Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa
File:                     VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa (raw, json)
Hash identifier:          4UkA72fjmJ8JPMFaDVD1O7LtdgfY9SJu10+DPgu/YuI=
Subject key identifier:   54:C6:BE:A7:A0:EA:D8:10:4F:28:94:38:C2:55:34:C0:34:7E:A0:FE
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B1
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa
Signing time:             Thu 29 Feb 2024 01:29:56 +0000
ROA not before:           Thu 29 Feb 2024 01:29:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        202.41.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Feb 29 01:29:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=54C6BEA7A0EAD8104F289438C25534C0347EA0FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:49:ae:a1:6b:d6:73:8d:93:56:27:7b:15:10:
                    f4:8f:6f:29:4e:9e:65:25:53:e3:a2:03:93:87:f7:
                    75:c4:02:7c:01:fa:37:21:6a:b9:69:0c:7c:d2:e5:
                    52:d6:ce:f9:74:a3:75:26:e9:15:95:6d:55:85:13:
                    51:cd:51:86:07:05:18:ed:da:c9:13:d0:e9:68:a2:
                    12:f2:fb:b2:74:bd:43:03:aa:f8:7b:93:c2:79:42:
                    72:fd:6d:e1:e9:a7:24:2e:66:0e:7d:65:e2:ce:34:
                    7e:4b:8c:1f:23:00:41:51:43:05:64:39:92:18:fe:
                    a8:8e:ea:4d:2c:d5:1f:d9:a4:d7:67:b0:dc:73:72:
                    92:82:0d:8a:ab:b7:10:b0:3d:89:7b:bf:0d:e4:b6:
                    f0:79:5c:1e:7c:00:43:a3:ae:b6:80:40:f4:8b:5e:
                    35:c8:81:32:b9:81:c9:08:27:c9:d7:02:b7:37:54:
                    32:bf:22:38:f8:94:3f:fe:88:d3:7e:a1:41:20:49:
                    6f:56:02:a8:6f:5e:ca:54:97:40:f9:82:6e:29:86:
                    8b:3a:21:12:ac:8d:42:ae:9a:f3:86:2a:a3:24:19:
                    2e:6e:58:4a:a0:d3:ce:c7:d9:f8:8a:35:b1:6a:6c:
                    e0:c9:2e:bd:4f:84:5e:f8:be:6c:8c:4f:5c:b8:bc:
                    87:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:C6:BE:A7:A0:EA:D8:10:4F:28:94:38:C2:55:34:C0:34:7E:A0:FE
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VMa-p6Dq2BBPKJQ4wlU0wDR-oP4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.41.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a9:51:f5:40:b3:02:ef:8b:47:22:50:96:5a:f7:48:33:df:d4:
         a3:91:cb:7f:fe:67:83:2b:58:da:08:07:e8:13:f0:b2:f7:84:
         c2:3d:0f:2a:e2:b2:e7:47:f9:53:6a:9e:f9:ab:fe:0b:2b:7e:
         a7:d6:bb:1c:45:c5:8c:56:9d:e8:12:a4:9b:41:5b:8b:68:84:
         b3:91:c5:74:f5:d3:34:f4:00:3c:6b:49:7a:7e:3d:a7:89:e0:
         d6:25:03:78:27:d9:94:1e:60:c9:a0:5b:a0:b7:6d:8c:bf:7d:
         c4:97:df:ed:02:50:ae:80:8c:18:22:c6:82:80:a6:0a:c2:2b:
         df:82:e3:e2:6d:c5:c6:b0:fc:bf:9f:d0:47:6c:e8:2c:69:95:
         7b:f2:61:fa:eb:01:2d:8b:50:32:59:2e:2d:49:f9:4e:6b:e1:
         1c:cb:5c:96:91:92:52:9e:01:b7:07:48:dd:ed:5d:b9:de:e7:
         45:43:52:e1:e2:e0:02:fe:8a:8d:86:21:0f:7a:00:92:82:b4:
         52:f4:d7:31:02:70:d4:fc:93:f0:cc:6d:28:0a:dd:21:e5:09:
         e8:4b:5a:4e:60:86:b1:3e:87:59:0e:b6:cc:c3:cc:d4:bd:6b:
         25:33:e7:ca:26:96:23:c1:77:c6:35:4e:55:40:74:6f:61:34:
         35:bb:ff:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org