Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa
File:                     I0VAB9SKUOy4C8utECMPKyUR7LE.roa (raw, json)
Hash identifier:          4Tx9pPPebOxiLr6ZCIfX6GV9Y02xCWzTHNiitIfy6sY=
Subject key identifier:   23:45:40:07:D4:8A:50:EC:B8:0B:CB:AD:10:23:0F:2B:25:11:EC:B1
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       86
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa
Signing time:             Tue 30 Apr 2024 01:28:26 +0000
ROA not before:           Tue 30 Apr 2024 01:28:26 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.170.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Apr 30 01:28:26 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=23454007D48A50ECB80BCBAD10230F2B2511ECB1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:55:69:b8:dd:7f:52:4c:09:1d:2b:ec:b7:35:
                    7a:3f:92:25:3d:1f:9b:b9:15:d8:9d:fc:ec:cd:92:
                    35:5e:a7:57:29:a0:40:d8:17:70:b9:4c:0c:f2:e3:
                    36:e6:fa:ed:64:27:c1:6d:18:47:7e:f7:34:55:1d:
                    15:cf:3d:49:cc:b9:62:f1:d8:32:28:4b:5c:5c:27:
                    63:53:63:b5:f7:99:a5:b7:c3:e9:f4:61:15:87:59:
                    2e:5b:bc:65:6d:13:d9:eb:80:3b:d6:6a:15:18:5b:
                    aa:0a:20:60:5c:79:00:a9:65:6d:64:31:ae:d8:ae:
                    ef:0a:5a:57:27:88:85:b1:35:15:3a:e0:8f:b0:f7:
                    bb:03:4e:18:a2:3d:4b:db:da:9c:ce:72:49:13:db:
                    b3:e2:ee:58:0d:c2:b7:8c:a6:e7:4c:7e:c2:6a:4f:
                    26:a6:e0:3d:92:ad:a1:79:94:00:e6:46:f7:4f:69:
                    cd:8e:4b:5d:32:73:79:2f:2a:8b:40:5b:ae:f1:aa:
                    4d:e2:23:7e:ac:bd:7a:2a:71:69:6f:d5:a9:44:d1:
                    8a:fd:82:6d:b0:93:ff:3b:12:4a:cb:5c:1e:78:44:
                    58:cd:55:65:e8:46:d7:78:1e:60:e8:74:a4:25:c1:
                    13:97:7a:5f:03:68:02:60:55:c6:31:ed:a8:39:64:
                    bd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:45:40:07:D4:8A:50:EC:B8:0B:CB:AD:10:23:0F:2B:25:11:EC:B1
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/I0VAB9SKUOy4C8utECMPKyUR7LE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.170.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1c:94:18:9c:d2:80:dd:92:5f:7b:28:59:e6:a1:e1:dd:46:e4:
         83:2b:fa:cb:9c:28:79:22:af:b7:5b:c0:f4:bb:47:5e:db:7f:
         07:15:82:57:da:77:89:81:f4:7c:f1:b9:fa:c6:87:4e:5e:17:
         81:70:99:f9:b5:59:ac:e7:a7:69:13:e0:1b:f1:d3:28:df:df:
         24:2c:06:c1:01:32:29:66:7e:d9:7d:7f:95:51:d4:9c:32:dc:
         5e:84:37:e1:50:66:80:96:a6:4f:f1:c7:47:7a:28:92:80:4c:
         60:f0:f0:9d:35:60:27:59:9a:d9:b1:a7:84:f8:8b:2d:98:b4:
         38:47:91:50:cd:49:2c:65:ee:7b:d9:36:4b:ac:45:25:1d:e8:
         08:a9:7a:49:08:83:86:db:e2:bf:77:0e:1c:9e:6f:5e:f5:b1:
         b3:95:93:9f:5f:af:bf:bf:48:cb:3f:69:2b:87:a7:b1:12:a2:
         bd:31:3d:c7:66:4f:04:68:66:86:97:a5:18:b4:b1:86:e3:e6:
         35:52:3a:80:57:9e:92:c4:8d:19:46:21:9b:2e:82:52:c4:9a:
         c0:19:08:22:1d:fb:7a:24:b9:20:fa:88:a8:79:2a:27:ee:a6:
         95:0b:d4:7b:a1:81:e8:4f:f0:1d:db:98:ff:ef:1b:dd:ac:2e:
         13:ef:86:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:55 2024 by rpki-client on console-fra.rpki-client.org