Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Zy_V8wv3tpfCa7aE1ZNwR-1v7JI.roa
File:                     Zy_V8wv3tpfCa7aE1ZNwR-1v7JI.roa (raw, json)
Hash identifier:          6nT9cl6ehA7BSbzvYoj2JzulFNT0odUWKL9U+teZtyg=
Subject key identifier:   67:2F:D5:F3:0B:F7:B6:97:C2:6B:B6:84:D5:93:70:47:ED:6F:EC:92
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       80
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Zy_V8wv3tpfCa7aE1ZNwR-1v7JI.roa
Signing time:             Mon 01 Jan 2024 01:28:23 +0000
ROA not before:           Mon 01 Jan 2024 01:28:23 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        210.236.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 128 (0x80)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:23 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=672FD5F30BF7B697C26BB684D5937047ED6FEC92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ee:18:0b:72:7a:94:7a:fa:6e:e4:73:8f:16:
                    46:1c:12:c0:01:d1:fb:73:6e:d4:31:1b:b3:0f:77:
                    89:b5:36:05:b8:81:dc:1d:e4:37:19:f0:c5:8f:5c:
                    9d:e9:72:29:10:ee:db:5e:5b:3c:c9:b6:59:8a:73:
                    0f:d5:77:7b:f4:dc:c5:12:04:84:0d:b6:51:34:d6:
                    fe:a7:e7:93:6c:b8:53:85:b0:0f:11:97:18:2a:03:
                    1c:20:40:eb:16:e9:11:36:7f:33:4e:04:9c:bf:d5:
                    dd:2a:3c:24:30:b4:3f:e5:70:c7:9d:af:c0:4e:65:
                    bb:3a:2f:38:f4:4f:b6:22:4a:5d:a0:ee:f5:77:6a:
                    d9:60:f0:c7:7a:2d:61:89:ff:ef:53:79:e2:51:78:
                    a4:66:2a:f0:e2:c5:4e:68:6d:94:9c:c3:15:49:92:
                    16:2f:bb:59:49:89:57:42:ce:8d:e5:cb:5c:fb:5d:
                    44:90:ed:0c:40:2d:84:9a:2d:35:a9:50:e8:30:b5:
                    d8:b2:dd:1c:51:7c:c2:1d:c2:71:5f:4c:0d:cf:61:
                    1c:d4:ff:e2:bb:ee:f1:53:dd:eb:bb:e4:a9:a5:cf:
                    1d:e0:af:4b:9c:c8:f5:17:31:f5:16:25:06:48:b3:
                    07:59:76:c1:60:61:6c:23:be:eb:a9:c4:fe:43:df:
                    bc:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:2F:D5:F3:0B:F7:B6:97:C2:6B:B6:84:D5:93:70:47:ED:6F:EC:92
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Zy_V8wv3tpfCa7aE1ZNwR-1v7JI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:1f:07:ca:2b:83:2a:a6:e9:2a:1d:7f:20:79:df:49:e8:
         7b:bd:7a:d9:b0:5f:89:bb:67:39:1e:17:f9:37:f4:87:a0:65:
         36:b1:e9:d5:86:3f:86:04:ae:a2:18:60:63:34:c1:b2:5e:d4:
         97:57:90:34:83:4d:82:8b:55:a2:0e:49:ac:d2:46:49:44:05:
         c4:19:aa:19:be:66:0d:eb:40:38:13:00:fc:b3:74:b7:e9:c8:
         e3:9a:b9:39:58:b9:df:64:a4:90:87:fe:ad:73:7f:16:4a:01:
         44:10:4d:8b:e4:b9:8d:f0:0f:4a:6e:ab:11:46:ca:33:73:80:
         c0:74:ac:97:99:6e:64:3e:4d:0c:5a:3f:1f:60:ed:85:ab:f2:
         3d:d9:9b:ab:9a:f5:03:1a:37:79:1e:1f:3b:64:19:e8:8e:bb:
         62:ca:e0:60:cb:8c:03:6b:1b:a0:33:eb:60:0b:60:b7:5d:07:
         f3:4b:1c:90:71:89:37:09:f3:21:39:67:05:ed:22:1c:0e:2a:
         0f:67:77:79:b9:ea:96:15:a3:d5:65:a0:57:ea:67:32:64:6e:
         b9:40:b5:90:b0:b7:28:3f:48:02:77:f9:5a:cf:57:52:96:9c:
         a2:b2:4c:10:34:57:5d:08:88:de:bc:8a:f0:5f:29:30:95:15:
         17:6e:22:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org