Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/1-zPlkulO-ImWupyqyDz1PQT3_A.roa
File:                     1-zPlkulO-ImWupyqyDz1PQT3_A.roa (raw, json)
Hash identifier:          2fa/JQzocY3qgRUvbeE1SzxTW84f/IyrKYR5DYfGcEo=
Subject key identifier:   D7:EC:CF:96:4B:A5:3B:E2:26:5A:EA:72:AB:20:F3:D4:F4:13:DF:F0
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       14
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/1-zPlkulO-ImWupyqyDz1PQT3_A.roa
Signing time:             Fri 01 Sep 2023 01:32:46 +0000
ROA not before:           Fri 01 Sep 2023 01:32:46 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Sep  1 01:32:46 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=D7ECCF964BA53BE2265AEA72AB20F3D4F413DFF0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b7:55:ff:c5:40:2d:87:ff:90:71:69:93:c6:
                    6d:7d:11:b4:0b:16:cb:b1:7d:7e:af:49:bb:eb:57:
                    fb:f6:11:ec:ea:54:ff:20:d0:1b:9a:15:72:00:51:
                    be:19:65:1e:ff:ec:16:fc:f4:a2:e5:81:5c:12:b0:
                    65:29:ff:26:23:46:ad:cd:c8:bc:f8:cc:d7:37:66:
                    94:79:1e:69:ad:c1:3d:c0:48:64:80:21:7b:8b:88:
                    be:9f:2e:fa:ed:2c:c6:f4:16:65:35:64:80:2b:ac:
                    19:c4:1f:47:b4:5c:9c:ad:67:93:6b:25:c6:85:f9:
                    08:dc:bd:33:5b:62:7b:7a:9a:10:2d:c5:5a:b5:f4:
                    ad:4f:dc:e5:ca:cf:a8:1d:19:16:81:fb:3b:ab:a3:
                    89:e0:9d:12:f5:b7:59:82:5a:37:d0:cb:55:9a:a3:
                    95:6b:d2:fd:e0:e9:09:1c:b9:cb:c9:0b:c0:dd:1a:
                    69:54:41:dd:63:f3:7d:f2:51:61:66:8b:1f:dd:1e:
                    cc:ec:62:aa:6e:5a:c0:55:33:56:d8:9f:62:74:86:
                    7c:8b:85:4c:87:5e:ed:8a:7f:e3:a3:67:22:01:f7:
                    1a:8e:7a:1a:c7:bd:c5:26:0b:64:35:6c:e0:0b:6a:
                    38:d8:5c:dd:a0:eb:cb:5f:4e:bd:1e:7e:e5:80:b8:
                    48:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:EC:CF:96:4B:A5:3B:E2:26:5A:EA:72:AB:20:F3:D4:F4:13:DF:F0
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/1-zPlkulO-ImWupyqyDz1PQT3_A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:9f:09:dd:dd:3c:ab:32:b3:d3:72:1a:8a:70:13:16:b9:28:
         97:89:84:07:c9:9a:e9:72:65:eb:a2:d2:62:40:5a:c2:da:5c:
         63:27:90:2d:a7:8e:82:e8:b3:5e:90:c6:d8:4b:ee:fd:39:be:
         6c:c0:1b:17:fe:1c:aa:a4:5c:88:9c:8d:87:55:6c:ed:61:c4:
         41:56:20:87:2d:c4:47:cd:ec:d5:cb:07:39:5a:3e:dc:c4:b8:
         38:22:5d:10:f1:6a:4e:5c:b0:b8:a8:eb:c7:ae:e8:ed:e1:7b:
