Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tTX4ghayknP3KTjQ8YNR_Q2pWug.roa
File:                     tTX4ghayknP3KTjQ8YNR_Q2pWug.roa (raw, json)
Hash identifier:          EZGQ96vG0K1rk2N6w3eZY3VZnAizmGSdvXEPX/8mzU8=
Subject key identifier:   B5:35:F8:82:16:B2:92:73:F7:29:38:D0:F1:83:51:FD:0D:A9:5A:E8
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       019D
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tTX4ghayknP3KTjQ8YNR_Q2pWug.roa
Signing time:             Tue 01 Aug 2023 01:28:15 +0000
ROA not before:           Tue 01 Aug 2023 01:28:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.75.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 413 (0x19d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Aug  1 01:28:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B535F88216B29273F72938D0F18351FD0DA95AE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c0:0d:13:66:6e:9f:62:3f:09:cd:34:ab:b6:
                    0d:3f:ee:ee:00:06:5d:67:ca:1d:63:76:51:12:4e:
                    d4:70:e0:c9:e3:db:b7:b4:c0:ee:5e:8c:07:63:7d:
                    b6:f1:9d:76:f9:96:87:24:68:97:99:d7:b2:e4:5f:
                    7e:dd:94:f8:ad:8e:6c:0f:53:7a:bd:6e:bb:7f:3f:
                    c7:28:f5:22:ea:c7:68:d0:0e:8a:cf:e8:f7:d6:9e:
                    03:e7:ad:1b:d3:5c:e6:a7:40:1b:bf:59:7c:eb:f0:
                    62:59:44:86:f9:35:f1:44:a3:27:73:c9:3f:e1:f3:
                    d3:0b:24:79:37:8b:57:0a:27:ac:36:78:0f:ce:cd:
                    62:3d:08:24:85:2a:cd:70:ad:fd:53:82:13:4b:d9:
                    c2:28:2c:12:cf:f6:9a:26:89:93:6a:a4:de:48:e4:
                    91:48:a8:08:1e:68:00:b7:bc:4a:22:3f:fc:2d:34:
                    d1:10:a2:61:d4:b8:0c:3b:ce:f6:6f:49:82:ce:1e:
                    71:77:c5:8a:c1:29:3f:8f:af:6d:4c:ed:fe:4f:ac:
                    a1:7b:c9:8f:17:f7:77:17:c6:3c:4c:90:5b:72:66:
                    ef:42:d4:37:09:3b:f9:b6:67:00:fd:d3:3e:33:8a:
                    c1:84:af:ed:7d:0d:91:ce:90:af:4f:4e:6c:ec:4c:
                    c0:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:F8:82:16:B2:92:73:F7:29:38:D0:F1:83:51:FD:0D:A9:5A:E8
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/tTX4ghayknP3KTjQ8YNR_Q2pWug.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.75.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:62:38:9e:ce:1e:91:e8:8b:0a:07:e7:96:da:35:d3:e8:f4:
         60:01:3d:a9:3b:fc:99:78:10:d4:95:a3:e9:1d:03:58:eb:e4:
         23:fa:77:97:05:d7:20:a5:ef:23:c8:b5:a4:90:98:f1:b6:23:
         9f:73:55:73:a2:9c:a8:e6:68:68:fc:c5:3e:b4:fe:8f:9c:3c:
         69:70:b0:aa:01:ef:64:60:89:8e:33:f8:eb:a6:53:41:4c:3d:
         e7:78:25:a4:c5:dc:8f:49:49:fe:ef:69:75:ec:a3:f1:54:b8:
         35:49:c4:cd:e8:24:b6:b9:b0:22:dc:96:39:5f:a4:4b:f5:1f:
         83:40:fd:7d:25:36:df:33:dc:8c:db:9a:65:b1:5d:56:db:a0:
         98:39:4c:df:91:db:0b:69:a8:0d:25:ea:b8:5a:90:34:b8:b5:
         06:ab:24:04:b6:ae:24:af:7c:5e:91:ff:1d:0e:a5:d1:8e:91:
         21:7c:b6:3b:fb:56:3b:38:73:22:05:c2:9f:23:ca:f2:d2:c7:
         5f:38:68:2d:0f:64:c1:dc:5b:8e:c5:87:f7:57:b8:08:81:bf:
         44:09:5d:35:41:35:34:30:32:c6:c9:de:c0:26:ef:da:5f:65:
         a6:90:82:98:5f:07:4c:f7:c9:73:6d:47:c1:48:29:a3:6a:cd:
         53:dc:bd:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org