Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/dcmoOUu1AVzWf36VstP-j4S6yVQ.roa
File:                     dcmoOUu1AVzWf36VstP-j4S6yVQ.roa (raw, json)
Hash identifier:          BOuJEpphcm4JStdK4HqrcnUE1PeA8QkM76weQmOg9/w=
Subject key identifier:   75:C9:A8:39:4B:B5:01:5C:D6:7F:7E:95:B2:D3:FE:8F:84:BA:C9:54
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       06
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/dcmoOUu1AVzWf36VstP-j4S6yVQ.roa
Signing time:             Mon 28 Aug 2023 02:08:19 +0000
ROA not before:           Mon 28 Aug 2023 02:08:19 +0000
ROA not after:            Wed 21 Aug 2024 06:10:04 +0000
asID:                     23784
IP address blocks:        219.117.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Aug 28 02:08:19 2023 GMT
            Not After : Aug 21 06:10:04 2024 GMT
        Subject: CN=75C9A8394BB5015CD67F7E95B2D3FE8F84BAC954
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:52:d7:72:a8:83:ff:85:19:17:ac:c0:b0:10:
                    e0:53:dd:8c:6c:23:f2:27:31:df:d7:fe:aa:ae:14:
                    58:ee:c5:e8:ed:15:a8:c7:b1:7d:55:ec:40:ee:c4:
                    41:1d:df:9e:cc:89:dd:42:f8:20:73:66:12:38:b8:
                    2e:47:81:95:99:73:4d:36:8a:9e:40:b2:2a:bd:cd:
                    db:82:5a:62:16:fb:1a:48:69:17:36:08:ca:d1:35:
                    0f:9d:2e:9d:84:1e:be:07:5a:3e:ce:98:69:6d:f4:
                    06:9c:88:e8:ce:76:b2:f5:b9:75:99:be:00:be:4c:
                    dc:e3:8a:89:be:1c:99:bc:b6:6b:d0:c3:d4:e4:8d:
                    5b:f2:1a:24:cb:7d:6a:4e:02:2b:3c:9f:07:df:50:
                    50:95:d7:3a:75:80:82:7b:df:ec:3f:a0:ad:c9:f1:
                    d6:94:1c:d6:63:38:e1:a2:c6:4a:f9:bc:73:26:d4:
                    e6:7b:82:66:39:1c:1b:d3:d6:da:86:5e:af:fb:f7:
                    ef:76:5d:46:59:19:f4:b0:60:ed:85:95:59:d3:9c:
                    3d:eb:0a:56:cc:f1:d7:67:22:6b:f2:50:38:63:ea:
                    a5:7a:1e:12:32:e8:e6:84:83:79:a7:6c:66:ca:73:
                    d8:4d:e9:73:67:51:50:f3:5a:53:ee:b6:7d:df:35:
                    4d:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:C9:A8:39:4B:B5:01:5C:D6:7F:7E:95:B2:D3:FE:8F:84:BA:C9:54
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/dcmoOUu1AVzWf36VstP-j4S6yVQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.117.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:4c:52:05:af:f8:2f:c6:98:ab:e2:18:f4:3c:74:23:c5:34:
         76:ea:f1:36:f3:0c:ea:ae:5b:d4:5f:28:9b:1d:6e:d6:d0:fe:
         00:e5:57:00:aa:85:ab:e8:2e:ad:97:cc:d6:a3:e6:02:7a:42:
         20:ad:71:86:8d:f1:64:91:7a:6f:c2:1a:1e:db:12:14:c6:62:
         a1:e6:e9:af:15:2e:5c:6a:ce:d0:3f:09:20:20:4c:11:c6:3a:
         aa:bc:be:1b:a5:f1:5d:65:01:a0:5b:5a:ac:68:23:87:59:bd:
         e9:7b:99:71:f6:76:d4:dd:b2:e5:c8:d2:bf:c1:29:e3:02:c2:
         dc:9f:4c:fc:61:a7:05:c9:3f:35:1d:f3:22:cf:40:04:e1:e9:
         5d:cb:82:38:12:c5:a7:1e:32:ba:f7:60:43:d2:40:91:19:08:
         64:2c:64:10:4c:ef:d3:88:5b:1f:66:a3:3d:5e:20:28:a5:96:
         e3:03:e2:79:02:cd:ef:e3:d1:b1:79:fd:8f:d1:a5:4c:cf:4c:
         55:c6:98:14:f7:3d:b2:d4:ed:88:7d:4e:8b:d0:e7:d1:8b:7b:
         00:6d:c3:c3:05:64:96:e1:b4:aa:75:d1:c1:47:1c:6f:01:33:
         cd:6c:bd:c1:16:6a:ae:48:fb:ae:5b:af:5b:ee:dc:62:4a:60:
         e0:a3:23:af
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBBjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhCRDY5
MDAyRDBFOEI3RUQyQzNEMUQ1RDA3QUU2OTIyQzc0OTdGMDJEMB4XDTIzMDgyODAy
MDgxOVoXDTI0MDgyMTA2MTAwNFowMzExMC8GA1UEAxMoNzVDOUE4Mzk0QkI1MDE1
Q0Q2N0Y3RTk1QjJEM0ZFOEY4NEJBQzk1NDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAMhS13Kog/+FGReswLAQ4FPdjGwj8icx39f+qq4UWO7F6O0VqMex
fVXsQO7EQR3fnsyJ3UL4IHNmEji4LkeBlZlzTTaKnkCyKr3N24JaYhb7GkhpFzYI
ytE1D50unYQevgdaPs6YaW30BpyI6M52svW5dZm+AL5M3OOKib4cmby2a9DD1OSN
W/IaJMt9ak4CKzyfB99QUJXXOnWAgnvf7D+grcnx1pQc1mM44aLGSvm8cybU5nuC
ZjkcG9PW2oZer/v373ZdRlkZ9LBg7YWVWdOcPesKVszx12cia/JQOGPqpXoeEjLo
5oSDeadsZspz2E3pc2dRUPNaU+62fd81TQ8CAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBR1yag5S7UBXNZ/fpWy0/6PhLrJVDAfBgNVHSMEGDAWgBS9aQAtDot+0sPR1dB6
5pIsdJfwLTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTc3L3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhTWDhDMC5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL3ZXa0FMUTZMZnRMRDBkWFFldWFTTEhT
WDhDMC5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85NzcvZGNtb09VdTFBVnpXZjM2VnN0UC1qNFM2eVZRLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEBNt1kDANBgkqhkiG9w0BAQsFAAOCAQEAYUxSBa/4L8aYq+IY9Dx0I8U0durx
NvMM6q5b1F8omx1u1tD+AOVXAKqFq+gurZfM1qPmAnpCIK1xho3xZJF6b8IaHtsS
FMZioebprxUuXGrO0D8JICBMEcY6qry+G6XxXWUBoFtarGgjh1m96XuZcfZ21N2y
5cjSv8Ep4wLC3J9M/GGnBck/NR3zIs9ABOHpXcuCOBLFpx4yuvdgQ9JAkRkIZCxk
EEzv04hbH2ajPV4gKKWW4wPieQLN7+PRsXn9j9GlTM9MVcaYFPc9stTtiH1Oi9Dn
0Yt7AG3DwwVkluG0qnXRwUccbwEzzWy9wRZqrkj7rluvW+7cYkpg4KMjrw==
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:57 2024 by rpki-client on console-fra.rpki-client.org