Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/uhko0t_2BfZykBatJJ8CxFNx6Ds.roa
File:                     uhko0t_2BfZykBatJJ8CxFNx6Ds.roa (raw, json)
Hash identifier:          1Pri4PQBUw4G+uXsBUXw81aDcd+f/IZrJBTcRwBOcaA=
Subject key identifier:   BA:19:28:D2:DF:F6:05:F6:72:90:16:AD:24:9F:02:C4:53:71:E8:3B
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       03
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/uhko0t_2BfZykBatJJ8CxFNx6Ds.roa
Signing time:             Mon 02 Oct 2023 01:22:18 +0000
ROA not before:           Mon 02 Oct 2023 01:22:18 +0000
ROA not after:            Tue 01 Oct 2024 01:07:25 +0000
asID:                     63772
IP address blocks:        219.100.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Oct  2 01:22:18 2023 GMT
            Not After : Oct  1 01:07:25 2024 GMT
        Subject: CN=BA1928D2DFF605F6729016AD249F02C45371E83B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:f9:1b:a9:d4:b0:be:2e:91:51:c8:45:ef:e7:
                    4b:76:33:aa:dc:0b:5b:5f:ba:cd:31:0b:62:c6:9d:
                    27:cb:8c:d1:f1:ff:f2:80:7d:e7:69:5b:0c:c2:4a:
                    29:05:16:d5:6c:6b:e4:14:e4:da:5d:25:f5:ed:b0:
                    0c:30:95:fa:e3:98:a4:d7:05:4f:0f:06:de:c8:d1:
                    88:87:2a:b1:65:40:51:e9:14:5e:de:c9:20:42:c0:
                    c2:54:cd:4b:3c:39:46:9d:ce:ac:fe:c5:86:30:93:
                    76:26:0d:b8:cd:8d:3e:3d:41:91:46:0b:9f:55:7c:
                    ff:a3:8d:4a:8c:8f:5c:00:79:9a:09:27:7f:ab:bf:
                    4e:eb:2a:4b:5e:14:79:1e:01:18:bf:d4:06:33:37:
                    aa:34:0c:fd:62:47:4f:6e:45:c3:c1:5d:8e:87:e3:
                    1a:5e:ce:89:24:0b:78:b2:a3:48:d7:d2:d1:7f:86:
                    35:2b:ef:26:e7:04:83:86:7f:20:8a:e0:1f:77:f7:
                    fe:72:4a:b5:d6:8f:3f:c8:c4:cb:9f:14:ff:f4:4b:
                    0b:ba:8b:7a:91:88:c3:ec:62:e6:df:a1:35:27:a7:
                    f7:77:26:47:a7:7c:f1:1a:75:3d:b4:51:4d:c0:29:
                    d1:18:b7:d8:6b:f7:35:fa:28:90:02:d1:a0:04:2b:
                    27:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:19:28:D2:DF:F6:05:F6:72:90:16:AD:24:9F:02:C4:53:71:E8:3B
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/uhko0t_2BfZykBatJJ8CxFNx6Ds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         9c:dc:90:90:17:b1:82:10:70:a0:2b:06:1f:5c:55:e6:ec:c8:
         60:2f:3d:05:79:85:86:c3:14:dc:b9:7e:36:b2:c3:36:e1:c6:
         69:1b:35:88:aa:3b:18:c4:bb:36:b8:44:ac:e1:67:8f:6e:5a:
         ff:12:86:9d:70:23:77:94:c3:5c:46:22:5d:3e:1c:0d:00:fe:
         3f:3c:98:14:b6:68:1f:73:ae:20:4e:c2:08:60:3c:0f:f0:f1:
         6e:db:2c:41:c2:c0:6f:5b:2e:c6:f5:09:41:95:de:e3:c7:51:
         5d:e9:fc:bd:38:98:2a:3e:e4:ee:e3:05:ed:87:28:50:bd:fd:
         11:4d:68:4f:55:fa:d6:57:ad:49:10:5d:cb:3f:97:91:4b:7b:
         44:7c:69:ff:75:41:46:16:df:9b:c5:08:e9:24:d6:51:a0:57:
         19:2e:c6:bc:39:63:d4:0c:34:9c:d5:69:82:3f:c7:06:71:83:
         a0:1b:83:36:f3:94:11:ce:41:16:f5:76:d1:69:51:1e:3c:94:
         18:6c:47:b3:aa:00:c3:22:5a:69:a2:cc:74:5d:49:db:4a:ce:
         5f:a2:c2:0e:28:58:b3:df:37:dd:4b:55:73:ba:55:56:09:31:
         11:4c:48:66:ce:33:02:53:78:13:ab:42:f4:9e:56:56:3d:a8:
         bb:ad:ae:d9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org