Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/pEGU54kewI5QqhFIVJGnmhQsT4Y.roa
File:                     pEGU54kewI5QqhFIVJGnmhQsT4Y.roa (raw, json)
Hash identifier:          iHfYSzZOsn2SD8GLj7FfGoF6zCkKDJ2O0WkRLI6Ublk=
Subject key identifier:   A4:41:94:E7:89:1E:C0:8E:50:AA:11:48:54:91:A7:9A:14:2C:4F:86
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       2E
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/pEGU54kewI5QqhFIVJGnmhQsT4Y.roa
Signing time:             Sat 03 Aug 2024 02:01:50 +0000
ROA not before:           Sat 03 Aug 2024 02:01:50 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        211.9.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:50 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=A44194E7891EC08E50AA11485491A79A142C4F86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:f4:6a:c6:30:df:0b:76:c9:3b:48:56:b3:86:
                    d5:85:57:1b:f0:0b:7f:b0:ba:69:e5:d1:5d:59:12:
                    3e:b7:78:52:c0:82:b7:22:e3:9d:96:0f:18:50:ec:
                    8a:6c:68:84:ab:6a:11:b0:b1:ac:95:8d:d5:64:95:
                    02:98:36:b2:fd:00:26:1d:c8:0a:62:d1:75:ea:d9:
                    74:58:fb:c9:17:83:ff:8a:06:ea:1f:2a:52:70:c1:
                    88:b8:07:ee:fa:9a:f8:b4:49:2f:b9:7e:aa:ad:bc:
                    d0:54:47:03:56:d2:0a:db:77:b0:da:f9:92:da:99:
                    9b:41:9c:68:71:a7:d5:5d:14:1e:e8:6e:01:c3:99:
                    fe:f9:12:b3:e0:ed:09:32:4c:61:51:7f:b0:4e:de:
                    9e:42:32:d4:f8:9b:69:9a:ce:e5:47:21:43:f8:6c:
                    b1:02:df:5f:63:de:92:09:f9:50:0b:11:4a:31:eb:
                    fa:53:82:d9:b0:fe:0d:26:40:ef:87:d5:af:e3:54:
                    49:e6:e3:98:ff:c2:c2:ab:36:59:b5:f1:d0:df:6c:
                    78:1b:91:d6:14:da:7d:bf:bd:f1:33:4e:fa:32:c8:
                    47:39:49:fa:d1:f3:b8:06:84:74:b6:70:c6:ce:3b:
                    33:52:50:7e:7e:03:66:a7:57:f0:9e:e3:dc:44:2d:
                    83:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:41:94:E7:89:1E:C0:8E:50:AA:11:48:54:91:A7:9A:14:2C:4F:86
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/pEGU54kewI5QqhFIVJGnmhQsT4Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.9.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a7:fe:28:b3:1b:7d:9d:8f:ab:38:0b:f8:dc:e5:87:e5:4a:a7:
         29:82:af:ac:dc:82:e7:4c:d5:2f:49:7a:ff:8c:91:ed:4d:b3:
         f8:59:ae:56:99:42:9a:75:83:94:78:23:93:b9:e0:2d:8d:c1:
         f0:b3:7b:51:08:f9:09:5f:40:cf:36:f4:eb:3e:e8:22:23:2f:
         3d:f9:99:39:b1:04:ab:aa:02:da:1d:ee:3e:cd:0d:10:81:41:
         88:5e:60:6c:35:d8:ca:90:a2:31:84:ac:c0:a6:bc:42:35:1f:
         fd:07:92:d9:d5:22:50:94:7e:16:c0:f9:0a:99:a6:95:ba:af:
         19:61:60:0e:2d:95:ac:07:a9:3e:9d:cf:5d:5e:d2:0c:ac:c3:
         64:dd:59:ac:7b:4d:a7:4b:19:23:f7:06:17:fc:25:6a:09:9a:
         c2:f7:5b:3f:8d:b3:78:18:d8:4c:ab:0d:e1:94:b6:82:87:6f:
         b2:b8:09:6b:c8:86:80:ed:d4:ea:f1:86:71:0d:3b:d0:a7:ab:
         1c:e8:2e:61:b5:07:fc:de:89:fc:ff:c5:68:ed:d0:82:8d:e0:
         cb:dd:89:c5:2b:e8:f2:8a:fd:ac:ab:96:d4:42:d2:2e:11:9d:
         45:11:f1:52:e6:75:19:16:37:5e:7a:b1:44:68:92:70:db:7c:
         51:30:9e:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org