Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/PSpxXpM2zWVwO8B4bx9ZJCdcVRo.roa
File:                     PSpxXpM2zWVwO8B4bx9ZJCdcVRo.roa (raw, json)
Hash identifier:          isZamL4IYZmJ6sOAFEBE29R3uEdI2gVGWOXz26AvwbQ=
Subject key identifier:   3D:2A:71:5E:93:36:CD:65:70:3B:C0:78:6F:1F:59:24:27:5C:55:1A
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       0B
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/PSpxXpM2zWVwO8B4bx9ZJCdcVRo.roa
Signing time:             Wed 02 Aug 2023 02:09:44 +0000
ROA not before:           Wed 02 Aug 2023 02:09:44 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        202.80.96.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:09:44 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=3D2A715E9336CD65703BC0786F1F5924275C551A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:5f:bd:76:64:c9:71:e1:7e:09:7b:8b:68:b4:
                    f1:e3:cc:55:6e:a0:90:4a:a7:d2:5a:1e:e8:c6:1d:
                    99:ca:cd:77:71:03:8e:aa:86:c6:9c:69:dd:0f:aa:
                    ad:1c:47:fa:85:6f:ff:58:c0:ee:6b:80:15:07:8b:
                    1a:ba:90:a9:f7:43:c1:78:83:75:1d:bb:ec:ff:39:
                    dd:e9:a2:3c:a0:aa:7c:e7:8c:48:43:0c:23:69:bc:
                    19:82:3b:90:eb:d3:b4:3c:c7:df:29:3f:9d:47:00:
                    a8:d9:e9:e5:48:ae:36:49:71:4d:ac:e9:af:d2:5a:
                    e7:f5:44:fd:a8:d3:94:49:5c:e3:43:e8:48:c8:fc:
                    05:a3:49:ec:e1:39:db:39:2d:00:96:f4:4a:be:cd:
                    d9:d9:a5:e2:15:0e:9a:03:16:38:c6:5b:ac:93:9b:
                    99:1e:3a:ad:da:2c:73:72:3a:e0:0e:52:6a:ce:09:
                    f7:4d:c9:d1:6c:87:4b:58:c1:cb:ee:b4:c7:7f:90:
                    32:e6:a3:fc:65:f4:91:77:42:3c:b9:86:3b:d0:a6:
                    05:cb:4b:b5:23:3f:b1:f5:2c:d7:b3:82:64:0e:92:
                    69:7c:b9:c7:e2:9f:57:d9:0c:56:57:f0:0b:7c:cb:
                    82:90:8d:14:39:28:01:86:40:77:fc:04:8e:78:61:
                    d4:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:2A:71:5E:93:36:CD:65:70:3B:C0:78:6F:1F:59:24:27:5C:55:1A
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/PSpxXpM2zWVwO8B4bx9ZJCdcVRo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.80.96.0/21

    Signature Algorithm: sha256WithRSAEncryption
         85:bb:12:09:18:f1:e3:2e:88:54:c4:2e:bb:b3:d5:3a:6e:14:
         cb:c9:ee:43:00:ec:15:1a:97:fb:d9:ee:9b:70:9a:ba:20:91:
         c8:52:e9:d1:d3:31:4f:15:ee:2c:b0:c3:1b:cd:c8:99:13:70:
         31:66:ce:b1:80:9e:06:51:b4:ff:79:1f:72:f4:e4:6b:ba:07:
         fd:11:a4:74:27:78:c1:62:ec:a6:c1:72:7f:63:08:bd:c0:11:
         24:df:a6:fa:6a:e2:be:64:c6:44:19:0b:93:c9:22:e8:f1:11:
         58:d9:b4:f2:ad:45:4f:17:e2:06:80:d1:0b:7e:14:65:64:88:
         d2:af:f0:3a:aa:dc:3d:62:07:55:ae:0b:69:7e:9a:02:d4:fc:
         69:98:13:43:49:e2:c2:68:25:00:c2:87:67:db:a0:59:c5:df:
         81:9c:7d:83:26:8d:16:71:a2:82:78:c8:b4:04:7f:68:cc:27:
         6b:41:e4:8c:14:09:eb:12:5f:17:bc:47:42:1c:7a:0b:82:6e:
         91:a5:10:d4:5f:01:8c:4d:e3:16:c4:43:75:29:3e:23:3f:23:
         bc:28:24:fb:06:57:f0:49:d8:6d:4a:ec:62:a9:37:31:0e:cd:
         ed:a6:22:6a:da:e5:a2:9f:f3:9d:f1:09:6f:0b:90:e3:31:fe:
         28:bd:22:80
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBCzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyg1MzlC
REYyRkUxOEZGMzg3RkQwMzg0MkM1MDgxQTE0NUVFRUIxQ0Y3MB4XDTIzMDgwMjAy
MDk0NFoXDTI0MDgwMTAxNDcxNFowMzExMC8GA1UEAxMoM0QyQTcxNUU5MzM2Q0Q2
NTcwM0JDMDc4NkYxRjU5MjQyNzVDNTUxQTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOlfvXZkyXHhfgl7i2i08ePMVW6gkEqn0loe6MYdmcrNd3EDjqqG
xpxp3Q+qrRxH+oVv/1jA7muAFQeLGrqQqfdDwXiDdR277P853emiPKCqfOeMSEMM
I2m8GYI7kOvTtDzH3yk/nUcAqNnp5UiuNklxTazpr9Ja5/VE/ajTlElc40PoSMj8
BaNJ7OE52zktAJb0Sr7N2dml4hUOmgMWOMZbrJObmR46rdosc3I64A5Sas4J903J
0WyHS1jBy+60x3+QMuaj/GX0kXdCPLmGO9CmBctLtSM/sfUs17OCZA6SaXy5x+Kf
V9kMVlfwC3zLgpCNFDkoAYZAd/wEjnhh1P0CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBQ9KnFekzbNZXA7wHhvH1kkJ1xVGjAfBgNVHSMEGDAWgBRTm98v4Y/zh/0DhCxQ
gaFF7usc9zAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTA2L1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3ckhQYy5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL1U1dmZMLUdQODRmOUE0UXNVSUdoUmU3
ckhQYy5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85MDYvUFNweFhwTTJ6V1Z3TzhCNGJ4OVpKQ2RjVlJvLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA8pQYDANBgkqhkiG9w0BAQsFAAOCAQEAhbsSCRjx4y6IVMQuu7PVOm4Uy8nu
QwDsFRqX+9num3CauiCRyFLp0dMxTxXuLLDDG83ImRNwMWbOsYCeBlG0/3kfcvTk
a7oH/RGkdCd4wWLspsFyf2MIvcARJN+m+mrivmTGRBkLk8ki6PERWNm08q1FTxfi
BoDRC34UZWSI0q/wOqrcPWIHVa4LaX6aAtT8aZgTQ0niwmglAMKHZ9ugWcXfgZx9
gyaNFnGignjItAR/aMwna0HkjBQJ6xJfF7xHQhx6C4JukaUQ1F8BjE3jFsRDdSk+
Iz8jvCgk+wZX8EnYbUrsYqk3MQ7N7aYiatrlop/znfEJbwuQ4zH+KL0igA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:50 2024 by rpki-client on console-ams.rpki-client.org