Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/tgKz3HP9Li-fTwni5csuTGgG9yg.roa
File:                     tgKz3HP9Li-fTwni5csuTGgG9yg.roa (raw, json)
Hash identifier:          mB5e1jVTpXSCYBgZWSHNWXW0a3wbWmiXoBk0X4dcKjA=
Subject key identifier:   B6:02:B3:DC:73:FD:2E:2F:9F:4F:09:E2:E5:CB:2E:4C:68:06:F7:28
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       01F0
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tgKz3HP9Li-fTwni5csuTGgG9yg.roa
Signing time:             Wed 01 Nov 2023 01:32:36 +0000
ROA not before:           Wed 01 Nov 2023 01:32:36 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     10013
IP address blocks:        124.255.48.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:36:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 496 (0x1f0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Nov  1 01:32:36 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=B602B3DC73FD2E2F9F4F09E2E5CB2E4C6806F728
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:b6:6e:5e:78:5d:94:20:b3:b5:3c:36:f5:3d:
                    52:06:30:c7:f4:31:a6:68:90:a5:dd:8d:6b:d7:39:
                    71:50:ec:4a:63:0d:24:4f:20:a8:e9:07:9b:1a:b0:
                    ef:cd:03:8a:b6:19:a1:07:d0:76:38:a3:be:7b:64:
                    6e:63:70:50:4a:22:ab:46:3c:68:ca:d0:56:b1:96:
                    47:bf:88:0f:65:d3:59:69:aa:6f:b3:d9:29:9b:bd:
                    9b:61:3f:75:4c:5f:64:50:66:f3:ee:cd:5e:be:3e:
                    ea:f0:c5:5e:89:77:8a:f8:18:dc:46:ce:ce:0d:15:
                    9a:6e:d4:4b:39:02:6b:cc:94:c8:1d:c8:71:06:f8:
                    ab:31:6d:dd:e8:65:09:8e:11:eb:3d:1b:7f:d7:b4:
                    89:48:a8:9b:e3:08:aa:2c:91:32:59:e8:62:be:79:
                    e1:47:6b:79:9e:cf:62:de:74:b0:f3:64:8a:c1:a7:
                    7e:ff:6a:e8:f7:95:20:d0:ab:7c:28:33:50:62:24:
                    a1:de:26:85:53:9b:57:d2:e3:46:70:32:f6:60:59:
                    99:b7:91:96:a1:98:d7:70:dd:8a:79:02:28:d4:ba:
                    78:8e:4b:29:48:c7:97:3f:39:8c:1e:c3:6c:98:64:
                    af:0b:bc:d3:d1:c4:25:22:f4:29:69:56:b7:eb:d0:
                    29:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:02:B3:DC:73:FD:2E:2F:9F:4F:09:E2:E5:CB:2E:4C:68:06:F7:28
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/tgKz3HP9Li-fTwni5csuTGgG9yg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.255.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         86:80:f6:47:dc:be:93:ba:15:aa:67:55:a9:1b:88:7f:9a:c7:
         86:c4:58:09:5a:91:d0:a3:3c:b7:3c:95:cf:7f:f2:ba:35:de:
         b1:22:7c:be:46:f8:14:1d:99:8a:d1:66:8a:88:26:e7:8b:a4:
         70:ac:8a:e5:9f:52:53:47:d8:d5:3c:73:9c:8c:70:4b:42:ec:
         4c:28:92:fc:03:46:ad:c0:0e:65:56:fa:e3:29:94:4b:33:14:
         ce:bd:69:f0:23:50:45:e0:4b:93:ac:6e:31:ee:49:d8:b2:dc:
         2d:e2:25:ff:cb:5b:7c:7e:92:05:80:d6:fc:2d:be:4f:52:cf:
         d3:4e:49:f3:71:aa:4e:b5:7d:d0:de:88:ab:aa:79:04:eb:63:
         ce:11:e8:ab:94:fa:ec:b9:86:e7:d7:25:13:01:c2:a2:ba:f1:
         4c:92:b3:15:3f:99:83:d5:52:66:cc:ae:72:d3:d6:b1:f0:20:
         17:b3:3a:40:fd:c5:35:e6:49:91:3d:23:2f:a9:38:e3:10:f2:
         46:d9:ab:00:d0:72:c2:80:70:96:90:76:2e:87:4f:dc:33:2b:
         b7:35:f8:3b:f3:0e:d9:95:ee:89:91:1b:9b:6e:e6:26:43:95:
         40:a8:92:d4:2a:c6:f7:de:57:f9:f3:e9:a9:a6:2e:61:2e:6a:
         5b:a7:17:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:07 2024 by rpki-client on console-ams.rpki-client.org