef:de:22:57:96:b5:
         fa:d3:bf:bd:2f:8a:81:33:07:bb:7d:94:32:38:8f:79:d2:76:
         12:d3:38:f8:35:ec:c9:11:b6:d6:0a:bf:b2:1d:24:9f:44:8b:
         63:a9:0e:0c:9b:ab:29:d5:25:e7:83:14:a1:f8:a3:05:87:2c:
         70:ea:23:35:7d:96:e9:c8:14:9a:a9:e0:34:70:6e:aa:95:29:
         20:e8:e1:ce:ba:57:dd:e6:2a:9c:17:c4:e6:cd:20:03:11:4c:
         7a:ca:fc:ea:70:01:13:cd:da:03:73:5a:6c:34:8f:9b:d7:67:
         f5:a9:cf:ec:e0:cc:f1:03:ce:7a:fb:15:47:59:5d:74:9e:44:
         02:f8:5e:38:d6:a2:c6:48:06:76:43:85:19:c0:a1:37:6a:6e:
         2d:39:98:73:d6:ca:22:65:04:e8:5a:c4:41:16:33:09:ba:6a:
         ab:17:41:27:67:e5:d2:f3:15:ee:38:ee:4d:00:ac:ac:1c:90:
         e5:6b:2d:df:b2:bc:83:d9:44:37:d7:5d:67:28:a0:e6:4c:0c:
         d5:47:df:3b
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAqEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQwNDBaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDU3MDgyODIxNEYzQzk2
MDA2NDY1RTRENTBDNUFFNDQxOTRENTcxNDIwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDFBqz80eqxSQPsj92cC0dP/cnNSHlpPGUlngIzzdjw2Rs4fi8U
FbeBz8gbVfeDmY3y5FlpVhydPZ4XhkZgIdR9o/p8pyMnOTSTwK4Y4tmGM1rczwls
cOvZ2BSkjFl1epphE1LspJEGV9zquiu2qMt56334AZDLdnTq8Vw/2gMico4po9Ql
AkeK04n6mSiE00jagtp6WKG/BogKsNBJwSCdiamPUf0zP7nv58sRxBmjfTunR0KM
dL9o6oZLGUKZ992B0Qn5EzT1ryAyViwgwj9BLc1PeZ29vG6MZ+tcMmLLIXrAiNxB
PbVEfCihSDmzYCD0qMqSdWS7YVRt5jw9S+VBAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUVwgoIU88lgBkZeTVDFrkQZTVcUIwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL1Z3Z29JVTg4bGdCa1plVFZERnJrUVpUVmNVSS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATSrPAwDQYJKoZIhvcNAQELBQADggEBAByPmgyduDMEjJQcUM0v/ASkWQLc
6tLj4XbHAHMw2Y6eCAK9OFi80ct5vAm4rAD+me/eIleWtfrTv70vioEzB7t9lDI4
j3nSdhLTOPg17MkRttYKv7IdJJ9Ei2OpDgybqynVJeeDFKH4owWHLHDqIzV9lunI
FJqp4DRwbqqVKSDo4c66V93mKpwXxObNIAMRTHrK/OpwARPN2gNzWmw0j5vXZ/Wp
z+zgzPEDznr7FUdZXXSeRAL4XjjWosZIBnZDhRnAoTdqbi05mHPWyiJlBOhaxEEW
Mwm6aqsXQSdn5dLzFe447k0ArKwckOVrLd+yvIPZRDfXXWcooOZMDNVH3zs=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org