Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/_SZxcrv1D0fTjR1GltXP94VPIFA.roa
File:                     _SZxcrv1D0fTjR1GltXP94VPIFA.roa (raw, json)
Hash identifier:          Gw8J1hDNtcT9rkrSkNMbD3FdBSoNkh5LZM/8gjzRCQ8=
Subject key identifier:   FD:26:71:72:BB:F5:0F:47:D3:8D:1D:46:96:D5:CF:F7:85:4F:20:50
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       08
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/_SZxcrv1D0fTjR1GltXP94VPIFA.roa
Signing time:             Wed 28 Feb 2024 04:47:55 +0000
ROA not before:           Wed 28 Feb 2024 04:47:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        61.203.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:47:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=FD267172BBF50F47D38D1D4696D5CFF7854F2050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:ba:d4:4d:08:d6:e8:4d:dc:69:db:42:4e:11:
                    f0:ea:a8:d0:74:6d:72:40:20:1a:69:d2:35:e3:9d:
                    24:b0:2b:f5:1e:84:dc:99:ba:05:f2:de:93:0e:29:
                    b6:7d:57:01:e2:33:c1:79:f3:88:7d:e7:14:56:b7:
                    dc:63:95:27:88:62:64:34:7b:ab:ef:5b:a3:0b:f8:
                    75:6a:c9:83:6e:7c:1d:26:03:d2:5c:07:29:0c:b5:
                    7f:20:16:b6:31:f1:32:7f:96:b8:f3:69:6c:5d:2c:
                    03:52:b4:83:d9:08:a7:87:ed:f1:4d:df:f8:00:22:
                    61:d8:96:00:8c:38:a3:71:ed:82:c9:71:2a:d8:8a:
                    45:5e:c4:6c:6a:b2:b3:f1:8a:03:b9:7f:d5:ed:5c:
                    01:5d:be:18:42:76:f1:dd:c0:da:dc:47:bc:88:e6:
                    d9:35:bd:e6:0f:fd:20:87:6a:29:48:14:d8:d3:69:
                    fd:df:a7:3a:dd:4d:96:ea:44:60:b8:0d:5b:16:63:
                    7b:ea:3d:c7:06:01:d7:d4:00:3f:31:2e:1d:55:08:
                    66:ca:ef:c1:f6:04:9e:92:8f:88:58:75:f7:e3:f6:
                    f1:5c:b4:10:cd:f9:de:73:75:00:e6:85:ac:cd:d9:
                    4e:ad:7c:e9:27:9e:71:ec:c2:c8:a2:75:68:c7:c0:
                    33:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:26:71:72:BB:F5:0F:47:D3:8D:1D:46:96:D5:CF:F7:85:4F:20:50
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/_SZxcrv1D0fTjR1GltXP94VPIFA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.203.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:52:c1:ec:85:94:b8:49:64:cd:e9:26:2c:5a:d6:b9:d8:94:
         6c:f2:6c:10:07:f2:cf:d4:24:82:c3:db:bb:00:ba:fe:7a:5c:
         98:fc:51:48:83:12:84:e9:1a:5f:88:b9:79:19:9f:f8:f0:55:
         14:f3:75:c1:68:46:66:fe:44:04:19:2e:98:a1:81:85:cb:a7:
         43:67:c9:63:c5:40:c2:b0:b6:b6:bc:b6:93:5c:0d:41:79:f5:
         18:a0:08:23:cb:5d:da:f3:4d:a3:6c:27:e8:2c:13:7d:88:46:
         87:91:3b:dd:d7:03:27:56:53:55:4b:ca:69:8b:04:00:2f:91:
         78:ca:ce:c3:7b:9b:31:98:46:66:ee:34:d6:84:9e:54:91:ac:
         48:cc:9a:93:0d:9f:ac:90:8a:70:f2:5e:17:9f:2d:02:eb:fa:
         34:48:18:00:62:67:84:f2:f0:d8:ab:a4:55:85:e4:86:ad:59:
         4f:e7:c4:6d:55:f9:2f:b4:70:6b:e9:81:2a:65:23:e1:e8:6f:
         06:61:c7:21:7c:cf:0a:ff:fe:82:c8:12:9c:c9:0b:d2:9a:58:
         78:64:f7:5d:9a:4d:37:b2:61:d1:a4:88:36:0e:a2:0f:5b:f7:
         6f:d6:b4:72:f3:a9:f5:d0:d4:a1:af:72:f2:f1:ab:28:ae:71:
         5a:43:45:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:08 2024 by rpki-client on console-fra.rpki-client.org