Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/pCj8U97vEV_oURVMW9kHVhyUgYs.roa
File:                     pCj8U97vEV_oURVMW9kHVhyUgYs.roa (raw, json)
Hash identifier:          ByN5uKdCUA/DlRj8L3El2q+zrF5cAtWia0DWrNLFewQ=
Subject key identifier:   A4:28:FC:53:DE:EF:11:5F:E8:51:15:4C:5B:D9:07:56:1C:94:81:8B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       011B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pCj8U97vEV_oURVMW9kHVhyUgYs.roa
Signing time:             Fri 01 Sep 2023 01:31:39 +0000
ROA not before:           Fri 01 Sep 2023 01:31:39 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 283 (0x11b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:39 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A428FC53DEEF115FE851154C5BD907561C94818B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:1b:3a:60:6a:3c:08:59:dc:f9:18:77:e7:d1:
                    c5:07:9f:9a:9f:36:2a:58:60:d7:cb:50:52:bf:39:
                    e9:13:39:db:6e:6a:bf:6f:30:70:ee:92:c4:46:a8:
                    45:65:b2:ea:eb:17:4b:07:cb:07:3e:a9:48:89:9a:
                    31:d9:66:df:e6:44:58:35:cf:75:eb:9e:1d:06:a5:
                    50:4d:03:fb:dc:82:dd:64:98:cf:14:72:dd:6a:f5:
                    55:b1:b5:30:21:5b:43:ad:6c:cf:3f:70:42:3f:1b:
                    f2:fd:b0:13:5c:b3:00:a3:bc:0a:33:73:35:5b:20:
                    80:bc:b2:5d:91:e1:82:ee:f1:d9:ee:25:e4:c0:71:
                    f0:b4:cc:ee:c8:a6:f7:fb:b9:b5:29:0e:d0:a8:40:
                    1c:c9:7b:3e:a7:8b:b7:1a:94:13:84:f4:7a:cf:ac:
                    0a:37:ac:1d:e2:93:a5:df:59:df:f3:e0:5b:92:08:
                    22:ae:99:f3:08:07:86:d5:70:7b:d2:3b:ea:67:5e:
                    74:c2:be:e4:bd:4a:43:b6:22:44:9b:b5:c4:0e:0a:
                    af:37:ef:7f:35:ef:4c:f4:53:31:4b:9a:8c:dc:d7:
                    da:b1:da:84:61:b7:54:18:89:da:d0:ef:7e:0f:c4:
                    85:c7:fb:66:f9:29:12:3b:f0:1a:46:25:43:ea:03:
                    ad:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:28:FC:53:DE:EF:11:5F:E8:51:15:4C:5B:D9:07:56:1C:94:81:8B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/pCj8U97vEV_oURVMW9kHVhyUgYs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         48:3c:e5:99:83:33:b4:ae:98:7a:ed:63:a2:97:df:ae:d7:5b:
         13:c1:e1:cf:40:a3:c2:55:42:fc:ec:79:e4:22:de:f1:b3:ec:
         cb:1e:a1:5a:74:0a:3d:90:dd:d8:b2:25:e7:30:f4:07:94:09:
         cc:aa:81:88:5a:e8:bb:88:8f:fa:57:7e:cd:6b:c6:d5:eb:5b:
         4d:4c:07:b4:20:41:9a:3a:aa:57:3a:f6:ef:07:c2:c3:df:16:
         d1:09:4c:d3:5a:3d:6d:89:28:73:88:74:8f:a7:fd:a7:25:b4:
         cc:57:be:60:e3:fd:4c:55:5a:d0:97:3e:83:17:31:86:2d:7e:
         a7:5b:80:b0:01:8d:54:93:62:4c:bf:77:12:37:f6:ce:db:e6:
         7f:47:5c:16:0f:08:a9:7d:52:26:21:79:cb:74:18:e1:06:75:
         47:f0:12:d5:a8:31:1e:38:d5:14:ee:87:33:92:4b:15:2d:f5:
         09:aa:0e:ff:cc:e4:5c:88:41:55:2a:5a:53:77:ac:7e:b0:21:
         8d:35:70:e3:0d:85:dd:a5:6e:3c:a1:53:50:86:93:96:4e:e2:
         67:bb:e4:34:f0:5f:58:d2:58:f7:e0:95:27:cb:a6:be:6d:4a:
         64:c1:65:ce:1f:00:de:a6:10:78:72:03:7b:e3:dd:5a:60:a9:
         88:4a:16:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org