Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/bc_dNEslk3gpZkJuDSEUjKORmC0.roa
File:                     bc_dNEslk3gpZkJuDSEUjKORmC0.roa (raw, json)
Hash identifier:          QzMHEZH+wSCm3kXwOgjmh0bsfEDhBQriBAGHD+d4ZHU=
Subject key identifier:   6D:CF:DD:34:4B:25:93:78:29:66:42:6E:0D:21:14:8C:A3:91:98:2D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       02B7
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bc_dNEslk3gpZkJuDSEUjKORmC0.roa
Signing time:             Sat 31 Aug 2024 01:42:52 +0000
ROA not before:           Sat 31 Aug 2024 01:42:52 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        49.250.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 695 (0x2b7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:42:52 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=6DCFDD344B2593782966426E0D21148CA391982D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:62:8a:a6:73:f2:64:a7:ad:da:2e:cf:0e:69:
                    61:67:36:75:dc:e1:0a:a0:34:74:54:f5:7f:b0:62:
                    99:de:2e:eb:18:8f:92:70:d7:a5:42:4e:f1:f6:4d:
                    8e:93:2e:37:e2:d1:f6:5a:c1:57:67:04:e1:8f:45:
                    e8:43:0c:5b:fa:55:58:f5:1c:c6:61:dc:10:a2:93:
                    af:f2:18:4a:fa:c7:77:77:4b:00:de:1d:63:c5:18:
                    69:fd:5d:c5:fd:fa:40:8a:ca:17:8b:5d:d8:49:ed:
                    cb:cb:21:8e:11:2a:bf:a8:8d:dc:32:76:e5:0b:93:
                    92:56:f1:50:5a:be:f5:0d:f8:12:81:bb:d6:b8:c2:
                    0c:ba:05:3d:41:55:68:2f:1e:19:fb:f0:5e:4b:19:
                    43:ec:9a:95:13:d8:12:d9:45:37:0e:3a:c7:e6:3d:
                    0a:0c:91:b1:6e:e8:f1:61:cd:e7:66:a2:e9:43:7c:
                    9c:24:96:f7:3f:0e:d9:04:a0:ae:66:d0:ce:86:73:
                    2d:3f:e2:61:29:98:cc:d5:0e:06:c6:11:b0:07:80:
                    81:e2:e2:46:7d:56:45:a6:2d:7c:5a:7d:c7:e9:b4:
                    5e:ec:22:6d:3c:70:e8:89:4c:25:4d:0f:bc:fa:83:
                    fc:b2:a5:00:ff:d4:ef:f4:51:bb:65:4b:32:4a:ac:
                    96:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:CF:DD:34:4B:25:93:78:29:66:42:6E:0D:21:14:8C:A3:91:98:2D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/bc_dNEslk3gpZkJuDSEUjKORmC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.250.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         53:d3:1e:d4:67:cc:4b:b9:4a:0c:77:31:2f:c3:05:b3:ff:30:
         f4:4e:a9:60:46:c8:34:b6:8b:3a:74:1f:67:64:b0:37:8a:f7:
         4a:d4:b1:ef:0d:0f:64:c9:2c:95:0d:6d:53:2c:a4:66:f7:3b:
         a1:ab:62:b8:98:bc:89:bb:5b:30:a6:bf:01:5a:89:55:f9:2f:
         03:1b:b1:00:43:79:d9:67:38:b3:5c:27:2f:b4:14:8c:15:a6:
         92:96:b8:9d:4b:ec:6b:aa:0e:b6:16:25:23:e6:1c:ca:45:9c:
         76:cd:7f:be:25:3c:9b:49:32:bc:23:ce:ab:a2:78:04:fe:3a:
         7b:0c:67:07:1a:51:19:f4:82:ce:ad:fe:89:e3:08:09:0c:9a:
         06:dc:18:74:7d:5e:59:0e:9c:84:97:01:44:7c:1a:db:53:1b:
         8c:67:1e:9e:e6:f6:c0:58:0e:cc:58:59:29:62:f9:f9:8a:3a:
         b8:53:23:54:fd:f9:2c:80:5f:4a:c4:f1:83:2c:d2:ca:b3:61:
         5d:d2:89:1c:18:d9:04:78:39:df:08:bb:3f:1c:9e:ca:34:e3:
         77:a2:2a:67:56:b5:0f:d6:52:db:6e:e5:38:69:aa:2a:b7:65:
         82:9a:47:e0:5d:0c:f8:56:37:28:59:1e:20:18:cb:1d:fc:3b:
         cb:2c:15:0f
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgICArcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTQyNTJaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDZEQ0ZERDM0NEIyNTkz
NzgyOTY2NDI2RTBEMjExNDhDQTM5MTk4MkQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQCaYoqmc/Jkp63aLs8OaWFnNnXc4QqgNHRU9X+wYpneLusYj5Jw
16VCTvH2TY6TLjfi0fZawVdnBOGPRehDDFv6VVj1HMZh3BCik6/yGEr6x3d3SwDe
HWPFGGn9XcX9+kCKyheLXdhJ7cvLIY4RKr+ojdwyduULk5JW8VBavvUN+BKBu9a4
wgy6BT1BVWgvHhn78F5LGUPsmpUT2BLZRTcOOsfmPQoMkbFu6PFhzedmoulDfJwk
lvc/DtkEoK5m0M6Gcy0/4mEpmMzVDgbGEbAHgIHi4kZ9VkWmLXxafcfptF7sIm08
cOiJTCVND7z6g/yypQD/1O/0UbtlSzJKrJbZAgMBAAGjggIjMIICHzAdBgNVHQ4E
FgQUbc/dNEslk3gpZkJuDSEUjKORmC0wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2JjX2RORXNsazNncFprSnVEU0VVaktPUm1DMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgAB
MAUDAwEx+jANBgkqhkiG9w0BAQsFAAOCAQEAU9Me1GfMS7lKDHcxL8MFs/8w9E6p
YEbINLaLOnQfZ2SwN4r3StSx7w0PZMkslQ1tUyykZvc7oatiuJi8ibtbMKa/AVqJ
VfkvAxuxAEN52Wc4s1wnL7QUjBWmkpa4nUvsa6oOthYlI+YcykWcds1/viU8m0ky
vCPOq6J4BP46ewxnBxpRGfSCzq3+ieMICQyaBtwYdH1eWQ6chJcBRHwa21MbjGce
nub2wFgOzFhZKWL5+Yo6uFMjVP35LIBfSsTxgyzSyrNhXdKJHBjZBHg53wi7Pxye
yjTjd6IqZ1a1D9ZS227lOGmqKrdlgppH4F0M+FY3KFkeIBjLHfw7yywVDw==
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org