Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa
File:                     i2htr4mXBX0KzMN_A2ptADFx1IA.roa (raw, json)
Hash identifier:          pTVqd/Apmna4wmbC1OzmuIIIToHSzvt/EemHsvSQD+g=
Subject key identifier:   8B:68:6D:AF:89:97:05:7D:0A:CC:C3:7F:03:6A:6D:00:31:71:D4:80
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       22
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa
Signing time:             Wed 10 Jan 2024 01:07:01 +0000
ROA not before:           Wed 10 Jan 2024 01:07:01 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        157.65.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:07:01 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=8B686DAF8997057D0ACCC37F036A6D003171D480
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:84:9b:d6:1d:f9:7d:1b:ed:bd:0b:83:1b:c6:
                    3b:bd:d3:d5:0a:c6:b8:64:05:fa:86:3a:44:4a:ae:
                    17:ed:c5:3b:69:44:96:2a:18:cf:17:c1:66:a3:b8:
                    06:64:7c:41:01:f4:71:40:e9:f1:5b:3a:19:40:40:
                    08:24:16:22:91:95:25:e8:4b:85:76:f2:6c:77:24:
                    52:a6:af:4b:8f:9a:cc:87:d8:9e:04:18:49:c3:cc:
                    47:7a:8a:da:2b:02:cd:1a:0a:57:4b:81:04:7b:4c:
                    4a:98:0c:a6:7b:fe:36:a8:49:32:88:16:09:42:16:
                    ea:e8:3a:51:38:60:d6:7b:ff:78:ba:f4:6a:70:3e:
                    0e:19:0b:fb:3a:0f:17:f6:a3:cd:6b:af:48:ec:64:
                    08:a9:2d:d3:a2:ff:4e:13:a8:78:d2:16:c6:de:01:
                    d1:55:73:fc:16:5e:95:2e:26:21:71:4e:00:b6:3d:
                    ff:ca:db:84:af:c0:16:7a:45:a9:a6:d3:0e:e9:e7:
                    c3:82:e3:90:f3:1f:b2:b2:34:b7:50:3f:e1:30:26:
                    4a:27:94:f6:f8:a7:2e:23:23:8e:94:4d:ce:4f:b7:
                    1d:e0:1c:6e:6f:91:82:e2:43:0b:bd:0c:c8:9c:65:
                    34:48:5d:58:77:4c:d4:b5:85:a4:ef:28:9b:a3:7d:
                    d8:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:68:6D:AF:89:97:05:7D:0A:CC:C3:7F:03:6A:6D:00:31:71:D4:80
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/i2htr4mXBX0KzMN_A2ptADFx1IA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         78:47:83:94:df:6f:74:f8:7b:51:02:44:48:1e:7f:be:9f:8c:
         d0:2d:26:cb:29:07:6e:8b:b9:77:4d:d7:a6:93:e3:8c:bf:a8:
         40:98:d3:79:60:1e:98:c5:22:0c:0c:96:73:f7:67:ef:c8:37:
         f0:da:67:ac:73:94:c6:7e:84:34:a7:0c:3b:c1:5d:f0:61:d7:
         af:29:72:c4:0a:c3:3c:ad:cf:45:29:db:9a:63:74:9b:ee:0e:
         20:18:00:47:c2:18:1f:da:66:66:f5:f2:f2:96:9d:61:4d:48:
         c0:2e:cb:d6:60:03:00:92:2f:30:20:25:ab:37:22:64:49:2e:
         4a:9f:da:fd:1d:13:05:7b:de:cb:05:d1:80:21:d6:2e:7d:f0:
         62:66:1a:15:8e:c1:d6:00:85:a0:55:52:94:74:92:67:33:b6:
         5d:d9:05:89:e2:b3:6b:97:64:9b:7d:43:df:2b:1b:85:c2:0e:
         d7:50:6c:03:13:95:84:94:04:41:f8:59:30:67:91:09:6f:3d:
         96:6e:32:04:19:58:40:61:02:08:7f:bf:ae:1a:c7:99:37:67:
         95:47:39:3e:90:f5:76:a7:55:cb:1e:85:2c:d5:86:e3:85:1a:
         bf:3d:23:38:f0:d0:f6:67:a3:51:38:bf:4e:2c:76:b2:8e:ff:
         8f:e0:bd:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:33 2024 by rpki-client on console-ams.rpki-client.org