Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/swzgNXSSPmB9AbaCGyQiCLKLBY8.roa
File:                     swzgNXSSPmB9AbaCGyQiCLKLBY8.roa (raw, json)
Hash identifier:          SDb3tCuZFcO4SA3HhQLTUzIqD+4H+og/egNyQUmHuDc=
Subject key identifier:   B3:0C:E0:35:74:92:3E:60:7D:01:B6:82:1B:24:22:08:B2:8B:05:8F
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       37
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/swzgNXSSPmB9AbaCGyQiCLKLBY8.roa
Signing time:             Fri 01 Dec 2023 01:29:33 +0000
ROA not before:           Fri 01 Dec 2023 01:29:33 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131971
IP address blocks:        202.1.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Dec  1 01:29:33 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B30CE03574923E607D01B6821B242208B28B058F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:07:57:79:1d:df:9a:bc:8a:8e:ab:65:79:9b:
                    88:46:6b:06:8a:ef:f7:9d:04:ea:66:bf:d7:bb:13:
                    e6:3e:14:5a:13:e4:c4:e9:a6:18:9d:16:b1:ac:8e:
                    43:23:2e:73:34:fc:20:4b:b6:89:6e:10:1b:b9:8f:
                    56:56:f1:20:a5:9e:48:53:6d:6f:ec:d9:ff:f0:dd:
                    b7:32:c2:97:0d:df:e2:5c:f2:c9:97:12:14:23:20:
                    90:85:eb:d4:0c:a5:cc:12:ec:dd:6a:fb:ba:96:42:
                    f7:cd:85:67:4b:bb:4c:11:88:1a:a1:0c:49:ba:71:
                    36:dd:67:2e:62:a7:1c:7b:c3:f0:db:b9:73:b5:c3:
                    b2:99:8f:4f:3f:4b:b5:ad:03:8c:f1:66:d8:98:ed:
                    e6:11:42:b9:10:34:67:91:b0:1e:a8:cc:06:78:51:
                    83:f8:ff:ce:6c:d5:d4:ea:dc:fd:c1:1e:d8:6b:8a:
                    c3:9f:8d:b5:15:c5:07:03:46:3e:81:a5:63:c1:3d:
                    4b:af:97:39:a2:a3:f2:d8:d9:2f:ad:8f:a5:28:98:
                    70:3e:9c:0f:e4:fe:e3:43:10:53:21:d8:af:3f:f8:
                    05:a2:d2:21:0a:16:f5:8d:b6:cd:df:ab:82:04:3b:
                    16:15:91:e2:2b:ad:ea:c9:16:16:28:74:4b:c3:79:
                    04:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:0C:E0:35:74:92:3E:60:7D:01:B6:82:1B:24:22:08:B2:8B:05:8F
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/swzgNXSSPmB9AbaCGyQiCLKLBY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         1e:37:d3:78:08:e2:b3:b4:fe:a8:f8:c3:75:66:3a:40:fa:9f:
         6d:30:73:86:76:a6:31:3b:38:d9:69:7c:40:36:65:6b:c8:bc:
         d1:94:5c:cb:54:dd:e7:3f:29:3b:d8:d9:66:78:b0:32:88:26:
         15:9b:9f:cf:1d:b2:69:9b:81:c9:b8:54:80:aa:0b:05:c6:e1:
         0b:19:37:52:63:75:b8:ff:5e:b9:bd:12:27:ba:71:76:34:bb:
         d0:b6:bf:48:6c:60:7e:4f:ad:15:13:de:63:ab:06:d0:86:94:
         a5:f7:c6:5f:18:20:d1:c2:f6:cd:05:5e:2c:10:16:c9:d0:76:
         58:d6:fa:fc:b4:0a:a5:5e:28:36:0a:d8:b9:68:06:41:3a:f1:
         5c:ef:02:2d:50:2c:76:ed:90:0a:68:da:86:f9:11:55:88:34:
         a6:82:b4:dd:3a:38:b4:83:82:a2:fe:6f:cc:f2:69:88:3b:d0:
         04:67:40:8e:f4:9e:96:11:52:5a:81:fc:0c:9c:8c:96:3a:f5:
         53:83:fe:59:5d:33:d1:a0:d2:9d:aa:2b:8f:bd:5c:5e:cf:00:
         de:c4:48:46:e4:8c:b8:b7:57:91:3b:31:7b:83:b4:b1:8b:7e:
         70:dc:d4:4b:9c:c1:47:03:66:47:df:74:00:1b:ff:9b:dc:14:
         b4:e4:e7:05
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBNzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhBOTM1
RDVBRDMzREM2MzBDNDYxMTk4NzE0MEY1RTQ2OEI3MDgxRDExMB4XDTIzMTIwMTAx
MjkzM1oXDTI0MTExNDAxMzAwM1owMzExMC8GA1UEAxMoQjMwQ0UwMzU3NDkyM0U2
MDdEMDFCNjgyMUIyNDIyMDhCMjhCMDU4RjCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOEHV3kd35q8io6rZXmbiEZrBorv950E6ma/17sT5j4UWhPkxOmm
GJ0WsayOQyMuczT8IEu2iW4QG7mPVlbxIKWeSFNtb+zZ//DdtzLClw3f4lzyyZcS
FCMgkIXr1AylzBLs3Wr7upZC982FZ0u7TBGIGqEMSbpxNt1nLmKnHHvD8Nu5c7XD
spmPTz9Lta0DjPFm2Jjt5hFCuRA0Z5GwHqjMBnhRg/j/zmzV1Orc/cEe2GuKw5+N
tRXFBwNGPoGlY8E9S6+XOaKj8tjZL62PpSiYcD6cD+T+40MQUyHYrz/4BaLSIQoW
9Y22zd+rggQ7FhWR4iut6skWFih0S8N5BIECAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBSzDOA1dJI+YH0BtoIbJCIIsosFjzAfBgNVHSMEGDAWgBSpNdWtM9xjDEYRmHFA
9eRotwgdETAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvOTk5Ny9xVFhWclRQY1l3eEdFWmh4UVBYa2FMY0lIUkUuY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9xVFhWclRQY1l3eEdFWmh4UVBYa2FM
Y0lIUkUuY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvOTk5Ny9zd3pnTlhTU1BtQjlBYmFDR3lRaUNMS0xCWTgucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQDygHQMA0GCSqGSIb3DQEBCwUAA4IBAQAeN9N4COKztP6o+MN1ZjpA+p9t
MHOGdqYxOzjZaXxANmVryLzRlFzLVN3nPyk72NlmeLAyiCYVm5/PHbJpm4HJuFSA
qgsFxuELGTdSY3W4/165vRInunF2NLvQtr9IbGB+T60VE95jqwbQhpSl98ZfGCDR
wvbNBV4sEBbJ0HZY1vr8tAqlXig2Cti5aAZBOvFc7wItUCx27ZAKaNqG+RFViDSm
grTdOji0g4Ki/m/M8mmIO9AEZ0CO9J6WEVJagfwMnIyWOvVTg/5ZXTPRoNKdqiuP
vVxezwDexEhG5Iy4t1eROzF7g7Sxi35w3NRLnMFHA2ZH33QAG/+b3BS05OcF
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org