Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/SM8tvWjQaDy7Uzkwo1iybpObSsc.roa
File:                     SM8tvWjQaDy7Uzkwo1iybpObSsc.roa (raw, json)
Hash identifier:          LyTGVnnjgCJ0roajzLv6628ccVvtMYTY2DDCvKSnbvo=
Subject key identifier:   48:CF:2D:BD:68:D0:68:3C:BB:53:39:30:A3:58:B2:6E:93:9B:4A:C7
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       3F
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/SM8tvWjQaDy7Uzkwo1iybpObSsc.roa
Signing time:             Wed 28 Aug 2024 05:24:36 +0000
ROA not before:           Wed 28 Aug 2024 05:24:36 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        112.140.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 28 05:24:36 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=48CF2DBD68D0683CBB533930A358B26E939B4AC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:7f:e2:fa:22:b1:a7:0a:c6:3c:34:3d:e9:a1:
                    e7:7d:44:02:37:f0:42:39:5e:2d:96:bb:aa:5a:bc:
                    1c:50:f6:bb:70:85:89:b1:50:69:5d:50:de:77:02:
                    7b:43:6e:80:42:15:7f:c3:6d:17:37:fb:b4:cc:28:
                    9a:61:56:4b:2a:7e:71:d3:22:e5:7e:c3:74:51:69:
                    b2:c6:f8:85:24:60:53:fb:4e:e8:17:a3:6f:ff:13:
                    40:cb:3e:26:c8:9f:f6:89:f0:7b:95:40:87:46:19:
                    e1:bf:89:b3:c7:92:c7:d7:2c:01:7c:56:a7:45:61:
                    93:6d:ad:c4:a4:a7:c3:47:83:7b:89:5e:32:7e:3e:
                    9c:8a:89:15:6d:a3:36:01:f6:fd:d1:86:a7:ce:f4:
                    0d:4e:a8:77:d0:b6:1f:9c:c3:7b:8b:2b:34:c8:ee:
                    39:e4:90:13:01:d1:9c:73:4f:75:3f:dd:d1:8d:8c:
                    88:24:1e:2b:ee:87:94:f5:ff:a5:e5:d3:62:f5:c9:
                    85:0e:e5:45:2a:14:20:02:04:52:9c:86:52:d3:2c:
                    17:7e:cb:4a:9a:62:a4:1a:21:e9:a4:42:31:c0:44:
                    b2:e3:dd:6e:42:52:d3:63:b5:f2:38:c0:6c:b6:b8:
                    f6:a6:1c:0e:ef:26:c5:c5:51:91:d3:0a:97:7d:b7:
                    d0:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CF:2D:BD:68:D0:68:3C:BB:53:39:30:A3:58:B2:6E:93:9B:4A:C7
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/SM8tvWjQaDy7Uzkwo1iybpObSsc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         58:17:8f:d5:38:f4:7d:64:c5:e2:34:c3:9d:84:79:70:0c:c0:
         a1:09:03:25:51:87:f5:83:2a:1f:4a:ec:9d:84:12:5b:41:85:
         7c:37:a5:b1:68:3e:a0:e1:2c:38:e3:84:c1:9d:03:44:f6:b1:
         3c:dd:4a:9a:8a:a7:e8:2a:2f:08:56:41:96:0d:11:c1:04:c1:
         ca:7d:c9:c0:eb:1b:5b:1a:e1:ab:7d:a8:eb:60:34:79:94:87:
         61:22:d5:11:c5:b0:7e:e9:2c:ed:a3:42:93:1c:20:f2:69:6e:
         b4:d0:c6:90:89:68:5d:7f:f4:58:03:cd:6b:1e:ec:db:a8:2c:
         11:62:91:31:39:15:c1:07:9f:2d:6b:65:e1:fb:90:a5:43:48:
         02:84:ff:c4:2f:7c:da:98:b1:bf:fe:25:45:6a:f2:da:3e:5a:
         57:4e:bb:97:5a:b4:43:ab:97:11:e6:9c:fd:6d:59:57:43:4d:
         aa:96:d3:0b:22:2d:c8:4b:e7:16:50:e5:bd:e1:7d:e1:c8:d1:
         8d:8f:d0:a2:47:d9:b0:76:dc:92:92:76:f4:9e:17:2f:49:2e:
         02:8b:83:24:2c:9b:44:82:62:27:57:58:11:6b:fb:9c:44:ee:
         25:86:6d:8d:2c:9e:ec:06:9c:d7:f6:4f:20:ba:87:8e:64:f5:
         9f:54:ae:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:18 2024 by rpki-client on console-ams.rpki-client.org