Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/G6d34D7QhN9pkK3mMGzW3DlSZEw.roa
File:                     G6d34D7QhN9pkK3mMGzW3DlSZEw.roa (raw, json)
Hash identifier:          uLKqo2WAtCp9Sk9A6I6inoJkq3hWuErxSYrFQwyzFOQ=
Subject key identifier:   1B:A7:77:E0:3E:D0:84:DF:69:90:AD:E6:30:6C:D6:DC:39:52:64:4C
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       04
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/G6d34D7QhN9pkK3mMGzW3DlSZEw.roa
Signing time:             Wed 17 Apr 2024 05:58:03 +0000
ROA not before:           Wed 17 Apr 2024 05:58:03 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17955
IP address blocks:        203.223.48.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 14:03:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Apr 17 05:58:03 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=1BA777E03ED084DF6990ADE6306CD6DC3952644C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:53:6e:e1:27:45:01:45:77:5e:c2:0f:b7:2a:
                    09:df:d9:e2:c7:b2:0e:c0:e5:ca:ba:5f:a5:91:ea:
                    f8:40:f2:c9:c7:b5:19:1c:fe:0b:4b:a4:29:68:cc:
                    9b:4e:05:fa:0e:fb:b1:5f:90:b5:4c:3a:47:35:5b:
                    82:c6:2a:93:d2:45:ab:97:58:7f:99:73:e8:4e:f8:
                    13:2f:c4:fc:a2:1b:3c:1f:0a:65:7b:1a:ff:28:17:
                    95:3e:d3:2b:b7:3a:5d:c4:17:74:83:9e:39:c4:ef:
                    4c:24:9e:ce:56:5e:b7:5d:12:c5:01:25:3e:d7:cd:
                    04:71:c8:b6:d4:bf:53:a4:f3:2d:b5:24:e8:6e:2a:
                    f0:02:bd:fe:6d:75:3b:42:55:a6:9e:8e:de:e5:e8:
                    bf:c2:d1:bc:ad:f3:4f:72:8e:94:d4:0a:49:92:c5:
                    bb:2c:7e:97:30:70:a1:26:15:c2:fd:79:2e:b8:e2:
                    ef:05:de:c6:31:45:44:65:46:51:52:7a:2e:74:72:
                    5f:af:81:16:31:c6:c7:66:ef:43:e7:43:5a:d6:ef:
                    62:57:cd:02:a4:ad:4b:0a:c8:0c:4b:83:16:22:1a:
                    0f:8f:70:9e:be:4d:53:5f:b7:0b:7a:74:87:db:e2:
                    16:6b:6c:5a:50:55:59:3c:72:20:b7:9b:28:0e:c9:
                    5b:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:A7:77:E0:3E:D0:84:DF:69:90:AD:E6:30:6C:D6:DC:39:52:64:4C
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/G6d34D7QhN9pkK3mMGzW3DlSZEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         2b:c2:1e:dd:24:43:e5:99:4b:92:99:5c:ed:10:1f:be:1c:fd:
         b6:f1:94:99:fd:e2:42:53:2e:a1:aa:d4:ec:1c:9f:dd:51:94:
         75:74:36:b0:a6:74:c7:57:e5:7d:79:95:6a:ec:f0:b7:0d:e7:
         e4:bb:1e:61:cf:17:0e:37:7d:d1:14:49:c7:93:d9:42:82:75:
         14:42:bd:cb:be:cc:85:ee:01:71:c1:d5:67:2b:2e:97:ae:90:
         70:dc:15:57:ca:85:d1:fe:c8:1b:2c:85:ea:2f:90:9e:78:04:
         ad:6e:00:03:1e:0c:f1:7a:23:09:d2:2a:a2:fc:e4:5a:be:04:
         60:64:62:f0:d1:28:e7:16:b8:66:e5:a7:03:a4:f8:96:92:b9:
         be:a6:12:e7:4b:a0:ff:30:b7:95:fb:ef:6b:ea:11:01:78:60:
         4e:b7:63:8e:d0:f6:b9:66:f0:36:19:6c:9d:7c:23:67:3c:63:
         33:8f:92:33:1c:bc:2f:89:36:5d:34:27:16:af:84:62:51:66:
         0a:d8:ec:fb:de:e4:a2:5b:bf:ce:81:1f:17:16:1a:a4:9f:f9:
         a3:31:07:c6:a3:29:04:bc:84:9f:f1:e6:9b:9d:29:3a:a6:26:
         97:03:29:df:99:21:89:0a:a7:53:04:cf:19:6b:45:64:2a:cf:
         91:0e:04:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:47:45 2024 by rpki-client on console-fra.rpki-client.org