Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
File:                     oRMFtiktmQd0zSPp5xkmwxrVFRM.roa (raw, json)
Hash identifier:          70G/gxFpHtpo0m7ndw+j9Fmp2V7SHviMccBRBaAZbvE=
Subject key identifier:   A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       5A
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
Signing time:             Thu 29 Feb 2024 01:30:51 +0000
ROA not before:           Thu 29 Feb 2024 01:30:51 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        103.2.64.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:51 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A11305B6292D990774CD23E9E71926C31AD51513
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:a4:8a:dc:20:f0:71:a8:4e:ac:ee:02:28:34:
                    b8:28:7c:91:05:c3:1b:06:e4:f0:d6:b7:a4:cd:e8:
                    38:e5:66:5c:82:79:95:5a:97:48:cf:97:14:3b:f9:
                    14:fb:28:ca:2f:e6:6e:3f:6b:ec:fe:c4:11:db:2f:
                    ce:4d:d5:8b:d8:1f:98:5b:e5:0e:35:4b:03:86:0b:
                    aa:bc:ab:e8:3e:b5:64:f5:bd:d2:2a:c8:ed:65:74:
                    97:0a:22:d6:90:29:39:82:f1:7b:3e:91:cf:f9:d8:
                    85:6f:86:f4:cf:3e:80:ca:74:5b:f5:8a:35:0b:83:
                    d2:d2:11:bb:ae:3b:8a:15:7b:f4:dd:15:40:8e:43:
                    23:4c:26:e6:8e:90:10:c2:39:bc:ac:6a:99:9e:83:
                    2e:62:c8:a9:38:0f:cc:cc:1b:70:9c:c5:b3:0f:de:
                    c5:b5:75:03:a0:e0:41:1a:fc:0c:1e:32:c8:e8:c8:
                    3a:2b:4f:52:39:09:df:d9:f1:45:c6:a5:d1:70:8f:
                    96:9b:a5:ed:2a:7f:2f:85:77:56:2e:7f:24:90:1d:
                    c3:78:c9:51:aa:8c:b7:6f:b7:35:75:8e:8f:ba:b0:
                    d4:05:cf:45:e1:b0:8c:96:5b:7b:1b:b2:23:cb:f2:
                    a9:91:f6:f6:cd:07:a1:2a:62:9e:dc:54:88:e8:4d:
                    d0:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:13:05:B6:29:2D:99:07:74:CD:23:E9:E7:19:26:C3:1A:D5:15:13
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/oRMFtiktmQd0zSPp5xkmwxrVFRM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.2.64.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7a:9c:cf:f5:a8:32:92:90:4e:a0:13:6a:a0:f3:96:af:d3:59:
         ac:75:f8:92:e7:78:ea:1d:cc:fc:af:d1:5a:6b:c1:de:24:8d:
         e1:ae:bf:f0:ba:93:08:77:28:ec:e0:a9:82:dc:33:b0:91:1f:
         a2:81:6e:e6:f8:04:ff:f2:0a:6e:b3:7c:23:c8:ea:15:a3:6a:
         6b:91:62:eb:b3:1f:5d:91:b8:44:d9:3f:82:dd:ec:38:8b:6a:
         86:2b:4a:67:af:4a:d3:53:59:fd:16:ca:a8:1d:25:1f:e8:4f:
         ba:c9:5a:d9:35:f2:da:10:56:7a:f5:d4:a7:02:8f:7d:48:1f:
         da:db:3f:ab:5c:90:31:4f:c3:53:ae:6c:f0:8d:56:82:e9:da:
         c1:4d:bf:38:15:12:b8:53:bb:27:4d:77:e6:69:42:4c:89:2c:
         65:93:49:7c:c6:cb:ec:73:bf:ab:58:65:56:19:a3:35:64:25:
         d3:ec:e1:7e:20:98:05:1f:64:65:09:aa:59:2c:9e:f6:11:21:
         9c:a2:d3:40:06:76:6f:3a:21:4c:9b:d1:9d:b6:a8:af:84:89:
         7f:5d:01:14:99:2d:61:73:80:6e:ac:81:15:59:49:e1:dc:ef:
         7d:56:52:8c:4e:15:71:b4:07:98:ba:74:fb:5b:fc:b6:12:c4:
         df:a3:b1:20
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBWjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg5MUFD
QTQ0Mjc1RUMwNTcyQkM2OTIxNTAyQjI0MUMxNEQ0NEE5QUExMB4XDTI0MDIyOTAx
MzA1MVoXDTI1MDIxNDAxMzAwM1owMzExMC8GA1UEAxMoQTExMzA1QjYyOTJEOTkw
Nzc0Q0QyM0U5RTcxOTI2QzMxQUQ1MTUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOykitwg8HGoTqzuAig0uCh8kQXDGwbk8Na3pM3oOOVmXIJ5lVqX
SM+XFDv5FPsoyi/mbj9r7P7EEdsvzk3Vi9gfmFvlDjVLA4YLqryr6D61ZPW90irI
7WV0lwoi1pApOYLxez6Rz/nYhW+G9M8+gMp0W/WKNQuD0tIRu647ihV79N0VQI5D
I0wm5o6QEMI5vKxqmZ6DLmLIqTgPzMwbcJzFsw/exbV1A6DgQRr8DB4yyOjIOitP
UjkJ39nxRcal0XCPlpul7Sp/L4V3Vi5/JJAdw3jJUaqMt2+3NXWOj7qw1AXPReGw
jJZbexuyI8vyqZH29s0HoSpintxUiOhN0CECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBShEwW2KS2ZB3TNI+nnGSbDGtUVEzAfBgNVHSMEGDAWgBSRrKRCdewFcrxpIVAr
JBwU1EqaoTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvNzMxL2theWtRblhzQlhLOGFTRlFLeVFjRk5SS21xRS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2theWtRblhzQlhLOGFTRlFLeVFjRk5S
S21xRS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC83MzEvb1JNRnRpa3RtUWQwelNQcDV4a213eHJWRlJNLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmcCQDANBgkqhkiG9w0BAQsFAAOCAQEAepzP9agykpBOoBNqoPOWr9NZrHX4
kud46h3M/K/RWmvB3iSN4a6/8LqTCHco7OCpgtwzsJEfooFu5vgE//IKbrN8I8jq
FaNqa5Fi67MfXZG4RNk/gt3sOItqhitKZ69K01NZ/RbKqB0lH+hPusla2TXy2hBW
evXUpwKPfUgf2ts/q1yQMU/DU65s8I1WgunawU2/OBUSuFO7J0135mlCTIksZZNJ
fMbL7HO/q1hlVhmjNWQl0+zhfiCYBR9kZQmqWSye9hEhnKLTQAZ2bzohTJvRnbao
r4SJf10BFJktYXOAbqyBFVlJ4dzvfVZSjE4VcbQHmLp0+1v8thLE36OxIA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org