Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
File:                     srUaVgSaQi_4zDQuHbKD_FpRrc4.roa (raw, json)
Hash identifier:          tDaNrD8ABgjYqLaYL5KPfKTE14DEEblllvTimDJeyx4=
Subject key identifier:   B2:B5:1A:56:04:9A:42:2F:F8:CC:34:2E:1D:B2:83:FC:5A:51:AD:CE
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       15
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
Signing time:             Mon 20 Nov 2023 03:54:11 +0000
ROA not before:           Mon 20 Nov 2023 03:54:11 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        203.140.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:39:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:54:11 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=B2B51A56049A422FF8CC342E1DB283FC5A51ADCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:cf:3d:1d:6b:ee:06:e7:a3:df:7f:df:57:7b:
                    48:d9:c3:b7:03:e2:35:e7:a1:e8:4e:10:02:39:6c:
                    40:d8:49:02:f5:c4:37:19:f6:86:75:35:da:20:23:
                    c6:87:42:4d:bb:c7:48:27:9e:cd:d7:d9:1b:c7:a6:
                    6e:2b:41:a4:c9:88:99:66:48:11:35:bf:9f:c3:6b:
                    d4:bb:26:3f:97:bc:ce:ce:b3:09:1f:e5:78:6f:33:
                    99:a3:ee:08:9b:9b:5b:25:7f:a2:a5:a8:22:e5:13:
                    70:36:72:85:14:ef:8b:55:a6:60:83:c0:a0:df:50:
                    0c:46:ea:e6:95:3d:b7:c4:66:4f:2f:df:b5:55:60:
                    23:2e:a3:f4:92:d1:5d:57:73:c9:e2:0b:fc:e1:e2:
                    28:c8:76:68:00:fe:64:88:6c:3a:cb:7d:91:58:22:
                    b6:44:f4:f3:c6:f2:45:24:a4:bb:c5:0b:d7:e9:52:
                    9f:59:0f:8f:5c:2f:b2:28:0b:cd:a0:6c:66:21:54:
                    58:df:35:d5:b9:9a:9d:52:dd:c5:ef:da:7a:6a:ba:
                    24:f8:20:62:a3:5a:07:7b:00:5b:8d:1c:ab:e1:87:
                    cb:7b:ea:08:ea:24:d7:2f:07:a4:ae:00:4a:53:1b:
                    07:8a:cd:da:e7:43:fe:30:36:ca:25:a6:2e:14:0c:
                    41:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:B5:1A:56:04:9A:42:2F:F8:CC:34:2E:1D:B2:83:FC:5A:51:AD:CE
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/srUaVgSaQi_4zDQuHbKD_FpRrc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.140.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         14:72:07:20:af:27:58:5b:ee:b2:9d:d9:64:ec:90:e1:a2:29:
         82:b7:80:77:04:4f:12:87:2c:44:13:0b:d1:1c:7e:7e:20:7f:
         6d:9d:f5:de:82:44:53:0f:a9:0c:0e:35:7f:e0:d7:f6:52:62:
         68:2a:8f:30:ab:c5:64:8b:5b:39:11:55:bf:91:fb:c0:1c:e7:
         50:e2:f5:2c:00:22:6c:16:dc:d0:03:0d:13:86:55:fd:80:5e:
         10:f0:00:2b:e1:ab:5d:9b:95:a0:c6:4e:66:9c:5e:55:cd:02:
         cb:bd:09:00:c4:2c:42:eb:3b:89:56:e8:53:a6:92:a1:af:6b:
         4d:57:44:01:96:e6:1f:b8:2e:8b:db:9d:02:c1:58:e1:4b:cc:
         20:3e:de:99:b4:8a:de:46:3e:20:8c:91:92:42:73:a1:03:7b:
         a3:52:c6:f6:60:0a:ac:f4:43:0c:5d:cf:00:69:a2:8b:ff:ef:
         2e:ef:96:11:40:f0:01:e5:5d:37:29:f4:eb:f8:a0:29:d2:8c:
         d7:6a:da:cf:e4:47:d5:fa:7a:cd:3e:d8:2d:3d:a0:e4:83:dd:
         b5:75:94:77:df:db:ef:4e:27:d4:a1:d6:02:9a:ff:d0:bf:f4:
         85:67:6b:6f:11:26:52:44:b7:f3:3c:ac:b5:64:02:2e:dd:ae:
         af:1e:6c:39
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:13 2024 by rpki-client on console-fra.rpki-client.org