Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1453/Y1iQqRtoIDmAaQD9Z8jsm4iNF1g.roa
File:                     Y1iQqRtoIDmAaQD9Z8jsm4iNF1g.roa (raw, json)
Hash identifier:          lcUcmR0eNlYxOdnnO+6jYJX4uPd32kCkSjntTFqmRZY=
Subject key identifier:   63:58:90:A9:1B:68:20:39:80:69:00:FD:67:C8:EC:9B:88:8D:17:58
Certificate issuer:       /CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
Certificate serial:       08
Authority key identifier: 01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/Y1iQqRtoIDmAaQD9Z8jsm4iNF1g.roa
Signing time:             Mon 28 Oct 2024 07:21:55 +0000
ROA not before:           Mon 28 Oct 2024 07:21:55 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7671
IP address blocks:        202.255.103.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=011A556FFC4BA39EB90A5924A36AFDA37E9819B6
        Validity
            Not Before: Oct 28 07:21:55 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=635890A91B682039806900FD67C8EC9B888D1758
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c5:37:87:bd:34:d9:51:e2:e8:73:17:57:1d:
                    54:79:5f:9b:e9:b0:97:7b:62:46:00:7c:74:a1:95:
                    81:93:d3:fb:4e:5b:4a:35:2e:51:f7:91:e7:75:af:
                    82:1f:fe:50:67:91:cc:30:0e:6a:80:c8:45:31:e6:
                    df:e2:f8:d1:84:9f:5d:29:ab:ce:1a:66:07:b3:25:
                    17:01:a0:39:25:c7:09:88:8a:a6:ef:5c:f6:f7:d4:
                    e0:b2:15:59:c5:09:4c:9f:4c:0f:f1:11:21:1d:e4:
                    0e:93:bd:18:4e:0f:51:db:1e:14:20:16:f6:c5:72:
                    4a:dc:d7:5e:f9:73:5f:60:3f:fc:65:cb:46:97:51:
                    b0:ac:fc:23:24:6d:1e:a6:cb:17:20:3d:6e:54:6e:
                    2b:8f:0a:b7:98:da:e3:ce:91:02:28:9d:ad:76:a4:
                    dc:96:f4:c7:3e:a8:00:91:e1:90:b3:47:37:c5:00:
                    3e:bd:21:eb:47:32:ce:a3:27:9d:9f:1d:b6:c7:ac:
                    32:ff:e4:ed:58:26:3e:f3:5b:74:34:81:ee:58:9e:
                    55:87:4e:07:d8:64:02:3b:2e:17:12:3b:e2:9c:6d:
                    be:62:e5:20:d4:50:05:03:31:ad:c3:69:a2:60:08:
                    84:e8:b7:21:d5:2a:db:4e:26:f4:7e:01:f9:c1:90:
                    7b:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:58:90:A9:1B:68:20:39:80:69:00:FD:67:C8:EC:9B:88:8D:17:58
            X509v3 Authority Key Identifier:
                keyid:01:1A:55:6F:FC:4B:A3:9E:B9:0A:59:24:A3:6A:FD:A3:7E:98:19:B6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/ARpVb_xLo565Clkko2r9o36YGbY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ARpVb_xLo565Clkko2r9o36YGbY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1453/Y1iQqRtoIDmAaQD9Z8jsm4iNF1g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.103.0/24

    Signature Algorithm: sha256WithRSAEncryption
         97:d7:9e:f6:01:47:80:21:af:89:f9:50:31:a3:93:f2:d1:9f:
         b4:df:e1:33:e2:e2:43:42:95:23:11:64:29:02:0e:52:eb:54:
         f3:9f:fb:75:8d:81:15:63:9d:f6:15:1a:5e:3a:53:6d:2f:4e:
         53:26:76:49:5c:21:8f:a3:72:a0:e9:dc:cd:39:21:c9:8a:0d:
         7a:ba:96:fc:ec:f3:9b:7c:c3:2b:1f:0c:73:86:46:e4:b9:98:
         c7:58:48:14:c6:44:04:8e:97:4b:c5:7b:66:24:2d:b4:a7:ef:
         ab:98:5e:0c:d3:13:f9:a1:82:f5:93:e6:6a:97:8b:61:e0:ef:
         69:f1:3f:cc:18:0f:2d:00:94:d6:58:75:08:ab:0e:ac:0e:f9:
         8a:15:72:0c:41:45:0b:4c:db:c2:73:4e:1c:a5:54:ca:44:b3:
         23:7a:47:8f:be:7d:25:93:f6:1d:19:01:e1:81:9c:86:87:45:
         1a:25:93:59:7d:16:a3:15:f6:3a:75:9f:cf:65:61:79:d0:ff:
         36:53:11:62:02:79:e0:28:04:4d:fc:3d:28:30:da:43:a7:b3:
         81:e9:42:bb:85:4f:7e:86:b1:bd:ce:ff:db:0a:a8:d4:f0:be:
         39:41:94:6c:88:32:27:69:d8:10:df:f4:54:e4:a1:bd:bd:9c:
         5f:63:29:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:03 2024 by rpki-client on console-fra.rpki-client.org