Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/k3san3E1KPPrqRMdlHERxfX_XxM.roa
File:                     k3san3E1KPPrqRMdlHERxfX_XxM.roa (raw, json)
Hash identifier:          F0az90N1Pk5rEt5WCN+NkGlpzU8ZCJ5dRVEdVZPAXYI=
Subject key identifier:   93:7B:1A:9F:71:35:28:F3:EB:A9:13:1D:94:71:11:C5:F5:FF:5F:13
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       05
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/k3san3E1KPPrqRMdlHERxfX_XxM.roa
Signing time:             Thu 07 Mar 2024 06:46:07 +0000
ROA not before:           Thu 07 Mar 2024 06:46:07 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     17698
IP address blocks:        218.40.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  7 06:46:07 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=937B1A9F713528F3EBA9131D947111C5F5FF5F13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:2e:b1:e1:09:91:ae:cb:bf:00:26:88:fb:ee:
                    44:00:4f:bd:ba:31:9e:59:0f:81:94:e5:12:0a:eb:
                    56:f4:0b:c8:56:28:45:ce:4b:85:0f:f0:7f:05:94:
                    66:c5:f3:9b:32:ed:b0:73:66:ff:3f:b9:cf:d7:71:
                    89:e5:23:2b:f6:93:d7:e3:12:4a:9d:be:ec:87:da:
                    71:11:8f:9d:6a:c1:aa:60:0b:fa:46:a2:06:59:c1:
                    97:cc:85:67:78:b9:62:cf:8f:69:04:5f:81:3a:33:
                    0f:8c:8f:97:8f:91:48:e4:01:5f:27:33:1a:7d:d4:
                    bc:9c:55:62:ee:cb:d4:c6:a4:2e:a3:0d:44:a2:2c:
                    2f:ca:13:f1:d8:ce:ef:a3:47:a8:94:31:cc:cf:64:
                    3f:8f:62:eb:d6:60:da:0e:3d:f4:93:d0:d4:ad:a0:
                    16:39:ad:05:3d:19:2d:eb:47:40:61:b2:0c:13:bf:
                    ed:ae:9a:13:56:92:27:ef:4a:a0:a1:99:91:4d:59:
                    e6:b4:9b:52:b9:91:02:23:e0:f0:27:26:e1:59:ea:
                    8a:a0:7e:ae:af:d3:bf:67:91:d5:ae:f0:c7:47:5b:
                    30:52:ee:e1:af:2b:6e:11:66:97:16:a3:72:eb:0e:
                    ce:dd:a5:dc:4e:cf:da:b9:f7:82:32:d7:0a:aa:de:
                    c7:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:7B:1A:9F:71:35:28:F3:EB:A9:13:1D:94:71:11:C5:F5:FF:5F:13
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/k3san3E1KPPrqRMdlHERxfX_XxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:3d:79:06:95:7e:09:d8:fb:db:74:94:bf:f0:90:54:c0:38:
         55:98:23:ee:38:78:71:e3:92:e9:c3:75:06:20:a5:5b:42:52:
         b5:a9:b9:9c:62:5e:d3:6a:b5:0e:af:43:41:74:a4:67:d9:0a:
         2d:c0:28:42:1f:d4:32:fd:d7:a0:b3:65:34:06:07:4b:33:ec:
         d4:ae:3b:84:d0:1e:9a:b9:30:20:f6:89:54:c1:2f:d9:0e:72:
         98:dd:d5:96:c7:5b:de:61:8d:6e:63:a4:4e:fe:a7:83:8a:a8:
         20:12:3e:33:8a:f0:49:b2:cb:02:f6:47:b3:89:ac:30:9c:54:
         55:1b:fe:dd:9e:76:30:cd:6a:11:6e:92:26:2e:de:7b:df:35:
         cf:ac:1c:3f:a3:e5:75:46:95:1e:82:44:0b:6a:32:95:d9:b8:
         f7:2d:e7:1f:0b:09:ba:2e:97:d2:81:51:f1:e6:32:ad:70:2b:
         75:02:1b:17:c6:80:b9:0f:54:43:bc:23:f5:e2:f9:b6:84:1f:
         b9:9e:4d:7a:64:e0:9e:47:b9:59:9c:53:65:50:3b:e5:93:af:
         00:40:b6:05:a9:0e:df:03:f5:c7:1b:9f:77:99:0b:61:35:8a:
         a9:8f:f3:aa:43:89:8d:21:71:78:b2:87:ec:eb:c0:f8:30:1b:
         0a:da:f2:ed
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org