Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
File:                     OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa (raw, json)
Hash identifier:          d89xplN+AQR8zqNFnEwR4MgVGatQ81Hj7MIRciaW5bE=
Subject key identifier:   38:46:86:7A:2C:ED:69:5B:EC:8C:96:4B:09:F1:4F:EF:3D:9F:D1:39
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       19
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
Signing time:             Wed 28 Feb 2024 04:59:54 +0000
ROA not before:           Wed 28 Feb 2024 04:59:54 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        203.135.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:59:54 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=3846867A2CED695BEC8C964B09F14FEF3D9FD139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:c8:fd:1e:9c:a1:ea:ea:45:3d:79:bd:80:20:
                    ff:2a:cd:52:29:1b:e9:1c:db:0e:9a:1e:eb:5e:70:
                    50:31:f7:86:e8:c9:b4:42:a6:c1:e0:48:94:33:46:
                    2e:3b:dd:e4:62:99:ec:84:b1:b0:e1:fc:10:f2:95:
                    30:a2:e0:bc:2f:28:67:bc:93:e5:6b:4c:80:23:ef:
                    82:f1:5d:04:3f:52:d9:8e:47:c6:d3:fb:7d:87:ab:
                    30:21:37:6f:72:80:a6:31:fd:dd:ee:8e:81:0e:40:
                    9e:97:06:71:43:5c:22:b8:74:00:66:9b:29:82:34:
                    5d:ff:b4:12:15:f3:65:d9:ff:6f:4f:65:eb:f4:56:
                    5d:4f:14:94:c0:e8:8a:b7:99:0e:75:6a:cd:ff:f8:
                    bb:a1:a2:81:4d:39:e3:a9:5b:e4:a5:be:83:07:36:
                    28:57:06:be:72:df:32:73:c1:d0:de:37:69:a6:41:
                    ec:ea:9f:6e:fd:cd:2a:b8:92:1b:0c:7d:6c:bc:3b:
                    41:8c:fa:2d:2f:79:04:d8:10:15:94:2f:31:5e:be:
                    14:13:ef:fc:80:9a:51:fa:77:07:8b:f4:a4:a4:07:
                    be:43:fd:f4:60:0e:d8:69:79:ca:24:5a:33:e2:cc:
                    cb:9b:f2:4e:5d:93:67:66:f9:8f:55:bd:48:59:c9:
                    36:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:46:86:7A:2C:ED:69:5B:EC:8C:96:4B:09:F1:4F:EF:3D:9F:D1:39
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/OEaGeiztaVvsjJZLCfFP7z2f0Tk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.135.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         5a:1e:64:33:1a:77:63:68:7e:c2:4e:3f:e5:6e:45:48:9a:a3:
         b0:5e:04:08:04:4a:3a:c3:1a:3e:31:fa:be:5d:6c:89:a1:24:
         58:c2:bb:c4:42:1d:6d:cc:b3:97:49:62:4a:4a:24:d3:c0:bc:
         17:b7:79:e1:47:35:82:eb:58:aa:ad:69:b6:3b:be:e3:4b:71:
         93:50:fe:89:72:21:d4:78:05:27:f4:dd:2f:5c:a2:da:9d:ad:
         32:9d:5c:f4:a9:4a:48:56:1c:3d:fa:4f:b1:08:f1:9d:50:ae:
         23:c1:2a:bf:15:cd:d8:00:e4:f3:38:4b:7d:f3:1b:53:a2:8c:
         0a:a6:4b:de:e4:e9:9a:e2:eb:59:6b:9d:8a:b1:17:75:a7:ef:
         c7:cf:30:e4:89:ac:d7:06:20:3c:56:c4:ef:2f:1f:00:d0:5d:
         c9:4e:08:d8:e4:3d:9a:da:23:3e:85:9a:93:35:e8:39:fb:20:
         d2:23:b6:c9:fb:54:aa:39:bf:34:d3:04:30:cf:65:ce:c1:2d:
         6c:c3:0f:3c:07:de:58:21:f2:d6:73:ee:3b:82:25:2b:62:84:
         82:39:85:ba:9a:0b:c6:38:91:aa:d8:00:82:52:b1:a5:0e:00:
         d1:0f:ff:59:54:b4:cf:08:24:46:15:8b:5d:85:c6:7f:a8:bc:
         54:1c:eb:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:12 2024 by rpki-client on console-fra.rpki-client.org