Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/d_s2FEjbrBXpi81qbIuUkqku9po.roa
File:                     d_s2FEjbrBXpi81qbIuUkqku9po.roa (raw, json)
Hash identifier:          +nBxCdoRCYoj57ku1TidNmSUvjdppAl9w5/D/uiC6Qc=
Subject key identifier:   77:FB:36:14:48:DB:AC:15:E9:8B:CD:6A:6C:8B:94:92:A9:2E:F6:9A
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       19
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/d_s2FEjbrBXpi81qbIuUkqku9po.roa
Signing time:             Thu 31 Oct 2024 01:32:05 +0000
ROA not before:           Thu 31 Oct 2024 01:32:05 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18278
IP address blocks:        103.92.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct 31 01:32:05 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=77FB361448DBAC15E98BCD6A6C8B9492A92EF69A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:1c:cf:e2:0e:5b:96:93:ea:83:30:0c:c9:ae:
                    b7:be:61:3a:0d:1d:f7:d6:f2:a5:b5:73:e0:a6:3a:
                    5a:cd:99:dd:89:fe:fc:f0:a3:33:7f:75:35:cc:87:
                    91:5f:62:48:4d:8d:49:b8:52:58:7e:f2:1f:d4:9a:
                    12:02:7c:4e:f9:93:2d:1d:1c:a6:11:0e:47:d7:0e:
                    17:3f:ad:eb:ac:f7:54:34:da:51:84:f5:00:37:15:
                    08:09:7d:d7:1e:d7:ad:11:50:10:7e:5f:f4:e5:62:
                    74:e9:69:39:d1:af:df:e2:a8:42:2f:21:ad:c3:2c:
                    65:45:3d:4b:7b:3a:a9:cd:27:39:30:1e:83:33:a5:
                    0d:46:a9:91:eb:04:9c:7a:c7:e9:63:c8:6c:44:13:
                    d6:5a:d2:a0:09:c3:68:29:25:ba:17:1e:03:5a:c4:
                    28:e6:fb:24:37:82:72:de:82:1f:fd:19:1a:72:52:
                    9c:3f:1d:75:56:fb:59:73:35:81:5e:e5:a1:b8:32:
                    21:1a:b6:5f:f1:96:74:c2:1f:7d:52:aa:df:b6:6d:
                    eb:77:3c:20:a0:46:cf:7f:2f:ee:1c:ef:23:e1:8c:
                    5f:67:5e:f9:fb:ec:09:89:8e:2c:e8:55:20:4f:22:
                    66:41:8f:96:8c:02:11:4e:4b:13:ad:db:6c:ae:5b:
                    1d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:FB:36:14:48:DB:AC:15:E9:8B:CD:6A:6C:8B:94:92:A9:2E:F6:9A
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/d_s2FEjbrBXpi81qbIuUkqku9po.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.92.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1c:a3:f8:f0:9b:fb:16:d3:f7:52:2d:58:d0:38:00:5d:b1:2e:
         fd:3e:6c:01:bd:36:4e:1c:a5:9d:fb:65:84:7d:36:21:3b:ed:
         67:f6:a7:8a:0b:f7:06:4e:c5:f1:e7:6b:cf:c5:87:bc:4e:dd:
         3c:9a:a5:e9:24:46:55:43:78:dc:15:22:2d:53:d2:bd:8b:73:
         10:f1:48:4a:09:ef:35:e5:9f:5e:90:a6:27:a6:54:7c:c5:d5:
         84:4b:41:dc:9e:41:30:6e:da:6e:8b:e2:a2:a9:23:f9:03:36:
         b6:50:9d:da:fa:40:48:32:9d:d6:a8:1c:c4:82:69:37:b9:4b:
         1c:76:f8:97:70:fc:01:ab:27:13:dd:9b:a6:7a:ee:ea:4a:b0:
         51:cc:59:8e:57:c0:91:ff:40:80:8a:82:9a:46:84:95:6a:32:
         9c:6c:2c:97:93:9d:d6:67:7f:46:3e:11:af:b7:c2:0e:aa:62:
         1e:36:30:07:6a:0d:87:56:8b:46:5f:3d:e5:f1:d0:41:6a:56:
         ac:b0:75:6d:cb:88:0d:86:ab:cd:84:b1:f2:99:6b:a7:c1:bb:
         3d:16:bf:84:c8:e9:c3:ea:3b:bb:0c:21:a8:b8:3c:ba:24:be:
         e7:4f:9f:e8:aa:51:ea:67:88:9b:25:2a:0c:77:95:cb:e6:26:
         1a:38:70:c8
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBGTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwODRG
ODhEODM3QTJBMjEzMkVBOEY2RjhGMkRCODJDMUMxRTkwQThCMB4XDTI0MTAzMTAx
MzIwNVoXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoNzdGQjM2MTQ0OERCQUMx
NUU5OEJDRDZBNkM4Qjk0OTJBOTJFRjY5QTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJscz+IOW5aT6oMwDMmut75hOg0d99bypbVz4KY6Ws2Z3Yn+/PCj
M391NcyHkV9iSE2NSbhSWH7yH9SaEgJ8TvmTLR0cphEOR9cOFz+t66z3VDTaUYT1
ADcVCAl91x7XrRFQEH5f9OVidOlpOdGv3+KoQi8hrcMsZUU9S3s6qc0nOTAegzOl
DUapkesEnHrH6WPIbEQT1lrSoAnDaCkluhceA1rEKOb7JDeCct6CH/0ZGnJSnD8d
dVb7WXM1gV7lobgyIRq2X/GWdMIffVKq37Zt63c8IKBGz38v7hzvI+GMX2de+fvs
CYmOLOhVIE8iZkGPlowCEU5LE63bbK5bHbcCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR3+zYUSNusFemLzWpsi5SSqS72mjAfBgNVHSMEGDAWgBQIT4jYN6KiEy6o9vjy
24LBwekKizAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NIcENvcy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL0NFLUkyRGVpb2hNdXFQYjQ4dHVDd2NI
cENvcy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84MDAvZF9zMkZFamJyQlhwaTgxcWJJdVVrcWt1OXBvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEAmdc5DANBgkqhkiG9w0BAQsFAAOCAQEAHKP48Jv7FtP3Ui1Y0DgAXbEu/T5s
Ab02ThylnftlhH02ITvtZ/anigv3Bk7F8edrz8WHvE7dPJql6SRGVUN43BUiLVPS
vYtzEPFISgnvNeWfXpCmJ6ZUfMXVhEtB3J5BMG7abovioqkj+QM2tlCd2vpASDKd
1qgcxIJpN7lLHHb4l3D8AasnE92bpnru6kqwUcxZjlfAkf9AgIqCmkaElWoynGws
l5Od1md/Rj4Rr7fCDqpiHjYwB2oNh1aLRl895fHQQWpWrLB1bcuIDYarzYSx8plr
p8G7PRa/hMjpw+o7uwwhqLg8uiS+50+f6KpR6meImyUqDHeVy+YmGjhwyA==
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:25 2024 by rpki-client on console-fra.rpki-client.org