Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/zphFoZf3dp4M3oidS15pMAAOn44.roa
File:                     zphFoZf3dp4M3oidS15pMAAOn44.roa (raw, json)
Hash identifier:          c/XBsDL6K1SA0q4CNqJX8Xp+z0r+6IRW99cysgmw8CA=
Subject key identifier:   CE:98:45:A1:97:F7:76:9E:0C:DE:88:9D:4B:5E:69:30:00:0E:9F:8E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01D0
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/zphFoZf3dp4M3oidS15pMAAOn44.roa
Signing time:             Fri 31 May 2024 01:30:51 +0000
ROA not before:           Fri 31 May 2024 01:30:51 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.225.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 464 (0x1d0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:51 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CE9845A197F7769E0CDE889D4B5E6930000E9F8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8d:19:4f:24:e1:ff:e1:fc:d4:fc:16:c5:d2:
                    ed:53:28:5b:70:dc:50:9a:06:ff:0b:34:ea:6a:63:
                    cf:52:ea:b7:0f:6e:b2:13:f5:e3:35:77:5e:6c:3e:
                    46:2c:68:4b:04:7e:4a:ff:60:f3:4c:26:b1:27:09:
                    79:7c:6a:7f:f2:66:ec:10:4b:02:37:3b:32:2d:81:
                    9d:36:34:d9:84:d9:a9:d5:ed:66:b0:ab:3c:3c:cc:
                    28:f4:a9:7c:f0:b1:d9:3e:d3:bd:c1:1b:d0:a6:0e:
                    4c:30:e3:19:c4:0c:d4:6a:dd:72:23:80:3e:6b:6f:
                    27:ae:5b:75:07:5d:23:1e:de:8a:18:90:93:eb:51:
                    a0:00:88:a6:3d:44:91:ab:c4:40:8d:4a:b0:6e:4e:
                    8c:64:39:aa:bf:76:25:03:8f:31:b8:55:c1:cd:08:
                    ec:39:d6:53:f5:55:40:94:92:cd:22:6e:61:f7:7f:
                    cc:9e:6d:9b:ec:3b:c9:b0:10:3e:c4:3f:8a:a0:65:
                    5a:e7:5d:59:e5:62:05:e6:4b:e2:21:02:b7:0d:a9:
                    96:e3:27:74:37:de:be:34:91:27:f5:83:3b:74:a5:
                    f6:eb:c3:87:35:ac:39:49:54:34:0b:ea:a6:dc:18:
                    00:3f:09:6f:0f:09:ad:ba:af:d7:7e:92:10:ec:c0:
                    5c:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:98:45:A1:97:F7:76:9E:0C:DE:88:9D:4B:5E:69:30:00:0E:9F:8E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/zphFoZf3dp4M3oidS15pMAAOn44.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.225.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         58:cc:15:f0:ea:41:0c:95:98:fa:bb:3a:7c:cf:36:ae:bb:ec:
         62:a5:7f:7e:7b:95:a7:1a:dd:36:ac:55:27:1d:28:5b:af:fb:
         f0:6c:1f:72:cf:f9:c7:46:66:1c:d4:c2:5c:eb:0e:52:64:92:
         bb:03:e1:e1:4a:9a:ab:f0:30:66:64:51:84:f2:fd:2f:2f:ac:
         f4:31:d1:91:43:f7:b6:71:97:04:ee:c3:1e:2c:1c:88:ce:e9:
         07:42:7c:3e:db:15:c9:63:d1:6f:77:0a:65:6e:da:d7:65:38:
         85:43:2e:6c:95:0b:b1:eb:2e:a3:41:bf:4d:21:3f:ee:9a:fd:
         ec:39:03:71:bb:21:e0:f4:42:a7:35:a6:df:75:e7:56:76:52:
         f6:68:e7:02:33:77:0c:38:83:37:9a:7d:77:eb:e3:bf:23:ba:
         3d:ed:38:a5:d6:f6:65:db:7c:69:e2:3a:1c:e9:2b:3c:d8:70:
         08:a8:c1:99:fc:f6:94:8d:36:6f:50:37:e5:7d:2f:7c:60:6c:
         8b:4b:00:9e:1b:37:0b:30:fe:a5:3e:51:9b:39:ad:d3:ac:5d:
         62:19:bf:c7:de:ab:54:a4:00:3e:e8:8a:fa:4a:f5:8b:8b:ee:
         c0:51:84:b2:9d:8f:8f:6c:9d:c0:33:25:c6:1b:1d:d7:a2:80:
         16:78:8a:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org