Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/x1Jgq8I07Dy0AA_Al95dFYreK7s.roa
File:                     x1Jgq8I07Dy0AA_Al95dFYreK7s.roa (raw, json)
Hash identifier:          22GwsNMVY8uK4Xh3rHljcNbNqhuOcOi6vS70Jmc7a8I=
Subject key identifier:   C7:52:60:AB:C2:34:EC:3C:B4:00:0F:C0:97:DE:5D:15:8A:DE:2B:BB
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       83
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x1Jgq8I07Dy0AA_Al95dFYreK7s.roa
Signing time:             Mon 01 Jan 2024 01:28:24 +0000
ROA not before:           Mon 01 Jan 2024 01:28:24 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        202.137.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:24 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=C75260ABC234EC3CB4000FC097DE5D158ADE2BBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:1a:5b:d1:e1:0d:6c:b9:95:94:6d:35:ca:7d:
                    ee:1c:1f:91:53:d0:af:22:b6:7c:70:46:dd:f6:03:
                    b4:27:20:48:c7:5c:9c:cc:86:cf:c9:13:c4:7d:62:
                    42:8e:a3:c5:6d:a7:95:53:c7:84:a7:22:38:ad:0a:
                    5f:f5:92:78:13:12:03:79:bc:48:ea:29:90:a4:66:
                    26:b8:db:c6:46:d7:0e:a5:f5:0c:d7:b2:07:46:4c:
                    18:47:43:bd:8f:e2:be:da:a8:3b:f3:e8:19:71:ff:
                    9c:06:8f:71:b1:07:96:d0:f5:26:6d:6f:9d:b6:e3:
                    cb:0d:22:9e:39:cd:ed:fd:1a:11:ed:06:d8:60:41:
                    21:95:bf:3e:b0:63:cb:49:f1:d5:9b:3c:9e:db:a8:
                    c3:6f:dd:3e:86:72:f2:f7:04:50:c6:f6:da:6f:1a:
                    92:7f:14:e4:09:b8:78:b1:b3:2d:17:ab:6f:90:21:
                    70:c3:2c:3d:88:d2:ad:5e:59:e2:7a:cd:0c:a4:92:
                    3e:df:a0:40:b2:f6:3f:aa:6e:33:bc:f6:74:87:4c:
                    27:8b:65:e5:03:c9:ac:b6:3d:5d:92:3a:16:18:f3:
                    bc:32:67:14:3d:28:9e:e9:30:31:92:05:7b:b2:29:
                    4f:eb:34:e1:b1:05:f7:9e:90:42:35:46:5f:13:41:
                    b4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:52:60:AB:C2:34:EC:3C:B4:00:0F:C0:97:DE:5D:15:8A:DE:2B:BB
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/x1Jgq8I07Dy0AA_Al95dFYreK7s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.137.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:75:94:56:92:11:ae:8a:70:de:4e:dd:f3:56:31:9b:45:1c:
         30:67:b6:bd:3f:ec:c6:89:9f:3a:ac:f5:5f:b9:a3:2f:bb:67:
         f5:33:69:45:6a:f0:bd:9f:bf:91:23:de:13:3b:ba:15:e9:85:
         87:03:c5:5a:6f:bb:a8:03:a4:38:cb:ef:ce:b9:a6:91:b4:7a:
         4c:78:48:be:4c:e8:eb:b7:81:6b:0c:9c:7f:10:41:32:d6:4d:
         ac:eb:e0:25:25:63:57:8b:42:d0:c7:8d:d9:e5:b3:4e:2c:94:
         3d:49:d1:09:be:32:2f:c4:79:93:b6:ff:be:82:e9:77:5c:65:
         13:38:78:4d:2f:d9:9b:c2:36:6a:fc:b4:98:fa:3f:2f:61:63:
         f1:7c:6a:82:a4:10:fe:c8:ed:43:65:54:37:de:a9:51:12:bf:
         08:f2:ba:2a:c8:18:d4:9d:72:4e:c4:9e:23:5f:7f:4e:42:33:
         a7:6f:2e:bf:95:8d:d4:50:e8:ce:5d:75:7c:a4:1f:6a:3e:6d:
         dc:8e:dc:88:07:08:0d:b1:63:c8:01:ed:2d:2b:aa:f9:e3:2a:
         8f:63:5a:d5:5c:6b:6d:1a:23:b9:d7:a1:60:34:ef:70:1c:2f:
         cc:04:f1:fe:68:bc:d2:16:7f:53:8f:ab:d1:1c:c7:7a:88:0e:
         ef:25:56:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:40 2024 by rpki-client on console-ams.rpki-client.org