Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Hz9RBgfqqDO4Us4KJr2xvYBQ9is.roa
File:                     Hz9RBgfqqDO4Us4KJr2xvYBQ9is.roa (raw, json)
Hash identifier:          XII2kY3STWpTYY63i48q8qsrsY31gMa1/twqHVjDgyU=
Subject key identifier:   1F:3F:51:06:07:EA:A8:33:B8:52:CE:0A:26:BD:B1:BD:80:50:F6:2B
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01A2
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Hz9RBgfqqDO4Us4KJr2xvYBQ9is.roa
Signing time:             Sun 31 Mar 2024 01:29:01 +0000
ROA not before:           Sun 31 Mar 2024 01:29:01 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        211.130.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 418 (0x1a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:01 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=1F3F510607EAA833B852CE0A26BDB1BD8050F62B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:5a:73:d7:10:dc:62:dc:bd:8e:50:3a:21:42:
                    3e:f4:cf:cb:98:73:a0:7c:55:c8:24:9a:d0:8f:26:
                    df:c8:bd:97:5b:ca:3a:c1:e2:6c:7d:1c:99:11:21:
                    9f:a4:1a:9b:ed:33:f2:06:d1:2f:05:e7:bf:18:2c:
                    d2:2d:d7:d0:6a:17:cb:cb:b1:8f:fc:ab:e3:ca:f3:
                    13:b9:7d:6c:3c:f0:59:55:23:a0:ec:54:23:ea:20:
                    4f:a7:89:c4:19:70:e1:7c:89:44:6c:d1:b7:82:a5:
                    43:09:16:69:1f:43:77:49:0d:f2:50:ae:22:7d:35:
                    18:5d:e8:cf:5a:d9:36:57:fe:2b:06:12:27:ad:89:
                    2f:d0:10:8e:18:14:15:04:1f:31:cf:61:5b:1b:55:
                    85:09:fc:9a:f5:e1:20:d1:ea:47:cf:95:24:dd:ca:
                    c6:b8:52:69:44:8c:92:f1:4c:0d:38:b3:c4:19:70:
                    3d:17:f5:c9:03:cb:2d:fb:3b:e3:23:f5:13:94:8b:
                    75:52:56:65:8a:6e:9e:76:29:a9:46:2a:6a:75:bd:
                    9c:68:19:c4:3c:06:17:23:a4:e2:8a:07:b9:fe:07:
                    eb:93:73:4c:7c:0d:d4:b9:f2:3b:33:d9:39:9a:3d:
                    f6:cf:5b:51:46:58:21:5a:10:c3:da:7d:ef:52:f1:
                    b2:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:3F:51:06:07:EA:A8:33:B8:52:CE:0A:26:BD:B1:BD:80:50:F6:2B
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Hz9RBgfqqDO4Us4KJr2xvYBQ9is.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:ea:e5:9c:73:59:17:32:24:a0:60:07:f5:86:b5:e3:85:2d:
         d3:f5:a5:7f:f7:df:35:32:cd:52:d4:16:96:c5:d0:9f:87:a2:
         59:40:e0:8b:2a:d0:76:4c:4d:71:40:ff:d1:49:d3:7d:1b:97:
         32:f4:ca:fa:84:c4:2e:ce:04:0e:4e:3e:06:81:af:63:bb:a6:
         4a:07:58:76:f6:da:10:3f:96:9a:d0:36:c2:51:51:27:2c:bb:
         3a:3b:46:af:f5:e0:2f:58:d1:eb:82:06:65:c1:fc:cb:55:cc:
         7e:59:eb:e1:3b:70:ce:e7:a1:0b:6a:bb:dd:3a:40:de:d1:30:
         e6:b3:67:f6:85:f8:03:26:ae:ac:74:ef:a4:45:19:87:75:bd:
         94:ce:8a:04:1c:6c:2f:34:c7:ed:c9:1a:d5:e7:b8:49:24:d7:
         f8:5a:b1:c4:ee:91:4f:c7:1c:4b:1a:00:7b:a1:dd:f8:f2:f6:
         59:d2:e8:1b:21:aa:72:77:58:dc:bc:a9:da:a0:7d:f3:3b:4f:
         4f:3c:48:4d:49:07:11:0f:a6:84:04:82:0a:2b:67:eb:e0:ef:
         d1:d8:30:da:ca:02:72:9f:ac:69:ae:1d:29:82:7d:48:e8:9b:
         5b:44:74:17:a4:e5:8f:ce:da:2b:02:ac:d3:61:df:47:2b:34:
         2b:c1:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org