         19:0f:39:3c:86:bc:93:56:44:af:4b:44:d2:95:f9:25:27:f2:
         5d:11:ce:79:f2:34:a5:35:2b:d4:9e:d9:93:b6:65:de:94:bb:
         73:3d:cc:e0:ae:5a:bf:f3:b0:4f:f8:10:37:6a:ee:b0:58:04:
         5f:20:f9:7a:ff:18:6c:40:c3:21:1a:61:ab:16:c9:fb:b1:8b:
         45:25:a4:e6:a0:37:1e:d0:87:56:46:d5:9c:23:f5:e2:af:a5:
         06:0f:2d:c2:60:f5:92:d8:93:5a:89:20:c5:89:c8:6b:29:28:
         fb:27:9a:dc:5e:59:4d:fe:e2:5d:3e:65:bf:ca:88:5f:21:22:
         e3:dc:98:a6:e4:c9:a5:0d:77:b5:0b:ef:74:ab:af:c6:11:cf:
         97:fc:d1:f2
-----BEGIN CERTIFICATE-----
MIIFBzCCA++gAwIBAgIBFDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzN0Q3
NENGNzhCMDAzMUQyQUE1QzlBRUQzODhFN0MwNDM4QzYxNjkyMB4XDTIzMDkwMTAx
MzI0NloXDTI0MDgxNDAxMzAwMlowMzExMC8GA1UEAxMoRDdFQ0NGOTY0QkE1M0JF
MjI2NUFFQTcyQUIyMEYzRDRGNDEzREZGMDCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALe3Vf/FQC2H/5BxaZPGbX0RtAsWy7F9fq9Ju+tX+/YR7OpU/yDQ
G5oVcgBRvhllHv/sFvz0ouWBXBKwZSn/JiNGrc3IvPjM1zdmlHkeaa3BPcBIZIAh
e4uIvp8u+u0sxvQWZTVkgCusGcQfR7RcnK1nk2slxoX5CNy9M1tie3qaEC3FWrX0
rU/c5crPqB0ZFoH7O6ujieCdEvW3WYJaN9DLVZqjlWvS/eDpCRy5y8kLwN0aaVRB
3WPzffJRYWaLH90ezOxiqm5awFUzVtifYnSGfIuFTIde7Yp/46NnIgH3Go56Gse9
xSYLZDVs4AtqONhc3aDry19OvR5+5YC4SBECAwEAAaOCAiQwggIgMB0GA1UdDgQW
BBTX7M+WS6U74iZa6nKrIPPU9BPf8DAfBgNVHSMEGDAWgBQ310z3iwAx0qpcmu04
jnwEOMYWkjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGYGA1UdHwRfMF0wW6BZ
oFeGVXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTg0L045ZE05NHNBTWRLcVhKcnRPSTU4QkRqR0ZwSS5jcmwwbQYIKwYB
BQUHAQEEYTBfMF0GCCsGAQUFBzAChlFyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5u
aWMuYWQuanAvYXAvQTkxQTczODEwMDAwL045ZE05NHNBTWRLcVhKcnRPSTU4QkRq
R0ZwSS5jZXIwDgYDVR0PAQH/BAQDAgeAMIG7BggrBgEFBQcBCwSBrjCBqzBhBggr
BgEFBQcwC4ZVcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL2FwL0E5
MUE3MzgxMDAwMC85ODQvMS16UGxrdWxPLUltV3VweXF5RHoxUFFUM19BLnJvYTBG
BggrBgEFBQcwDYY6aHR0cHM6Ly9ycGtpLXJlcG9zaXRvcnkubmljLmFkLmpwL3Jy
ZHAvYXAvbm90aWZpY2F0aW9uLnhtbDAfBggrBgEFBQcBBwEB/wQQMA4wDAQCAAEw
BgMEA7SUuDANBgkqhkiG9w0BAQsFAAOCAQEAR58J3d08qzKz03IainATFrkol4mE
B8ma6XJl66LSYkBawtpcYyeQLaeOguizXpDG2Evu/Tm+bMAbF/4cqqRciJyNh1Vs
7WHEQVYghy3ER83s1csHOVo+3MS4OCJdEPFqTlywuKjrx67o7eF7GQ85PIa8k1ZE
r0tE0pX5JSfyXRHOefI0pTUr1J7Zk7Zl3pS7cz3M4K5av/OwT/gQN2rusFgEXyD5
ev8YbEDDIRphqxbJ+7GLRSWk5qA3HtCHVkbVnCP14q+lBg8twmD1ktiTWokgxYnI
ayko+yea3F5ZTf7iXT5lv8qIXyEi49yYpuTJpQ13tQvvdKuvxhHPl/zR8g==
-----END CERTIFICATE-----
Generated at Fri Jun 14 19:06:48 2024 by rpki-client on console-ams.rpki-client.org