Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/lzqQy73CgKHqVOC0JdqR8-aDD00.roa
File:                     lzqQy73CgKHqVOC0JdqR8-aDD00.roa (raw, json)
Hash identifier:          dceW/ollSV16D9jpBIVQBkiqCeRAGnzMcvzUl+XD4dQ=
Subject key identifier:   97:3A:90:CB:BD:C2:80:A1:EA:54:E0:B4:25:DA:91:F3:E6:83:0F:4D
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0235
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lzqQy73CgKHqVOC0JdqR8-aDD00.roa
Signing time:             Sat 31 Aug 2024 01:33:27 +0000
ROA not before:           Sat 31 Aug 2024 01:33:27 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9824
IP address blocks:        124.195.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 06:14:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 565 (0x235)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Aug 31 01:33:27 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=973A90CBBDC280A1EA54E0B425DA91F3E6830F4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:93:2f:7e:b7:4c:4f:9d:b6:6a:0c:02:db:9b:
                    0b:ef:6c:7e:42:61:c6:fd:a7:01:f2:7f:4d:b1:37:
                    ce:c9:29:5c:a8:62:bb:36:f1:81:d3:ef:eb:ce:b0:
                    1d:4f:27:62:8b:16:7a:ea:59:0a:af:0f:d3:47:79:
                    a4:6a:6f:56:ab:75:3b:ca:ba:1f:f5:68:f2:2a:cb:
                    56:b5:a6:9f:09:6e:30:a3:70:df:9f:2b:ff:e8:9d:
                    9e:5d:d2:e7:dd:7c:5a:dd:87:51:55:0f:59:23:3b:
                    cd:3d:57:71:f8:ad:8b:63:ad:d8:4c:b8:a0:92:26:
                    fc:a2:01:10:ec:e5:c5:83:97:fe:86:0e:a6:d0:4d:
                    7e:14:5f:5c:b9:e1:37:4c:5f:3f:78:40:50:74:cc:
                    1d:fe:ac:96:53:5f:11:02:d1:12:bc:91:07:a5:74:
                    52:af:a8:4a:d6:82:e3:89:35:fb:bb:90:28:b3:b5:
                    bc:1e:19:c1:85:40:4b:16:ab:e0:71:4d:ab:f9:4e:
                    c8:7d:65:8f:6d:ba:55:5a:98:b3:c5:eb:a6:42:36:
                    4d:4e:6f:ad:74:52:c2:c0:2b:81:ff:70:7a:dc:60:
                    9f:9e:52:d3:a0:2a:95:63:51:e7:ea:62:84:ac:0f:
                    07:4e:7a:07:9b:52:37:93:49:1b:53:19:e4:dd:c8:
                    d7:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:3A:90:CB:BD:C2:80:A1:EA:54:E0:B4:25:DA:91:F3:E6:83:0F:4D
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/lzqQy73CgKHqVOC0JdqR8-aDD00.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.195.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:e9:42:59:95:dc:2c:6e:4f:61:38:6f:cd:7a:93:c3:47:2c:
         4a:f5:45:d7:ad:ee:ed:52:bb:1a:c4:60:15:40:f2:b8:35:e9:
         52:dc:8a:64:26:e5:76:59:45:44:33:23:82:76:7c:67:19:0b:
         c0:85:d5:b1:cc:cd:05:3d:4e:63:19:f9:6e:0c:91:49:55:04:
         f4:08:56:38:ed:72:75:20:e4:4f:eb:8a:4e:98:b6:de:af:5d:
         35:2f:78:4e:b7:ab:10:38:c8:64:52:1a:fa:35:5e:62:00:20:
         d4:31:d1:3d:f6:71:64:69:68:f1:b8:92:5f:be:33:77:54:f2:
         57:77:10:6b:3a:d9:d0:ad:4f:64:d6:ed:45:8b:5b:63:bd:b2:
         78:9d:83:9a:3f:88:5d:fe:0b:40:9a:1a:25:46:4b:53:a5:50:
         9a:da:10:61:af:fa:40:f5:36:d0:ca:90:32:47:69:97:1c:69:
         cb:7d:e9:ac:36:7d:13:84:07:6c:f6:2a:1d:e0:e7:91:3b:be:
         ed:f6:40:da:fa:5e:42:c9:b5:39:dc:d1:30:73:08:fc:3c:9b:
         c8:df:50:dc:3d:8e:47:7e:34:d4:bf:61:9f:f4:84:a6:73:97:
         28:84:bf:94:df:7a:67:90:30:c7:c1:f0:37:3e:54:cb:ff:4e:
         6e:a9:20:ea
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICAjUwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoRkIw
NkIyRTRBOUQ1NjdFQjdEODBGRjU5QTc1NUZEMjgzQkZCMTNBQjAeFw0yNDA4MzEw
MTMzMjdaFw0yNTA4MTUwMTMwMDJaMDMxMTAvBgNVBAMTKDk3M0E5MENCQkRDMjgw
QTFFQTU0RTBCNDI1REE5MUYzRTY4MzBGNEQwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQDaky9+t0xPnbZqDALbmwvvbH5CYcb9pwHyf02xN87JKVyoYrs2
8YHT7+vOsB1PJ2KLFnrqWQqvD9NHeaRqb1ardTvKuh/1aPIqy1a1pp8JbjCjcN+f
K//onZ5d0ufdfFrdh1FVD1kjO809V3H4rYtjrdhMuKCSJvyiARDs5cWDl/6GDqbQ
TX4UX1y54TdMXz94QFB0zB3+rJZTXxEC0RK8kQeldFKvqErWguOJNfu7kCiztbwe
GcGFQEsWq+BxTav5Tsh9ZY9tulVamLPF66ZCNk1Ob610UsLAK4H/cHrcYJ+eUtOg
KpVjUefqYoSsDwdOegebUjeTSRtTGeTdyNc1AgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQUlzqQy73CgKHqVOC0JdqR8+aDD00wHwYDVR0jBBgwFoAU+way5KnVZ+t9gP9Z
p1X9KDv7E6swGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY3MS8td2F5NUtuVlotdDlnUDlacDFYOUtEdjdFNnMuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC8td2F5NUtuVlotdDlnUDlacDFYOUtE
djdFNnMuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjcxL2x6cVF5NzNDZ0tIcVZPQzBKZHFSOC1hREQwMC5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAR8w5AwDQYJKoZIhvcNAQELBQADggEBACHpQlmV3CxuT2E4b816k8NHLEr1
Rdet7u1SuxrEYBVA8rg16VLcimQm5XZZRUQzI4J2fGcZC8CF1bHMzQU9TmMZ+W4M
kUlVBPQIVjjtcnUg5E/rik6Ytt6vXTUveE63qxA4yGRSGvo1XmIAINQx0T32cWRp
aPG4kl++M3dU8ld3EGs62dCtT2TW7UWLW2O9snidg5o/iF3+C0CaGiVGS1OlUJra
EGGv+kD1NtDKkDJHaZccact96aw2fROEB2z2Kh3g55E7vu32QNr6XkLJtTnc0TBz
CPw8m8jfUNw9jkd+NNS/YZ/0hKZzlyiEv5TfemeQMMfB8Dc+VMv/Tm6pIOo=
-----END CERTIFICATE-----
Generated at Fri Nov 22 09:31:34 2024 by rpki-client on console-fra.rpki-client.org