Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/e_nGDDcL_tUHG2m2JCtrZ8kg4bg.roa
File:                     e_nGDDcL_tUHG2m2JCtrZ8kg4bg.roa (raw, json)
Hash identifier:          2arsjATcQiimXsf1SgFea7dAu2JXSAFDtFbr5Rm5Ngs=
Subject key identifier:   7B:F9:C6:0C:37:0B:FE:D5:07:1B:69:B6:24:2B:6B:67:C9:20:E1:B8
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0147
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e_nGDDcL_tUHG2m2JCtrZ8kg4bg.roa
Signing time:             Sun 01 Oct 2023 01:30:21 +0000
ROA not before:           Sun 01 Oct 2023 01:30:21 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        219.124.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:34:33 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 327 (0x147)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:21 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=7BF9C60C370BFED5071B69B6242B6B67C920E1B8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:7c:a1:c9:00:84:55:21:d2:2f:2f:1f:b1:d3:
                    5f:59:89:0d:20:84:4c:41:7c:75:8a:10:ef:7a:7e:
                    80:17:b0:92:ec:4e:6b:a2:05:49:39:17:ba:d6:9f:
                    2a:49:5b:7a:f5:27:12:c7:9e:fe:0a:ff:04:98:6c:
                    60:46:e7:4b:9e:12:b3:5f:4e:37:e1:e1:f0:da:65:
                    ed:0e:30:93:f8:4d:c1:80:ae:56:8d:2f:57:47:26:
                    c5:bf:1e:21:51:42:58:f3:b5:8b:0d:45:06:05:fa:
                    6b:3a:0e:1a:80:53:10:c4:5f:01:7d:bd:2c:38:8e:
                    0d:6e:a3:31:78:16:d8:94:f3:e0:e5:f0:8a:90:4f:
                    f9:87:d9:13:20:d6:17:e5:40:8e:8b:8b:44:06:36:
                    7f:4e:ba:35:df:95:16:03:94:28:f7:37:ce:8b:7b:
                    45:5f:b5:d2:a8:8c:a8:63:75:82:d2:14:3c:ff:d2:
                    19:c2:36:44:cc:cd:ea:7d:4d:41:aa:39:44:62:36:
                    79:68:79:34:dc:db:b2:77:6b:b2:83:07:5b:b2:4b:
                    0c:9b:b0:80:06:43:73:f1:4f:a9:3f:48:40:02:f2:
                    59:93:3b:69:bc:75:91:e9:8b:53:1e:0c:ea:60:24:
                    b8:c6:0b:ff:36:5b:dd:3c:9f:05:5e:a3:e5:e0:a3:
                    23:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F9:C6:0C:37:0B:FE:D5:07:1B:69:B6:24:2B:6B:67:C9:20:E1:B8
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/e_nGDDcL_tUHG2m2JCtrZ8kg4bg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         18:2b:15:0e:e7:c6:cb:94:1e:c5:3b:56:11:a0:d2:19:36:a7:
         28:d3:29:28:e2:68:f8:a2:d9:b9:0c:f5:52:ab:0c:2d:8a:32:
         6d:a8:6e:5b:93:a1:44:65:a7:f7:6d:c2:66:99:1f:04:c9:4d:
         26:ea:d4:e7:8d:42:b0:53:0e:f7:c8:ba:05:2a:77:42:13:da:
         bf:f4:6d:f5:cf:8f:f0:68:e6:da:6f:d8:98:53:7f:9d:9f:2a:
         f7:6e:d2:dc:bb:30:01:d7:d3:1e:13:9c:dd:99:cd:97:48:41:
         69:b0:57:31:fe:f2:bf:62:ea:ef:7a:f4:6b:00:39:a9:ea:8d:
         5f:7f:36:a9:ea:88:f5:00:17:61:9b:df:6c:01:66:58:73:98:
         44:36:04:9e:c0:60:fd:03:41:b6:00:05:09:b0:d7:4a:25:8f:
         bd:75:34:4d:a4:ff:cd:98:01:74:56:c2:ac:1d:1f:95:5d:cd:
         5b:bd:4f:5e:f7:e0:a8:c0:a9:cb:c0:eb:3f:c6:bb:c6:81:a7:
         13:35:5e:89:f3:7b:83:9f:f9:10:92:97:f0:09:64:09:06:7a:
         56:81:3f:97:6b:3c:28:fc:61:bd:c0:4a:04:fc:42:cf:0b:17:
         48:5f:d6:71:92:32:73:1c:32:e5:af:97:e8:67:d1:a7:dc:80:
         20:70:11:90
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAUcwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yMzEwMDEw
MTMwMjFaFw0yNDA5MTQwMTMwMDNaMDMxMTAvBgNVBAMTKDdCRjlDNjBDMzcwQkZF
RDUwNzFCNjlCNjI0MkI2QjY3QzkyMEUxQjgwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDqfKHJAIRVIdIvLx+x019ZiQ0ghExBfHWKEO96foAXsJLsTmui
BUk5F7rWnypJW3r1JxLHnv4K/wSYbGBG50ueErNfTjfh4fDaZe0OMJP4TcGArlaN
L1dHJsW/HiFRQljztYsNRQYF+ms6DhqAUxDEXwF9vSw4jg1uozF4FtiU8+Dl8IqQ
T/mH2RMg1hflQI6Li0QGNn9OujXflRYDlCj3N86Le0VftdKojKhjdYLSFDz/0hnC
NkTMzep9TUGqOURiNnloeTTc27J3a7KDB1uySwybsIAGQ3PxT6k/SEAC8lmTO2m8
dZHpi1MeDOpgJLjGC/82W908nwVeo+XgoyNXAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUe/nGDDcL/tUHG2m2JCtrZ8kg4bgwHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2VfbkdERGNMX3RVSEcybTJKQ3RyWjhrZzRiZy5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBATbfBAwDQYJKoZIhvcNAQELBQADggEBABgrFQ7nxsuUHsU7VhGg0hk2pyjT
KSjiaPii2bkM9VKrDC2KMm2obluToURlp/dtwmaZHwTJTSbq1OeNQrBTDvfIugUq
d0IT2r/0bfXPj/Bo5tpv2JhTf52fKvdu0ty7MAHX0x4TnN2ZzZdIQWmwVzH+8r9i
6u969GsAOanqjV9/NqnqiPUAF2Gb32wBZlhzmEQ2BJ7AYP0DQbYABQmw10olj711
NE2k/82YAXRWwqwdH5VdzVu9T1734KjAqcvA6z/Gu8aBpxM1Xonze4Of+RCSl/AJ
ZAkGelaBP5drPCj8Yb3ASgT8Qs8LF0hf1nGSMnMcMuWvl+hn0afcgCBwEZA=
-----END CERTIFICATE-----
Generated at Sat May 18 12:40:39 2024 by rpki-client on console-ams.rpki-client.org