Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/izsljSGyRcvCVsAXuT_eCqzrRFU.roa
File:                     izsljSGyRcvCVsAXuT_eCqzrRFU.roa (raw, json)
Hash identifier:          DKf+bszE/XUADz2msqPMp/7E2haS34/SsbbS31s3nzs=
Subject key identifier:   8B:3B:25:8D:21:B2:45:CB:C2:56:C0:17:B9:3F:DE:0A:AC:EB:44:55
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01B6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/izsljSGyRcvCVsAXuT_eCqzrRFU.roa
Signing time:             Sun 31 Mar 2024 01:29:09 +0000
ROA not before:           Sun 31 Mar 2024 01:29:09 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        123.224.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 438 (0x1b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:09 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=8B3B258D21B245CBC256C017B93FDE0AACEB4455
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b5:70:fd:50:f9:f9:df:f2:7b:8f:52:d5:42:
                    5c:e0:02:5f:2e:cc:b2:24:6e:88:ac:79:40:aa:ce:
                    be:eb:3b:cb:3a:21:ba:32:80:13:a9:67:f4:ce:d2:
                    29:e4:93:61:e3:3c:2a:80:11:b7:fb:da:9a:1d:4a:
                    ba:bc:20:87:83:8d:5a:f1:64:5c:c9:54:da:8d:81:
                    ec:e5:c6:ca:01:e2:20:9c:4c:5b:12:93:72:b0:a4:
                    87:d1:3f:0d:f6:c3:c1:95:f5:91:f7:45:db:58:bc:
                    21:34:5e:b5:fa:d9:c2:74:e2:ac:cc:d6:9e:cc:ae:
                    dc:7e:2b:77:d4:48:05:29:aa:e2:c4:f0:22:4c:5b:
                    05:a2:68:82:ed:26:e0:cf:27:7e:35:5a:52:53:c2:
                    50:b1:c4:d5:8b:47:56:e9:8f:0a:5f:93:83:28:dc:
                    c5:9b:54:d8:10:63:74:26:bc:ed:82:8d:5f:e4:7a:
                    e8:a5:5e:47:7d:03:cf:e3:f9:da:f0:99:b7:21:d4:
                    70:a3:e1:e0:83:6b:5a:0b:17:af:c8:1e:0d:cb:a1:
                    fe:30:aa:77:11:3b:0c:cd:6d:d9:e4:e4:2b:e6:b3:
                    6d:a8:75:3e:88:92:99:d3:a1:10:23:f5:36:97:d2:
                    52:ad:04:18:b6:93:8a:91:a9:4e:bf:b6:38:e0:10:
                    47:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3B:25:8D:21:B2:45:CB:C2:56:C0:17:B9:3F:DE:0A:AC:EB:44:55
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/izsljSGyRcvCVsAXuT_eCqzrRFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  123.224.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         de:9d:21:2b:1f:b1:0c:fc:84:4c:6d:08:4a:01:d2:ef:84:bd:
         54:5a:cd:9a:31:47:bb:2c:f5:56:20:55:be:4f:eb:17:d7:bc:
         a2:fb:78:4f:0b:6a:c1:47:dc:4c:89:b4:d1:d6:9e:29:3a:59:
         88:0d:ca:c0:a2:54:88:21:3c:61:1e:cf:71:2d:a9:2d:10:16:
         4a:65:82:dc:02:35:e2:95:25:d8:1a:19:86:88:e6:75:8b:d4:
         7f:54:b8:a9:f5:11:c0:2e:07:29:bc:f7:6a:47:80:8a:b9:f5:
         f1:84:4a:e4:ab:3b:40:85:49:2d:11:d8:00:7b:fb:14:70:22:
         de:89:af:e7:3a:17:2c:62:80:d9:e5:5f:1f:57:e9:67:bb:9a:
         18:88:ec:50:0f:1a:dc:c3:04:38:e9:c1:af:6e:c9:bf:29:a1:
         e4:77:1c:f9:0d:db:6d:54:fc:8c:02:36:2e:39:d4:2d:14:f9:
         4d:70:0e:03:c2:94:c1:c7:9d:13:00:5b:1e:12:74:a8:9c:f9:
         14:4d:41:82:f1:0f:81:ba:e3:15:31:da:ea:15:a0:fa:6f:5c:
         4d:13:cd:4f:28:ab:b5:65:4c:4b:dc:20:98:a0:d9:e0:4b:c9:
         28:21:17:6b:5b:a8:03:e7:48:a4:b7:da:dc:3c:af:f8:65:49:
         81:c9:cc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org