Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
File:                     04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa (raw, json)
Hash identifier:          of9jy/236C5LLy+6DH4lkOJjZfn4Fj+8je+OmVXYK8A=
Subject key identifier:   D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01C5
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
Signing time:             Fri 31 May 2024 01:30:45 +0000
ROA not before:           Fri 31 May 2024 01:30:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        202.191.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 453 (0x1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=D38186D8D9F83F05AB8684268741807BF1A577E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:b6:7b:73:af:c4:84:e6:d6:45:61:c0:cf:3e:
                    2f:4d:25:96:b4:4b:59:d0:7b:96:e7:16:16:a5:6c:
                    4c:6b:3c:ac:62:db:77:b6:41:3a:86:19:1f:39:ef:
                    55:0a:d1:4b:6e:a0:d4:b0:70:e3:c2:69:86:e1:b9:
                    9b:93:f4:b6:b8:fc:3d:b9:d8:df:a6:5f:63:4e:b5:
                    9c:dd:e2:12:8a:36:43:3f:69:0c:8f:f0:be:d6:4a:
                    eb:8c:c8:7a:b4:21:02:5b:8b:2e:30:31:fa:d8:3a:
                    52:28:42:f5:c6:29:d2:f7:5b:e6:d8:6c:02:b0:0c:
                    2e:d2:89:a2:5e:86:34:7b:4b:dd:cd:87:df:26:63:
                    13:1e:6d:de:f2:83:09:42:81:33:b4:6e:34:0f:43:
                    5b:eb:34:d7:1d:18:95:57:0d:31:9b:a1:93:a1:82:
                    f5:78:68:e3:62:80:39:88:94:04:1d:5b:da:17:8d:
                    87:02:b1:cf:44:fe:5b:6c:55:10:23:63:fe:d1:db:
                    30:19:ef:1b:2f:c5:77:5a:a4:72:f6:7b:d3:bb:22:
                    1f:1e:87:ac:73:fe:db:d7:a3:15:6a:1e:1f:0d:53:
                    85:8e:dc:a5:bd:3b:a1:e8:b7:3b:dd:ce:71:d8:0a:
                    23:c4:dd:1e:86:6b:8b:15:39:25:54:3b:5a:7c:86:
                    dc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:81:86:D8:D9:F8:3F:05:AB:86:84:26:87:41:80:7B:F1:A5:77:E9
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/04GG2Nn4PwWrhoQmh0GAe_Gld-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.191.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:06:5e:ce:89:f3:4b:90:7d:60:7c:57:ab:cf:49:d1:2e:50:
         85:2a:11:81:d4:ca:e8:a2:99:de:b0:70:d5:fe:18:d6:e9:48:
         d3:0c:6f:5a:77:b2:01:4c:2f:84:1d:a1:d0:9e:53:9f:e3:15:
         78:92:e3:f2:0b:0f:6d:fb:60:70:46:97:a2:d5:0e:43:a9:eb:
         a0:96:73:7d:1a:68:4f:45:93:a1:e0:32:fd:a4:9f:f3:56:18:
         ba:1b:ee:38:11:7c:89:84:9a:97:c1:14:fd:57:ae:53:c2:99:
         ce:f1:af:dd:16:42:28:06:2b:24:ec:0d:f9:8a:df:cf:fa:d9:
         77:2c:c4:d8:b0:49:1b:02:28:ff:15:fb:7a:5d:d0:09:a5:b3:
         a4:64:40:ea:b7:e6:80:ef:71:0f:c3:fd:f6:f0:b1:f5:4e:65:
         98:a6:69:0c:a1:44:4c:6a:4a:33:01:5e:80:35:5c:96:35:f3:
         b0:47:71:2a:11:df:65:ed:5f:2e:4b:62:71:47:bf:d3:40:02:
         04:7c:29:a8:a5:76:59:06:96:83:dd:4a:84:80:79:28:4e:4c:
         d7:8e:f8:41:96:b6:64:3c:f9:00:5b:b9:dc:72:6d:fc:bf:72:
         59:b4:57:cf:f9:89:83:7d:43:dc:95:83:d4:b6:3b:58:2a:4c:
         2e:18:cd:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org