Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/0IQkzLTWJFdVl3cMk76CEzhPs1Y.roa
File:                     0IQkzLTWJFdVl3cMk76CEzhPs1Y.roa (raw, json)
Hash identifier:          TidIgtrlcd/EAA75swPIFC6+KBNvt3cpYINyaAkRNeA=
Subject key identifier:   D0:84:24:CC:B4:D6:24:57:55:97:77:0C:93:BE:82:13:38:4F:B3:56
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       0E
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/0IQkzLTWJFdVl3cMk76CEzhPs1Y.roa
Signing time:             Tue 22 Aug 2023 07:12:19 +0000
ROA not before:           Tue 22 Aug 2023 07:12:19 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        220.219.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 07:12:19 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=D08424CCB4D624575597770C93BE8213384FB356
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:c1:16:b1:2d:e8:8e:d8:b9:db:b4:98:60:57:
                    e9:76:a4:0a:aa:8a:1a:8d:43:49:16:ca:7c:01:3a:
                    e5:82:ea:a1:68:de:92:1a:1a:8c:0e:5c:e2:ad:d4:
                    a5:ce:11:8d:3d:f0:dc:53:57:99:e9:f0:ab:85:02:
                    aa:4d:b3:1c:94:ae:ea:03:2f:9f:6d:37:55:18:ec:
                    ac:27:97:4d:ce:3e:15:91:2a:1d:94:98:8e:33:58:
                    13:0b:37:e3:3c:ad:4e:ec:02:0d:c3:bd:a7:3b:d7:
                    d7:ba:88:2d:a9:2e:5c:59:4b:fc:3d:6c:c2:ba:85:
                    b8:da:12:21:29:58:27:11:36:a8:4e:88:7b:fb:89:
                    1a:7f:12:69:76:1f:79:a3:f7:a5:6d:82:1c:c8:82:
                    ee:6e:ce:cf:85:dd:1e:bd:80:52:17:47:59:7f:58:
                    e1:6b:ed:fe:20:e7:d2:c0:99:57:ba:95:c0:81:45:
                    14:45:a3:b8:b4:27:7f:42:31:5d:e7:74:8c:fe:f8:
                    53:76:7d:95:a4:6a:de:74:f0:2f:51:63:fd:8b:db:
                    9b:cb:e1:b0:a4:95:20:79:68:1d:fa:15:87:97:ac:
                    35:f7:2c:e1:df:2e:c3:0a:dc:2d:4b:e4:ad:f4:91:
                    5b:43:e4:88:5d:11:8b:d6:61:53:09:9c:9d:52:f2:
                    08:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:84:24:CC:B4:D6:24:57:55:97:77:0C:93:BE:82:13:38:4F:B3:56
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/0IQkzLTWJFdVl3cMk76CEzhPs1Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.219.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c2:7b:8b:68:3d:7f:3a:35:61:eb:fb:63:1a:79:9a:2e:e9:d5:
         5c:d5:37:73:62:77:6e:0a:56:f2:33:3d:2d:e6:7b:25:ad:bd:
         9e:1b:a3:e8:30:14:f7:6c:2d:8d:d7:37:ac:e7:db:02:1f:97:
         2b:da:9f:b2:62:a0:2c:8b:40:9e:fd:b8:a2:ba:eb:32:3b:56:
         85:a4:31:25:7e:aa:52:42:fe:5f:f1:7e:7e:e9:d4:f3:c6:e1:
         b0:ed:38:93:86:66:54:74:59:8d:2e:b6:4c:03:53:2d:97:f6:
         59:d2:a1:cd:2c:bd:7f:ca:ec:62:d5:c1:6f:e7:1b:af:99:e2:
         72:cc:35:b9:bf:61:3a:8a:22:b9:84:32:2c:91:12:4d:70:47:
         ae:29:43:cb:fe:b2:2f:c3:49:ac:c6:c6:fc:83:ac:35:c2:b0:
         3c:f1:c7:0b:08:fe:ba:53:79:1b:2e:93:6b:74:8c:d7:d5:3b:
         c3:04:50:17:0a:35:73:a2:ad:ac:0e:71:a3:14:39:d6:21:c6:
         28:69:15:7a:20:b1:9c:a9:57:a3:e1:77:24:87:9f:3a:34:10:
         4b:73:13:38:b2:f6:8a:4e:3f:d9:3b:c1:7d:46:33:c3:cc:c1:
         9e:e6:8f:d9:9b:b1:21:7e:23:7a:cf:5c:6e:b3:d7:1d:87:7e:
         aa:b1:2e:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:40 2024 by rpki-client on console-ams.rpki-client.org