Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/VZlKqAq8tRWiHF1_NwrLtkg0YSs.roa
File:                     VZlKqAq8tRWiHF1_NwrLtkg0YSs.roa (raw, json)
Hash identifier:          kq8IDyQwTbXCzMUinMTYAISPD7fdV3ias5xChSRE1MM=
Subject key identifier:   55:99:4A:A8:0A:BC:B5:15:A2:1C:5D:7F:37:0A:CB:B6:48:34:61:2B
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       A3
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VZlKqAq8tRWiHF1_NwrLtkg0YSs.roa
Signing time:             Tue 01 Aug 2023 01:30:48 +0000
ROA not before:           Tue 01 Aug 2023 01:30:48 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     19905
IP address blocks:        203.129.112.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 10:14:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 163 (0xa3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Aug  1 01:30:48 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=55994AA80ABCB515A21C5D7F370ACBB64834612B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:d6:c4:a5:d3:62:d6:e2:97:07:a9:e9:a8:f1:
                    56:70:db:8a:71:90:8a:62:c1:6b:bd:8a:38:36:97:
                    c4:93:63:fe:70:47:6a:0f:12:42:64:64:55:5a:70:
                    5d:77:59:0f:bd:4e:94:92:17:7e:87:14:d1:50:60:
                    90:90:1e:56:1d:60:1c:42:8b:48:76:7f:1b:3a:9f:
                    30:62:5e:a0:9f:1b:32:d3:9c:7c:ff:b3:0e:4b:62:
                    59:89:2c:11:b1:94:ab:c8:02:b1:42:d1:35:91:49:
                    56:80:c0:1a:71:27:d2:0c:09:79:d2:6f:b7:58:77:
                    a5:d5:56:06:fd:be:93:de:25:29:ea:a5:36:c5:40:
                    fd:f6:1a:a2:fb:2a:17:93:ee:13:32:50:35:91:73:
                    f9:7e:cc:51:1c:66:ce:a2:8d:b9:92:f4:18:e1:a5:
                    a0:a8:08:52:c0:e6:2a:d6:57:64:67:4c:83:88:e3:
                    c4:88:11:16:38:2c:b8:ee:41:aa:96:8b:81:ae:b0:
                    0c:86:f2:d6:a9:9b:f9:9a:1e:9d:8c:89:0f:67:ad:
                    1a:2c:d8:60:3f:c9:ee:a1:d9:6c:98:98:93:ee:7a:
                    00:9e:e2:18:ae:18:f4:c0:89:bf:a5:90:66:8a:5f:
                    a5:17:09:50:42:ac:24:33:d6:da:59:f9:5d:08:ce:
                    4b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:99:4A:A8:0A:BC:B5:15:A2:1C:5D:7F:37:0A:CB:B6:48:34:61:2B
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/VZlKqAq8tRWiHF1_NwrLtkg0YSs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.129.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:8c:d9:a3:ca:06:24:0e:aa:8c:12:f2:fb:53:06:33:fe:b5:
         f9:f9:80:d1:85:78:77:9d:71:e2:68:48:66:ae:6c:1b:d9:93:
         41:d9:15:db:ce:cc:9b:ba:25:7e:29:a1:f0:eb:14:78:be:ca:
         c4:3c:66:5a:91:3f:c4:3b:ec:df:df:7b:93:62:68:77:6a:d5:
         7f:b2:a8:b5:1d:94:03:00:d8:38:da:59:6f:de:51:62:39:10:
         ec:d3:54:ed:b0:76:b1:c9:53:c5:1f:68:79:ee:ba:7a:be:0d:
         8b:e2:a5:08:08:65:8f:a1:aa:36:fc:4f:84:b1:da:2e:43:cd:
         51:07:be:be:e1:4a:0f:ee:47:de:38:ed:b3:08:72:58:5a:a6:
         92:67:7c:22:06:86:9e:84:c1:7b:70:1d:c0:56:6f:4b:06:dc:
         bb:55:bf:3e:df:be:f1:a6:45:bf:14:d2:63:7c:eb:cf:65:76:
         ce:96:4e:fd:3d:4b:b7:6e:08:6e:48:12:2a:a0:1d:36:1a:16:
         17:1f:f2:7e:02:a1:83:5c:be:dc:7a:80:e3:e4:89:92:ef:ed:
         de:ec:59:cb:a5:77:72:35:6d:0f:c3:be:c3:65:eb:90:40:06:
         e6:b9:39:4c:e6:1e:b7:db:56:1f:46:bb:f9:d8:db:eb:eb:33:
         b4:f7:c6:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 12:22:40 2024 by rpki-client on console-ams.rpki-client.org