Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/ZRVFZltW4fft-TZQeQRLo1M-VD8.roa
File:                     ZRVFZltW4fft-TZQeQRLo1M-VD8.roa (raw, json)
Hash identifier:          i1sYC/tab79iv77f4B/6E3s6oPDltiEmTXfoKuvyNB0=
Subject key identifier:   65:15:45:66:5B:56:E1:F7:ED:F9:36:50:79:04:4B:A3:53:3E:54:3F
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       09
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/ZRVFZltW4fft-TZQeQRLo1M-VD8.roa
Signing time:             Fri 17 Nov 2023 07:29:16 +0000
ROA not before:           Fri 17 Nov 2023 07:29:16 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18278
IP address blocks:        202.231.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Nov 17 07:29:16 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=651545665B56E1F7EDF9365079044BA3533E543F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b6:f1:a2:55:3f:12:60:2f:27:71:38:cb:b4:
                    01:db:b8:34:5d:8b:07:76:bb:d6:a5:65:55:db:67:
                    5f:28:83:87:4a:fa:26:d4:a4:07:9e:a1:57:6f:4b:
                    f8:4f:da:ce:2b:04:3a:2c:7f:a4:53:a5:f7:a3:e1:
                    92:3f:bb:0f:98:00:b5:31:46:0c:52:44:58:05:de:
                    7a:5f:79:83:4c:64:cc:89:44:15:bb:b7:f4:3d:0e:
                    4e:e5:0d:ac:57:7c:17:e9:e8:24:6a:10:95:1b:00:
                    37:cf:8f:88:5d:a2:95:cc:d2:2c:4d:20:d1:f6:18:
                    4a:78:1c:2e:fa:6f:2e:6c:af:d8:a0:e3:71:6d:35:
                    80:d8:fc:20:eb:db:ee:6f:40:89:cf:f2:f2:2a:3b:
                    6e:ae:3b:f9:24:6c:8a:bd:e2:df:dd:f0:3a:99:1d:
                    90:a5:08:bd:25:44:0f:fb:23:ee:09:68:2b:ba:2f:
                    05:74:61:df:cb:81:df:8a:07:c6:24:22:8e:29:fe:
                    9f:95:4f:b2:e9:fb:d7:81:a1:db:26:d5:6d:84:96:
                    d1:46:0b:21:cd:3a:32:d1:ae:58:a7:d1:9f:82:0e:
                    b5:07:69:5e:4c:f2:5d:ce:3d:bd:3d:db:76:ac:a4:
                    e6:3e:e4:d8:f1:e4:0e:32:41:f7:84:31:7a:e1:01:
                    de:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:15:45:66:5B:56:E1:F7:ED:F9:36:50:79:04:4B:A3:53:3E:54:3F
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/ZRVFZltW4fft-TZQeQRLo1M-VD8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:73:7d:85:63:85:ff:39:38:ef:cd:37:18:cd:b6:04:6e:6a:
         f4:af:b8:91:41:25:78:12:8f:12:d9:01:04:8f:9c:23:ec:9f:
         15:c2:c5:f1:0a:55:1a:18:ca:05:8c:a3:c5:cf:2e:b4:41:91:
         14:f3:74:78:a7:15:c0:78:a2:e2:9a:a0:31:95:c9:14:11:ea:
         66:3d:50:94:4f:b7:3e:0a:f2:e0:35:46:d3:8f:e2:87:37:9b:
         98:0b:36:0e:6a:8a:fc:ff:3e:9a:dd:94:4b:72:06:82:3d:25:
         91:b7:a3:de:2a:78:c7:82:02:99:10:e6:5a:0e:ad:0b:22:ff:
         0e:d2:a9:ee:65:5c:24:0a:f1:96:c1:6c:39:8e:a0:41:74:ff:
         7b:90:93:90:3e:7f:9c:04:c7:1c:4b:b6:04:81:51:29:de:be:
         24:ac:9f:c4:b1:41:88:aa:d2:f7:f1:00:4d:ba:61:fe:ec:58:
         10:ee:1c:37:75:46:9c:8b:8d:1e:74:80:e8:33:89:1d:4c:ed:
         3c:48:31:e9:f5:5c:17:e7:eb:41:6d:b6:82:de:ee:e6:10:ac:
         4c:27:b7:c0:e6:2d:d5:df:a3:5c:f8:91:29:38:4a:d8:4a:b9:
         1b:37:eb:e4:44:94:d6:7c:29:ab:49:10:df:76:df:3f:f3:5f:
         bd:5d:9c:26
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTIzMTExNzA3
MjkxNloXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoNjUxNTQ1NjY1QjU2RTFG
N0VERjkzNjUwNzkwNDRCQTM1MzNFNTQzRjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMC28aJVPxJgLydxOMu0Adu4NF2LB3a71qVlVdtnXyiDh0r6JtSk
B56hV29L+E/azisEOix/pFOl96Phkj+7D5gAtTFGDFJEWAXeel95g0xkzIlEFbu3
9D0OTuUNrFd8F+noJGoQlRsAN8+PiF2ilczSLE0g0fYYSngcLvpvLmyv2KDjcW01
gNj8IOvb7m9Aic/y8io7bq47+SRsir3i393wOpkdkKUIvSVED/sj7gloK7ovBXRh
38uB34oHxiQijin+n5VPsun714Gh2ybVbYSW0UYLIc06MtGuWKfRn4IOtQdpXkzy
Xc49vT3bdqyk5j7k2PHkDjJB94QxeuEB3kcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBRlFUVmW1bh9+35NlB5BEujUz5UPzAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvWlJWRlpsdFc0ZmZ0LVRaUWVRUkxvMU0tVkQ4LnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMrnsDANBgkqhkiG9w0BAQsFAAOCAQEAS3N9hWOF/zk47803GM22BG5q9K+4
kUEleBKPEtkBBI+cI+yfFcLF8QpVGhjKBYyjxc8utEGRFPN0eKcVwHii4pqgMZXJ
FBHqZj1QlE+3Pgry4DVG04/ihzebmAs2DmqK/P8+mt2US3IGgj0lkbej3ip4x4IC
mRDmWg6tCyL/DtKp7mVcJArxlsFsOY6gQXT/e5CTkD5/nATHHEu2BIFRKd6+JKyf
xLFBiKrS9/EATbph/uxYEO4cN3VGnIuNHnSA6DOJHUztPEgx6fVcF+frQW22gt7u
5hCsTCe3wOYt1d+jXPiRKThK2Eq5Gzfr5ESU1nwpq0kQ33bfP/NfvV2cJg==
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org