Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/e2RTEE2VrXL1hZtv4ecszVVV_Ic.roa
File:                     e2RTEE2VrXL1hZtv4ecszVVV_Ic.roa (raw, json)
Hash identifier:          tIqaznUI35dcE6xhKMtx75X2cJpanTiDjCL0psfO9Us=
Subject key identifier:   7B:64:53:10:4D:95:AD:72:F5:85:9B:6F:E1:E7:2C:CD:55:55:FC:87
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       017F
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e2RTEE2VrXL1hZtv4ecszVVV_Ic.roa
Signing time:             Sun 01 Oct 2023 01:34:28 +0000
ROA not before:           Sun 01 Oct 2023 01:34:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        112.137.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 383 (0x17f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:34:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7B6453104D95AD72F5859B6FE1E72CCD5555FC87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:6b:92:4c:0a:b3:20:1f:78:e7:a5:5d:6a:23:
                    99:de:57:f8:ba:64:0c:2b:13:35:c5:a3:b8:b4:cc:
                    e0:50:94:b6:7d:2c:ce:03:58:06:b0:17:95:60:c2:
                    bb:61:bc:0c:c7:07:76:ac:e3:2a:a5:b3:ad:34:93:
                    8c:f3:47:80:50:53:f7:2d:c9:78:0b:bc:ed:54:81:
                    e2:c4:ca:32:d6:59:e7:42:9e:c5:14:63:e4:80:5c:
                    53:0d:0d:41:a5:e0:1e:8b:00:61:c1:94:b9:51:e9:
                    2c:7b:76:8c:a9:5a:33:96:8f:a0:d5:3c:79:80:23:
                    08:e0:b5:1e:ac:6b:12:df:2e:c1:40:6a:90:be:a0:
                    cc:b4:c4:80:6e:82:c0:e5:45:64:db:cc:02:dd:71:
                    28:0b:9b:45:e1:91:03:80:59:1c:30:2b:47:da:69:
                    be:6f:7b:bd:ad:dd:7f:2e:de:61:f6:05:02:9f:23:
                    20:c5:6b:74:f5:99:bd:6b:61:cc:45:c3:ac:6a:5c:
                    fc:17:01:b8:87:21:24:8b:b7:8a:b8:30:b1:52:5e:
                    55:ba:da:98:bb:13:d9:f4:a0:46:3e:96:f5:bc:ec:
                    7a:37:43:c2:ca:5b:c2:7a:7b:74:dc:2d:7d:e6:46:
                    8b:31:af:31:5a:26:da:9a:16:cb:e6:25:f7:57:09:
                    a4:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:64:53:10:4D:95:AD:72:F5:85:9B:6F:E1:E7:2C:CD:55:55:FC:87
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e2RTEE2VrXL1hZtv4ecszVVV_Ic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.137.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c3:69:04:79:2f:88:9f:75:41:f0:95:a4:b8:72:b3:06:49:0a:
         b3:4b:98:4e:19:6f:1d:b4:83:b5:f2:bf:a1:fa:70:64:78:be:
         b6:b3:f5:0d:3f:4c:0e:ad:6d:d0:e9:b1:87:71:1a:54:01:68:
         b5:1d:3a:d4:09:d7:bb:19:b9:cf:8b:51:02:b8:8f:a2:bf:54:
         cf:d1:f5:91:d9:88:8f:65:4a:a7:84:47:ac:70:24:d3:96:a4:
         50:bd:f7:34:06:af:3b:2c:91:50:65:b5:42:43:da:ef:cd:dc:
         fb:8b:8a:b9:71:25:f9:92:41:00:f3:b5:55:c6:e7:26:6b:a0:
         42:a4:e0:0d:d2:cf:8c:43:5f:33:d0:82:bc:cf:30:7a:a2:1c:
         d2:b2:03:1e:95:ab:33:d1:bf:ba:10:a1:fd:77:3b:cd:8f:56:
         d7:39:f2:65:a9:99:1b:f1:01:5e:ea:03:03:3f:ac:02:9b:8b:
         6d:c3:e5:97:3c:7d:4a:07:80:43:d9:e9:92:5c:bc:18:99:db:
         d0:27:a5:d0:e7:92:f9:db:14:c2:a9:e0:34:99:dc:28:2d:dd:
         36:76:46:3e:08:26:04:0e:f1:54:57:a5:fb:6c:16:5e:69:bb:
         39:f2:cf:c9:0b:3d:e5:2e:68:e5:0d:10:25:76:0f:5d:d1:c5:
         8d:cc:01:af
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAX8wDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTM0MjhaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdCNjQ1MzEwNEQ5NUFE
NzJGNTg1OUI2RkUxRTcyQ0NENTU1NUZDODcwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3a5JMCrMgH3jnpV1qI5neV/i6ZAwrEzXFo7i0zOBQlLZ9LM4D
WAawF5VgwrthvAzHB3as4yqls600k4zzR4BQU/ctyXgLvO1UgeLEyjLWWedCnsUU
Y+SAXFMNDUGl4B6LAGHBlLlR6Sx7doypWjOWj6DVPHmAIwjgtR6saxLfLsFAapC+
oMy0xIBugsDlRWTbzALdcSgLm0XhkQOAWRwwK0faab5ve72t3X8u3mH2BQKfIyDF
a3T1mb1rYcxFw6xqXPwXAbiHISSLt4q4MLFSXlW62pi7E9n0oEY+lvW87Ho3Q8LK
W8J6e3TcLX3mRosxrzFaJtqaFsvmJfdXCaTvAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUe2RTEE2VrXL1hZtv4ecszVVV/IcwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2UyUlRFRTJWclhMMWhadHY0ZWNzelZWVl9JYy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBARwiSAwDQYJKoZIhvcNAQELBQADggEBAMNpBHkviJ91QfCVpLhyswZJCrNL
mE4Zbx20g7Xyv6H6cGR4vraz9Q0/TA6tbdDpsYdxGlQBaLUdOtQJ17sZuc+LUQK4
j6K/VM/R9ZHZiI9lSqeER6xwJNOWpFC99zQGrzsskVBltUJD2u/N3PuLirlxJfmS
QQDztVXG5yZroEKk4A3Sz4xDXzPQgrzPMHqiHNKyAx6VqzPRv7oQof13O82PVtc5
8mWpmRvxAV7qAwM/rAKbi23D5Zc8fUoHgEPZ6ZJcvBiZ29AnpdDnkvnbFMKp4DSZ
3Cgt3TZ2Rj4IJgQO8VRXpftsFl5puznyz8kLPeUuaOUNECV2D13RxY3MAa8=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org