Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
File:                     7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa (raw, json)
Hash identifier:          UIWLldihpkgJk+awyw4so+PmVJVb2SvtQdVA9f/zE3E=
Subject key identifier:   EE:C4:25:73:12:C7:C0:B5:4B:75:74:C0:FF:B3:AF:DC:7F:92:17:AA
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3231
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
Signing time:             Thu 29 Feb 2024 01:29:50 +0000
ROA not before:           Thu 29 Feb 2024 01:29:50 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        125.252.128.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12849 (0x3231)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Feb 29 01:29:50 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=EEC4257312C7C0B54B7574C0FFB3AFDC7F9217AA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:49:ca:68:10:f8:88:d9:bc:52:ce:ad:a3:28:
                    30:11:18:62:17:6e:ef:3a:26:68:bf:f0:04:5e:ac:
                    9c:03:90:d5:f4:5c:fc:60:c7:9a:bb:a8:5b:5e:14:
                    dc:09:8e:34:50:56:a3:82:76:ea:cb:00:20:de:22:
                    4d:3b:1a:33:e5:68:2e:aa:f6:80:75:cb:ab:06:00:
                    4a:d6:e1:3f:6f:9f:02:89:da:b3:72:8d:dd:f9:84:
                    a3:ba:c9:9f:99:27:3c:dc:42:9d:46:12:fa:17:e7:
                    a8:54:80:8e:06:29:d6:35:20:64:52:e1:01:a1:ff:
                    cc:0f:5f:43:89:75:c4:12:51:dd:90:ea:09:8f:df:
                    36:44:3a:ff:dc:c0:9a:6e:32:f4:d1:94:0e:b0:18:
                    a5:e0:03:04:50:9a:b6:68:3a:bd:5a:50:e7:ff:f8:
                    62:2b:53:e5:e3:a5:6d:fe:3f:41:56:f5:f0:ad:91:
                    9b:d9:f6:13:31:74:56:d8:d6:4e:30:23:d1:56:1f:
                    d0:2f:56:36:15:29:b6:08:df:9d:f4:61:e5:59:64:
                    59:64:97:e2:e2:cf:17:46:67:49:78:dd:9b:6c:64:
                    52:1a:50:3d:65:60:ab:ba:c6:05:f7:26:2e:f7:2b:
                    50:55:52:aa:84:08:44:ed:6f:97:b9:ca:60:18:32:
                    0b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:C4:25:73:12:C7:C0:B5:4B:75:74:C0:FF:B3:AF:DC:7F:92:17:AA
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/7sQlcxLHwLVLdXTA_7Ov3H-SF6o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.252.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         11:b4:de:82:22:3c:26:59:35:81:ec:21:1e:ba:21:ba:c8:b3:
         95:87:d0:1b:ca:18:2e:da:e8:18:35:67:c4:01:d3:ef:a0:75:
         1c:7a:5c:53:b9:12:72:5f:f7:29:48:ab:02:be:75:bb:46:7d:
