Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ie0aKCdVh0oUAocdxcWXvCYPDZ8.roa
File:                     Ie0aKCdVh0oUAocdxcWXvCYPDZ8.roa (raw, json)
Hash identifier:          Y8JeFWKhWUZezNjTHFTK38TE/bGzpaNyBp14sRmPl+U=
Subject key identifier:   21:ED:1A:28:27:55:87:4A:14:02:87:1D:C5:C5:97:BC:26:0F:0D:9F
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       2C
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ie0aKCdVh0oUAocdxcWXvCYPDZ8.roa
Signing time:             Thu 29 Feb 2024 01:34:13 +0000
ROA not before:           Thu 29 Feb 2024 01:34:13 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131934
IP address blocks:        180.94.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Feb 29 01:34:13 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=21ED1A282755874A1402871DC5C597BC260F0D9F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:f7:d6:ba:cc:2e:85:61:f7:2e:2a:64:48:4a:
                    6b:f1:ff:c9:de:1d:bb:f7:10:f6:82:33:5d:0f:1a:
                    7c:d8:8f:37:8f:6d:e9:eb:27:58:2e:ec:70:77:04:
                    d4:1a:99:ac:41:93:49:78:39:e1:a2:75:d3:a7:41:
                    36:fb:a3:19:e2:6b:78:0e:a0:9d:7d:53:0e:65:e8:
                    e7:3d:82:10:82:1c:2b:02:96:38:52:41:bf:76:c9:
                    c3:f2:97:a6:c6:bf:a2:e9:4d:b3:1f:c9:b3:85:73:
                    83:86:0b:fc:68:fd:80:12:ac:68:1b:ad:db:2f:4e:
                    cf:29:7e:07:91:f0:99:aa:8f:e4:aa:9d:b0:75:04:
                    21:31:9e:1e:5c:c4:a5:d0:14:23:44:a1:c5:da:50:
                    4b:7b:f0:c8:01:02:d0:aa:12:36:05:93:1a:ef:86:
                    fc:08:dd:4c:c7:0f:42:22:b0:af:03:e4:c0:26:0f:
                    b1:44:5c:c1:34:22:54:c0:93:83:98:0e:18:84:80:
                    7f:fe:70:31:d3:33:c6:69:24:b6:71:ee:b7:f2:6a:
                    54:03:d8:ed:8b:e7:0a:f0:eb:8c:f7:dc:00:0a:5b:
                    31:a7:1c:a6:da:d2:dd:ea:10:cd:da:92:9b:8d:ae:
                    88:d2:c6:7c:3a:1a:d3:cc:99:78:27:95:32:7b:dd:
                    67:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:ED:1A:28:27:55:87:4A:14:02:87:1D:C5:C5:97:BC:26:0F:0D:9F
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/Ie0aKCdVh0oUAocdxcWXvCYPDZ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         55:ac:a8:33:aa:e0:ef:b8:01:c5:01:b2:d5:9c:8e:7a:d2:f9:
         2c:a7:34:c9:9d:aa:8d:6e:36:b7:4d:69:ea:49:eb:8a:d9:48:
         5b:d7:0b:a0:a8:75:3f:9a:8c:ee:fd:01:62:bb:93:8a:c7:4e:
         0d:bf:bb:8a:06:86:ec:fa:3c:5a:ce:f1:84:2d:1c:7c:88:99:
         05:6d:d3:e5:b4:ee:cf:da:fe:47:f1:4a:db:65:73:2e:44:e1:
         93:aa:b4:7c:f0:aa:e0:30:96:b4:3b:a4:68:aa:3e:3f:d7:96:
         71:68:b8:6a:4e:a4:26:e2:3c:8c:e2:92:7c:98:35:e2:28:6f:
         54:17:a4:93:97:b0:c7:45:4e:a1:12:b8:4f:44:82:89:e8:70:
         18:4f:8f:2f:1c:20:d9:d2:e1:c0:1f:93:c2:69:8d:49:8c:64:
         b0:75:86:37:2b:f0:60:f3:7a:ab:6b:30:75:30:4a:ea:57:11:
         a4:81:e6:a1:2b:ed:0f:b2:6f:8f:d6:6c:85:48:c8:53:87:37:
         0b:a9:53:a2:9d:c1:4b:67:72:63:6d:00:79:9f:c2:a8:b1:e5:
         f2:e9:ea:24:cc:6a:98:1f:56:f5:93:90:41:78:0c:e0:ea:86:
         4c:c4:41:6d:2c:a5:66:f8:e3:6c:4a:ee:00:eb:9a:db:ab:81:
         5b:ec:33:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:52:09 2024 by rpki-client on console-fra.rpki-client.org