Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GqgLwg3t5mIGwO-5WGJb5Sj2KVg.roa
File:                     GqgLwg3t5mIGwO-5WGJb5Sj2KVg.roa (raw, json)
Hash identifier:          Bl4NxomneJsJikqGFPZbH8y9Nx6gSA4eF9Bi8xLL7WQ=
Subject key identifier:   1A:A8:0B:C2:0D:ED:E6:62:06:C0:EF:B9:58:62:5B:E5:28:F6:29:58
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01AD
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GqgLwg3t5mIGwO-5WGJb5Sj2KVg.roa
Signing time:             Wed 01 Nov 2023 01:29:13 +0000
ROA not before:           Wed 01 Nov 2023 01:29:13 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        183.181.100.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:13 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=1AA80BC20DEDE66206C0EFB958625BE528F62958
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:a9:56:98:ae:36:98:4d:4c:b3:26:30:69:6a:
                    60:cf:09:2c:73:77:ae:a0:5f:59:f3:b9:a0:bf:31:
                    7a:33:ba:c7:9e:59:8e:50:73:58:4f:ad:c2:d5:13:
                    33:e9:aa:63:3d:ea:b1:06:9b:3c:84:17:c3:f4:ae:
                    9c:6d:08:32:36:39:81:37:fd:d5:a9:01:01:bb:0a:
                    5d:6e:d5:a6:62:80:a4:56:67:37:ea:bc:eb:3d:98:
                    40:b5:2f:9c:5b:26:93:54:d7:e9:b2:52:4d:e1:13:
                    3a:3a:99:68:df:8b:ad:f5:b9:e2:6c:45:3d:53:c2:
                    6e:5d:48:4e:33:a7:f8:54:f6:05:6e:78:10:88:fd:
                    ac:df:e3:5f:4a:be:a2:94:5f:46:ac:25:a6:3f:93:
                    9c:69:87:aa:f3:b6:71:30:e1:68:ae:7a:aa:ef:90:
                    86:ea:f8:65:ae:80:19:90:ac:64:ad:02:0a:58:af:
                    67:50:f3:e4:1c:cd:20:55:af:45:61:2b:2b:e3:11:
                    a6:1f:46:c8:b4:2e:06:2f:6c:e7:a4:9b:0f:77:00:
                    18:41:2d:9c:c8:68:3e:15:7b:11:bf:53:e8:fb:82:
                    9a:2c:19:4f:0a:48:c5:ca:05:7b:a1:0f:ab:c1:40:
                    40:df:f2:fa:8a:6e:68:78:b1:4a:b1:48:a3:1d:27:
                    78:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:A8:0B:C2:0D:ED:E6:62:06:C0:EF:B9:58:62:5B:E5:28:F6:29:58
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/GqgLwg3t5mIGwO-5WGJb5Sj2KVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.100.0/23

    Signature Algorithm: sha256WithRSAEncryption
         17:34:eb:22:38:d0:b7:69:be:5e:0c:37:28:30:ac:48:72:15:
         f3:b5:39:87:c9:40:11:ea:b7:6f:ae:c8:c3:10:6c:2b:25:e5:
         72:dd:da:46:d8:8c:7b:e2:30:47:f2:e2:d7:ad:44:c4:52:4e:
         ab:34:94:a6:31:f4:c8:05:06:85:d2:d4:6f:42:d0:18:9c:13:
         d9:df:eb:42:67:2c:36:65:54:c9:44:dc:cc:86:c3:05:8f:ab:
         22:4a:af:3b:1a:cb:db:d7:a3:96:de:14:91:d7:91:d0:dd:7c:
         b3:3a:0f:77:d3:0a:6c:10:8f:30:eb:0f:cf:48:11:82:b4:58:
         8f:b7:29:97:d8:c1:b5:2e:be:4c:59:2c:d0:48:e7:4a:4a:0c:
         7c:46:a0:b6:96:60:8c:9f:3f:7d:b3:c9:f9:5e:0b:43:b6:c3:
         0c:1c:1e:71:b4:4b:85:6b:3f:25:1a:4d:f0:58:2a:0e:68:5b:
         09:a7:a8:b9:7d:d9:d5:08:4f:0e:d5:0c:a0:a1:31:aa:05:59:
         c0:ba:33:1d:49:1b:78:2f:d4:75:27:2c:3f:05:37:80:27:08:
         1e:79:e4:1a:82:62:6f:c1:b7:c8:75:dd:e0:e2:7e:b3:2a:e5:
         24:bd:2d:c2:47:b6:31:81:31:bf:cb:7f:59:9e:b4:47:17:d4:
         b4:75:81:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org