Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa
File:                     fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa (raw, json)
Hash identifier:          k7XblHXix6Q1yT7Stzwz8ORc3eXubC3unvi6wfZcABY=
Subject key identifier:   7E:0B:55:9E:E6:21:99:E5:9F:84:5C:90:3B:83:BF:E3:37:4E:81:E0
Certificate issuer:       /CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
Certificate serial:       29
Authority key identifier: 8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa
Signing time:             Sun 31 Mar 2024 01:32:22 +0000
ROA not before:           Sun 31 Mar 2024 01:32:22 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     24271
IP address blocks:        202.177.80.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D0962EDE0F5E21A7E8F9E1AB006FF940E04ED46
        Validity
            Not Before: Mar 31 01:32:22 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=7E0B559EE62199E59F845C903B83BFE3374E81E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:f0:70:c5:a6:a2:51:54:43:92:3e:12:87:01:
                    e5:85:f9:40:ad:ab:74:23:f2:58:c5:ce:7b:1c:a6:
                    39:12:75:56:e0:a6:a8:e5:df:43:8d:95:ae:4b:65:
                    32:53:82:db:c2:56:99:ee:57:d9:ee:47:8a:ca:14:
                    b8:e3:9f:de:e3:93:1c:54:9f:19:b3:30:1e:57:56:
                    8b:79:bd:9a:24:6e:09:5f:b0:b9:20:59:4c:9c:b4:
                    61:a7:a0:41:41:95:a5:f6:b0:c6:2d:63:b4:6e:41:
                    99:92:2c:ca:96:ed:24:6b:21:45:c2:b7:cf:9d:6e:
                    f1:db:b0:26:2a:ed:66:37:50:51:82:da:09:b1:f3:
                    31:f3:2c:76:65:83:cd:2f:a4:13:51:d2:7e:99:ed:
                    6b:d5:af:75:f9:76:cc:e4:dc:02:48:af:3b:14:87:
                    75:27:6f:1f:96:b6:51:dd:4d:9e:50:30:42:4c:fa:
                    99:44:54:d2:99:37:15:63:01:f5:9a:20:82:39:cb:
                    a6:73:ce:69:34:38:59:e5:de:62:01:51:06:08:e1:
                    16:ac:d6:8d:8a:a2:de:5a:e1:96:64:44:f4:0c:70:
                    39:b0:28:83:ca:0d:50:94:ba:b1:d5:58:07:56:83:
                    92:94:29:1b:b4:ae:b1:88:46:60:30:e4:a5:9b:2f:
                    68:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:0B:55:9E:E6:21:99:E5:9F:84:5C:90:3B:83:BF:E3:37:4E:81:E0
            X509v3 Authority Key Identifier:
                keyid:8D:09:62:ED:E0:F5:E2:1A:7E:8F:9E:1A:B0:06:FF:94:0E:04:ED:46

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/jQli7eD14hp-j54asAb_lA4E7UY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jQli7eD14hp-j54asAb_lA4E7UY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/868/fgtVnuYhmeWfhFyQO4O_4zdOgeA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.177.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         70:74:27:2d:3f:22:81:ad:1b:de:03:9a:77:d1:1f:3e:7e:0e:
         82:a9:75:01:9d:e7:e8:82:e5:7a:85:77:14:7f:c7:30:13:21:
         53:17:72:88:20:fa:54:17:bc:bf:4a:9a:36:27:85:f4:24:18:
         a7:5e:b5:4e:9b:a9:b3:70:c9:ae:99:cb:51:aa:3a:d7:6c:d4:
         02:8c:c5:01:f5:af:d8:60:0c:c6:d0:ba:76:bb:bb:d2:e7:b3:
         fa:24:ca:aa:b2:c7:d3:0f:36:af:4e:4e:95:43:d3:4d:02:a0:
         e0:14:41:f4:b9:db:ed:8d:be:7c:6e:fa:11:3c:6c:6e:8b:b7:
         93:6d:39:b1:5d:86:b1:f4:6c:a8:45:4e:39:9a:ee:1c:2a:9a:
         2c:3e:02:16:57:be:63:51:b2:b0:24:f3:3c:50:86:78:8e:3f:
         95:88:06:89:61:61:26:ca:92:e7:7b:e5:16:f3:e1:fd:cb:30:
         b7:de:07:c8:6f:af:2e:3a:aa:88:93:71:a1:73:4e:b1:38:e5:
         ee:ed:f2:33:14:e8:36:da:91:55:98:d0:b9:ce:5e:c1:46:92:
         7b:8e:94:e3:df:00:a8:e0:0d:18:c2:ea:3b:4b:7f:0a:6e:3c:
         8a:20:db:21:af:7f:63:8e:53:0a:46:a9:28:59:d5:36:72:f3:
         83:a7:06:92
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBKTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg4RDA5
NjJFREUwRjVFMjFBN0U4RjlFMUFCMDA2RkY5NDBFMDRFRDQ2MB4XDTI0MDMzMTAx
MzIyMloXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoN0UwQjU1OUVFNjIxOTlF
NTlGODQ1QzkwM0I4M0JGRTMzNzRFODFFMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALnwcMWmolFUQ5I+EocB5YX5QK2rdCPyWMXOexymORJ1VuCmqOXf
Q42VrktlMlOC28JWme5X2e5HisoUuOOf3uOTHFSfGbMwHldWi3m9miRuCV+wuSBZ
TJy0YaegQUGVpfawxi1jtG5BmZIsypbtJGshRcK3z51u8duwJirtZjdQUYLaCbHz
MfMsdmWDzS+kE1HSfpnta9Wvdfl2zOTcAkivOxSHdSdvH5a2Ud1NnlAwQkz6mURU
0pk3FWMB9ZoggjnLpnPOaTQ4WeXeYgFRBgjhFqzWjYqi3lrhlmRE9AxwObAog8oN
UJS6sdVYB1aDkpQpG7SusYhGYDDkpZsvaFUCAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR+C1We5iGZ5Z+EXJA7g7/jN06B4DAfBgNVHSMEGDAWgBSNCWLt4PXiGn6Pnhqw
Bv+UDgTtRjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvODY4L2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0RTdVWS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL2pRbGk3ZUQxNGhwLWo1NGFzQWJfbEE0
RTdVWS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC84NjgvZmd0Vm51WWhtZVdmaEZ5UU80T180emRPZ2VBLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBMqxUDANBgkqhkiG9w0BAQsFAAOCAQEAcHQnLT8iga0b3gOad9EfPn4Ogql1
AZ3n6ILleoV3FH/HMBMhUxdyiCD6VBe8v0qaNieF9CQYp161Tpups3DJrpnLUao6
12zUAozFAfWv2GAMxtC6dru70uez+iTKqrLH0w82r05OlUPTTQKg4BRB9Lnb7Y2+
fG76ETxsbou3k205sV2GsfRsqEVOOZruHCqaLD4CFle+Y1GysCTzPFCGeI4/lYgG
iWFhJsqS53vlFvPh/cswt94HyG+vLjqqiJNxoXNOsTjl7u3yMxToNtqRVZjQuc5e
wUaSe46U498AqOANGMLqO0t/Cm48iiDbIa9/Y45TCkapKFnVNnLzg6cGkg==
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org