Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/a54H1pdFDnpgkS6Fc4rPXJsHVjE.roa
File:                     a54H1pdFDnpgkS6Fc4rPXJsHVjE.roa (raw, json)
Hash identifier:          KZ2M7NECaoZbWNa38WZdgXBFfgqvof6pynimrU354IU=
Subject key identifier:   6B:9E:07:D6:97:45:0E:7A:60:91:2E:85:73:8A:CF:5C:9B:07:56:31
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0212
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/a54H1pdFDnpgkS6Fc4rPXJsHVjE.roa
Signing time:             Wed 31 Jul 2024 01:29:10 +0000
ROA not before:           Wed 31 Jul 2024 01:29:10 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     4721
IP address blocks:        223.165.20.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Jul 31 01:29:10 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=6B9E07D697450E7A60912E85738ACF5C9B075631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c6:76:c5:d2:a1:03:8d:cb:3b:ee:b7:02:d4:
                    38:ab:52:eb:19:d5:ec:a7:9f:ac:5d:dd:b5:7d:67:
                    37:cd:95:10:ba:e5:b9:f4:a6:96:5e:84:ca:df:8d:
                    81:46:e9:c6:07:98:df:8d:7b:31:06:66:45:7b:04:
                    2b:01:87:53:c9:9a:da:68:b0:f3:40:0b:a2:73:70:
                    a4:0c:57:0f:fc:a9:02:ae:87:f8:84:18:a2:5b:0e:
                    48:76:c5:43:18:e3:ff:e9:c9:ae:6c:b9:90:ee:0a:
                    b8:b2:c4:ce:89:2a:74:db:17:49:05:27:64:57:a1:
                    20:87:a0:93:ba:05:a5:db:55:14:e9:56:4e:80:d3:
                    02:42:69:be:f5:41:39:fb:14:87:2d:ae:f4:5e:35:
                    fa:2f:fc:03:32:05:15:51:cc:b7:f3:c0:d8:7d:35:
                    8d:d5:db:7a:67:58:8d:c6:e4:4a:f5:cc:f3:a8:20:
                    b2:44:06:94:41:2f:f0:85:f7:4f:e9:1a:66:ce:77:
                    45:94:c2:ee:4b:46:38:62:e6:3a:17:bd:0f:06:89:
                    09:3c:82:a2:67:99:5a:36:a7:b4:19:f6:0e:20:ec:
                    aa:06:32:16:d9:49:21:ef:23:fc:9b:5b:b9:19:28:
                    5c:4b:23:46:00:ec:fe:0b:b8:7d:97:2e:20:58:60:
                    33:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:9E:07:D6:97:45:0E:7A:60:91:2E:85:73:8A:CF:5C:9B:07:56:31
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/a54H1pdFDnpgkS6Fc4rPXJsHVjE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.165.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d7:0c:ec:45:fb:4d:86:60:17:b9:7b:39:f2:9d:f3:fd:f1:e0:
         d3:85:bc:c9:7c:ce:dd:92:09:f7:22:a1:d4:58:27:d7:e0:5a:
         59:40:30:6d:6c:ed:98:48:5f:58:31:06:17:7d:ab:c1:b2:29:
         0e:62:4b:a9:01:c1:8e:b6:64:6d:60:c0:1c:26:85:51:a3:49:
         98:d3:eb:de:38:f8:c6:e7:66:50:b3:9a:c5:f9:96:6b:5f:e6:
         ae:a6:63:4b:ac:44:a8:5d:ce:ab:36:26:8c:5d:c2:d1:ee:2d:
         2a:25:e9:94:30:b3:cc:bd:ff:e3:b6:ff:60:41:1b:f3:05:82:
         86:6f:fb:2c:82:0e:fd:41:03:a5:e3:49:7f:4c:51:a6:7f:e0:
         97:31:b2:e5:b1:5b:8b:38:ea:f2:e4:c7:50:45:14:af:f3:c6:
         01:4c:8d:74:c4:7c:28:bf:3c:46:b6:27:16:ff:34:ec:3d:52:
         e8:1b:32:fe:34:3a:83:cf:f0:90:7e:1f:76:e0:56:33:8e:41:
         c5:cd:2d:c8:3f:f8:3c:25:e0:10:4e:32:fa:d8:05:ea:b1:d8:
         74:81:64:82:0c:82:ce:70:29:4b:90:2f:54:30:19:de:46:20:
         f9:eb:89:60:95:c0:c3:ee:4b:5c:48:9a:65:29:e6:62:31:ff:
         94:83:16:92
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA3MzEw
MTI5MTBaFw0yNTA3MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZCOUUwN0Q2OTc0NTBF
N0E2MDkxMkU4NTczOEFDRjVDOUIwNzU2MzEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCwxnbF0qEDjcs77rcC1DirUusZ1eynn6xd3bV9ZzfNlRC65bn0
ppZehMrfjYFG6cYHmN+NezEGZkV7BCsBh1PJmtposPNAC6JzcKQMVw/8qQKuh/iE
GKJbDkh2xUMY4//pya5suZDuCriyxM6JKnTbF0kFJ2RXoSCHoJO6BaXbVRTpVk6A
0wJCab71QTn7FIctrvReNfov/AMyBRVRzLfzwNh9NY3V23pnWI3G5Er1zPOoILJE
BpRBL/CF90/pGmbOd0WUwu5LRjhi5joXvQ8GiQk8gqJnmVo2p7QZ9g4g7KoGMhbZ
SSHvI/ybW7kZKFxLI0YA7P4LuH2XLiBYYDPTAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUa54H1pdFDnpgkS6Fc4rPXJsHVjEwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2E1NEgxcGRGRG5wZ2tTNkZjNHJQWEpzSFZqRS5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBALfpRQwDQYJKoZIhvcNAQELBQADggEBANcM7EX7TYZgF7l7OfKd8/3x4NOF
vMl8zt2SCfciodRYJ9fgWllAMG1s7ZhIX1gxBhd9q8GyKQ5iS6kBwY62ZG1gwBwm
hVGjSZjT6944+MbnZlCzmsX5lmtf5q6mY0usRKhdzqs2JoxdwtHuLSol6ZQws8y9
/+O2/2BBG/MFgoZv+yyCDv1BA6XjSX9MUaZ/4JcxsuWxW4s46vLkx1BFFK/zxgFM
jXTEfCi/PEa2Jxb/NOw9UugbMv40OoPP8JB+H3bgVjOOQcXNLcg/+Dwl4BBOMvrY
Beqx2HSBZIIMgs5wKUuQL1QwGd5GIPnriWCVwMPuS1xImmUp5mIx/5SDFpI=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org