         1b:79:88:07:db:7d:64:b5:61:e0:f9:d7:f9:e7:e4:e5:00:bc:
         70:78:6e:3d:4c:21:43:5a:07:4f:f8:ba:7c:75:c3:e0:42:12:
         4d:1c:0b:ba:bd:91:6d:66:b0:75:48:97:1c:09:37:b6:0c:6e:
         e9:08:fe:2b:c8:c7:29:75:a0:1a:2a:34:33:86:a1:c9:f6:2b:
         40:c9:77:af:bf:0a:30:59:8f:7d:cb:ff:37:d7:1d:35:4f:cd:
         2b:cf:52:19:10:44:4a:f0:d8:35:b3:15:68:4f:84:09:e5:ef:
         cb:85:58:08:3e:25:f3:0d:5c:92:77:06:63:d2:dc:14:a9:2a:
         fc:8f:8b:4c:bb:8b:cc:15:97:f7:33:d9:fd:c8:fd:f9:06:3d:
         c7:0b:97:0c:38:68:32:50:85:08:f5:b0:04:53:53:00:f2:a9:
         9b:67:84:f2:68:17:46:17:0f:e7:44:07:bc:05:09:31:95:f4:
         51:8e:0e:52:9d:2a:45:dc:cd:37:b5:55:cd:ac:3e:7c:13:f4:
         e8:45:23:f5
-----BEGIN CERTIFICATE-----
MIIFCDCCA/CgAwIBAgICMjEwDQYJKoZIhvcNAQELBQAwMzExMC8GA1UEAxMoNjUy
MkUyQzNFRjREOTNGMTNFNzU4QTgwN0E0MEE4RTFCRjlBQjEzMDAeFw0yNDAyMjkw
MTI5NTBaFw0yNTAyMTQwMTMwMDNaMDMxMTAvBgNVBAMTKEVFQzQyNTczMTJDN0Mw
QjU0Qjc1NzRDMEZGQjNBRkRDN0Y5MjE3QUEwggEiMA0GCSqGSIb3DQEBAQUAA4IB
DwAwggEKAoIBAQC3ScpoEPiI2bxSzq2jKDARGGIXbu86Jmi/8ARerJwDkNX0XPxg
x5q7qFteFNwJjjRQVqOCdurLACDeIk07GjPlaC6q9oB1y6sGAErW4T9vnwKJ2rNy
jd35hKO6yZ+ZJzzcQp1GEvoX56hUgI4GKdY1IGRS4QGh/8wPX0OJdcQSUd2Q6gmP
3zZEOv/cwJpuMvTRlA6wGKXgAwRQmrZoOr1aUOf/+GIrU+XjpW3+P0FW9fCtkZvZ
9hMxdFbY1k4wI9FWH9AvVjYVKbYI3530YeVZZFlkl+LizxdGZ0l43ZtsZFIaUD1l
YKu6xgX3Ji73K1BVUqqECETtb5e5ymAYMgtfAgMBAAGjggIkMIICIDAdBgNVHQ4E
FgQU7sQlcxLHwLVLdXTA/7Ov3H+SF6owHwYDVR0jBBgwFoAUZSLiw+9Nk/E+dYqA
ekCo4b+asTAwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBmBgNVHR8EXzBdMFug
WaBXhlVyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkxQTcz
ODEwMDAwLzY5OS9aU0xpdy05TmtfRS1kWXFBZWtDbzRiLWFzVEEuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9aU0xpdy05TmtfRS1kWXFBZWtDbzRi
LWFzVEEuY2VyMA4GA1UdDwEB/wQEAwIHgDCBuwYIKwYBBQUHAQsEga4wgaswYQYI
KwYBBQUHMAuGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvNjk5LzdzUWxjeExId0xWTGRYVEFfN092M0gtU0Y2by5yb2Ew
RgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9y
cmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwEAgAB
MAYDBAZ9/IAwDQYJKoZIhvcNAQELBQADggEBABG03oIiPCZZNYHsIR66IbrIs5WH
0BvKGC7a6Bg1Z8QB0++gdRx6XFO5EnJf9ylIqwK+dbtGfRt5iAfbfWS1YeD51/nn
5OUAvHB4bj1MIUNaB0/4unx1w+BCEk0cC7q9kW1msHVIlxwJN7YMbukI/ivIxyl1
oBoqNDOGocn2K0DJd6+/CjBZj33L/zfXHTVPzSvPUhkQRErw2DWzFWhPhAnl78uF
WAg+JfMNXJJ3BmPS3BSpKvyPi0y7i8wVl/cz2f3I/fkGPccLlww4aDJQhQj1sART
UwDyqZtnhPJoF0YXD+dEB7wFCTGV9FGODlKdKkXczTe1Vc2sPnwT9OhFI/U=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org