Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/xPZtMmSupisqzQeGlq1e_wFCCwU.roa
File:                     xPZtMmSupisqzQeGlq1e_wFCCwU.roa (raw, json)
Hash identifier:          +F/A3f2oxBzMhJt5hxhfcgy9238OI9LCCupuDUJU07M=
Subject key identifier:   C4:F6:6D:32:64:AE:A6:2B:2A:CD:07:86:96:AD:5E:FF:01:42:0B:05
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       1A
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/xPZtMmSupisqzQeGlq1e_wFCCwU.roa
Signing time:             Fri 16 Aug 2024 02:53:17 +0000
ROA not before:           Fri 16 Aug 2024 02:53:17 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18121
IP address blocks:        202.222.32.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug 16 02:53:17 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=C4F66D3264AEA62B2ACD078696AD5EFF01420B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:07:77:c4:4a:0b:18:48:27:6e:af:32:e6:3d:
                    56:bf:6b:a6:05:3e:5b:9d:4d:3a:ab:c1:60:26:5e:
                    39:55:73:7b:8b:a1:10:34:10:d3:f7:3f:01:70:86:
                    69:39:a5:af:61:0e:1f:59:b3:81:4d:9b:4a:54:a5:
                    63:00:2d:48:e5:ae:e0:19:1d:d8:9c:00:25:6f:8f:
                    c2:c4:73:5c:f3:ff:0f:48:b0:e1:25:12:62:1f:94:
                    ed:f2:d5:07:8b:7c:56:0a:6d:17:39:f3:b2:d3:78:
                    15:a6:99:24:fc:3e:b5:4a:76:fd:ed:04:3d:2b:4f:
                    ae:1d:3c:67:5b:9b:8f:61:aa:c7:97:e0:c2:00:18:
                    3a:fe:1e:4c:4e:fa:ac:9d:aa:49:e4:81:8c:8d:a1:
                    40:df:8b:46:4d:ac:0f:9c:e9:b1:99:9e:4c:5c:78:
                    a2:a4:c1:4c:74:e7:66:16:ca:7b:19:e9:92:60:85:
                    8b:61:e9:6e:81:1e:07:a7:b3:be:6b:55:c4:e8:5a:
                    28:98:67:5e:1f:26:5a:ae:cf:fe:26:f6:d8:ec:a3:
                    84:90:70:a7:e9:5d:e5:8d:f2:b2:ab:ed:9e:1e:5f:
                    42:c6:2a:de:74:32:da:45:5e:b3:a5:70:19:9b:30:
                    ee:df:25:da:74:78:b7:bd:65:15:b8:77:0b:fa:a4:
                    2d:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:F6:6D:32:64:AE:A6:2B:2A:CD:07:86:96:AD:5E:FF:01:42:0B:05
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/xPZtMmSupisqzQeGlq1e_wFCCwU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b3:76:19:e9:03:bb:eb:be:d0:c0:4a:8b:a0:95:7f:d1:e1:ae:
         95:83:1f:43:e9:75:25:91:5d:e0:96:91:06:1a:54:a9:95:42:
         da:ed:57:5f:9b:fd:87:7b:00:e9:02:94:2f:ce:cd:53:98:ae:
         85:48:a0:bd:62:ad:a3:a6:86:d8:11:9e:10:0d:22:c6:b4:43:
         07:20:e9:4d:5e:e3:b0:54:58:b9:37:3f:3e:6b:30:15:c2:94:
         d8:41:6c:19:ae:f6:8c:2f:2f:93:26:aa:b8:6b:c2:ab:7f:12:
         44:81:5e:13:3a:83:80:92:6b:74:3d:69:19:b9:b4:81:d6:ed:
         9c:c8:4f:9d:a0:61:ec:2c:cf:38:26:52:b2:0f:29:8e:29:b9:
         cb:87:b0:ec:6d:ed:dc:2f:40:2f:3b:e0:a2:1b:dd:a7:8a:3c:
         70:33:96:df:54:e7:c4:bf:13:47:d4:4d:e5:7e:c5:d1:9d:b4:
         1e:41:51:47:66:0f:8c:87:d4:1d:70:ce:08:a6:7b:30:04:6d:
         b5:b4:7e:09:6b:60:98:31:7d:6f:01:fe:76:cb:e2:8e:b2:23:
         63:9b:58:b7:58:9f:dc:5d:f6:d3:e9:36:de:4e:81:4b:55:06:
         4d:10:b0:6c:17:4f:20:f9:3d:dd:d4:6e:7a:52:65:8b:0f:13:
         ba:a8:fb:d9
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxRjI4
OEEyMjg1MDI0RTE0OEEyN0U0NUZFNUFDOTBEMjhCMzAzRDRCMB4XDTI0MDgxNjAy
NTMxN1oXDTI1MDgxNTAxMzAwMlowMzExMC8GA1UEAxMoQzRGNjZEMzI2NEFFQTYy
QjJBQ0QwNzg2OTZBRDVFRkYwMTQyMEIwNTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMAHd8RKCxhIJ26vMuY9Vr9rpgU+W51NOqvBYCZeOVVze4uhEDQQ
0/c/AXCGaTmlr2EOH1mzgU2bSlSlYwAtSOWu4Bkd2JwAJW+PwsRzXPP/D0iw4SUS
Yh+U7fLVB4t8VgptFznzstN4FaaZJPw+tUp2/e0EPStPrh08Z1ubj2Gqx5fgwgAY
Ov4eTE76rJ2qSeSBjI2hQN+LRk2sD5zpsZmeTFx4oqTBTHTnZhbKexnpkmCFi2Hp
boEeB6ezvmtVxOhaKJhnXh8mWq7P/ib22OyjhJBwp+ld5Y3ysqvtnh5fQsYq3nQy
2kVes6VwGZsw7t8l2nR4t71lFbh3C/qkLU8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTE9m0yZK6mKyrNB4aWrV7/AUILBTAfBgNVHSMEGDAWgBQfKIoihQJOFIon5F/l
rJDSizA9SzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzEzL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9zd1BVcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0h5aUtJb1VDVGhTS0otUmY1YXlRMG9z
d1BVcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MTMveFBadE1tU3VwaXNxelFlR2xxMWVfd0ZDQ3dVLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBcreIDANBgkqhkiG9w0BAQsFAAOCAQEAs3YZ6QO7677QwEqLoJV/0eGulYMf
Q+l1JZFd4JaRBhpUqZVC2u1XX5v9h3sA6QKUL87NU5iuhUigvWKto6aG2BGeEA0i
xrRDByDpTV7jsFRYuTc/PmswFcKU2EFsGa72jC8vkyaquGvCq38SRIFeEzqDgJJr
dD1pGbm0gdbtnMhPnaBh7CzPOCZSsg8pjim5y4ew7G3t3C9ALzvgohvdp4o8cDOW
31TnxL8TR9RN5X7F0Z20HkFRR2YPjIfUHXDOCKZ7MARttbR+CWtgmDF9bwH+dsvi
jrIjY5tYt1if3F320+k23k6BS1UGTRCwbBdPIPk93dRuelJliw8Tuqj72Q==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:15 2025 by rpki-client