Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OCNbUrlX142nT-lB4whplnySJV4.roa
File:                     OCNbUrlX142nT-lB4whplnySJV4.roa (raw, json)
Hash identifier:          MytTmt0St+FIksVPFp12OP8nSgRrKydrsQT1TU/Y+K8=
Subject key identifier:   38:23:5B:52:B9:57:D7:8D:A7:4F:E9:41:E3:08:69:96:7C:92:25:5E
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       19
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OCNbUrlX142nT-lB4whplnySJV4.roa
Signing time:             Mon 18 Mar 2024 05:25:43 +0000
ROA not before:           Mon 18 Mar 2024 05:25:43 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        203.223.180.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 05:25:43 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=38235B52B957D78DA74FE941E30869967C92255E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:98:53:4d:85:d9:21:5a:63:81:14:52:f8:eb:
                    ad:59:f1:d7:92:a6:8e:15:3d:c0:71:c5:50:98:86:
                    c3:e3:e4:63:81:4a:23:fb:45:d0:69:69:80:90:0c:
                    c6:09:ea:ef:1d:b2:0d:04:68:c2:58:0d:42:c0:bd:
                    52:54:5b:6c:3a:5e:12:a3:d8:a1:b6:d8:3c:1d:a5:
                    39:6c:05:f4:a6:96:ca:ba:79:39:2c:2a:86:9a:4e:
                    93:d2:81:c8:fa:09:4d:a3:e7:17:ef:92:bf:4f:7a:
                    98:bb:23:fe:0c:f5:03:ee:b2:59:d9:b6:94:8e:86:
                    0e:ca:e1:4c:7f:6a:30:61:8c:f2:20:e5:bf:f7:49:
                    cc:4c:08:67:96:79:38:bc:3c:ab:1e:c4:b4:b3:52:
                    21:a5:29:56:61:97:bd:26:04:77:e9:66:01:ed:11:
                    df:5f:0a:b2:77:d1:78:7d:33:ac:b1:35:2c:e4:c0:
                    e6:88:9a:5b:9d:d7:6e:26:5d:3f:53:79:62:a8:d6:
                    a7:a8:43:6b:a0:6b:c8:b6:1d:c2:63:7f:e2:6e:18:
                    73:0d:e0:c3:e5:50:ba:50:96:3a:4e:59:5e:af:0a:
                    86:57:18:46:bc:44:86:38:1c:a8:60:44:a5:b9:c1:
                    bd:61:25:b1:85:11:24:a6:86:cb:ad:76:28:7e:84:
                    ca:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:23:5B:52:B9:57:D7:8D:A7:4F:E9:41:E3:08:69:96:7C:92:25:5E
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/OCNbUrlX142nT-lB4whplnySJV4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.223.180.0/22

    Signature Algorithm: sha256WithRSAEncryption
         b9:ee:3c:06:ea:ac:f8:07:3b:05:4c:ad:a7:b5:00:df:64:69:
         00:56:67:e5:00:8d:92:d5:5a:3b:12:73:9d:5a:60:d9:ed:63:
         d5:2f:85:5f:96:0b:8f:db:6a:a5:67:aa:b1:86:4a:a3:0c:14:
         c5:5b:44:28:91:37:d4:02:dd:02:da:b7:ec:e3:91:ec:ca:54:
         85:6a:c3:9d:71:55:c5:27:d0:15:6c:63:e7:37:67:2a:f3:e8:
         3f:97:de:4c:ed:79:5c:6e:a2:95:94:e0:56:d8:34:8a:ed:31:
         71:eb:db:19:86:e6:80:35:69:28:a4:24:33:01:c9:d6:b4:12:
         20:8b:0d:86:b8:14:bf:30:8b:ca:8c:bd:a2:71:71:82:d0:67:
         bb:cb:3d:c5:fb:9b:be:42:4e:ec:26:06:b0:70:a0:27:4d:c8:
         a5:de:77:f4:a2:61:b5:7c:b1:96:1f:d3:c5:9c:70:0e:f7:73:
         c1:55:16:dc:58:51:b1:02:3a:63:08:8b:64:32:c9:60:ab:80:
         0e:f0:ea:13:48:b0:dd:78:f3:b3:92:84:dd:41:72:9f:3e:45:
         2c:12:f6:64:e8:51:69:0f:25:32:7e:6f:03:a8:97:fd:f5:25:
         d9:8e:cb:8c:31:b9:e6:f0:c8:6c:da:dd:78:14:c6:db:a0:e8:
         5e:18:88:ef
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:10 2024 by rpki-client on console-ams.rpki-client.org