Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/3QExLyoqF10YzdpmCJqpGuqu790.roa
File:                     3QExLyoqF10YzdpmCJqpGuqu790.roa (raw, json)
Hash identifier:          9rtRDciHenUT9vzWQ8uzoGAo0bTWQtIBX6cMzks5xLc=
Subject key identifier:   DD:01:31:2F:2A:2A:17:5D:18:CD:DA:66:08:9A:A9:1A:EA:AE:EF:DD
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       E6
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/3QExLyoqF10YzdpmCJqpGuqu790.roa
Signing time:             Fri 31 May 2024 01:31:26 +0000
ROA not before:           Fri 31 May 2024 01:31:26 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        202.222.16.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 230 (0xe6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:26 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=DD01312F2A2A175D18CDDA66089AA91AEAAEEFDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:fb:22:16:e2:2c:f1:f1:29:33:9f:76:6b:ec:
                    b7:39:9f:8d:fc:ca:37:26:78:2c:04:3d:3f:b4:1b:
                    f8:bc:89:ad:57:fb:c2:49:d4:c0:8e:f5:79:3e:6d:
                    86:c9:7d:47:10:e4:16:ef:7e:86:ce:43:d4:c8:ec:
                    72:4a:f2:53:12:88:5b:a5:3f:c0:3d:9a:e5:2e:18:
                    01:14:f1:1b:36:cb:55:d6:9b:88:10:8e:ba:3a:1d:
                    72:5b:14:c0:aa:d6:ed:a3:65:6a:93:8b:0c:cc:76:
                    2c:c8:4e:c4:11:5a:25:45:fb:2e:13:16:f4:c9:93:
                    cc:fd:b6:53:cf:a4:64:c0:c8:96:29:75:95:18:75:
                    c2:4b:33:e9:d0:fe:0e:70:b0:ed:af:2c:2d:82:39:
                    4e:fb:70:10:23:8b:cc:e2:0f:f0:85:b4:80:11:55:
                    29:6e:da:4b:0b:47:c0:4a:78:b1:30:a8:6e:4f:90:
                    ec:2e:94:e1:4d:cf:64:e2:c9:34:f9:17:7b:25:fd:
                    42:3a:bb:72:b6:95:f4:d0:27:a1:b1:09:18:46:62:
                    5e:57:f3:cf:6b:e9:05:5d:29:bb:c2:13:6d:ce:e8:
                    d9:04:a5:64:71:9b:a6:12:e9:f8:5c:8a:47:d7:7e:
                    bb:60:f1:75:30:e4:99:5b:00:38:84:f8:10:f7:53:
                    f6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:01:31:2F:2A:2A:17:5D:18:CD:DA:66:08:9A:A9:1A:EA:AE:EF:DD
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/3QExLyoqF10YzdpmCJqpGuqu790.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.222.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         03:95:ce:de:a0:7f:ea:26:50:e9:a6:77:da:e8:ef:76:eb:c1:
         05:21:70:ea:41:3a:71:50:eb:a7:3d:a7:b2:93:5f:c4:74:66:
         45:7f:99:81:fb:e5:0c:ea:29:d9:cd:e9:b1:c2:0b:d4:af:19:
         50:b4:89:50:5a:20:2c:61:b5:5a:24:1d:3b:df:27:e5:4a:a6:
         98:7a:b2:16:95:c0:2d:5a:6d:33:41:80:9a:ee:06:ed:38:1a:
         b5:a7:36:c1:1b:e4:3f:ea:c0:3f:18:2e:c0:b5:c8:80:7e:1d:
         c0:5b:64:69:ba:e8:17:0c:42:0e:ab:c1:81:ad:6a:1d:34:27:
         c7:4e:91:70:d7:2f:6e:ad:f9:0a:85:bd:02:0a:ab:5b:3b:f5:
         66:a6:3b:b1:fd:4b:6e:36:14:34:1f:7f:98:4c:53:48:05:e8:
         96:2e:b3:35:68:41:b9:9d:a9:7d:ab:2e:85:da:4a:1b:e1:9a:
         fa:61:19:ee:17:72:df:63:2e:dd:58:c9:c3:c5:1c:fd:58:fd:
         0e:57:ca:96:dc:04:e3:2f:11:3f:13:63:f6:73:db:0e:06:f5:
         66:28:e3:f7:5b:43:1d:4b:2f:eb:52:a6:5b:18:a1:a7:8e:2a:
         a4:09:87:c3:70:71:1b:2c:e2:86:23:67:b0:25:75:6b:d3:a6:
         c2:5e:6e:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org