Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/RIUtxKMUipL4HveycIbkYltUoMc.roa
File:                     RIUtxKMUipL4HveycIbkYltUoMc.roa (raw, json)
Hash identifier:          QFYxVS8g3IV1TVfu2G5y0FvR94b95yeC0wlnxKOBG2o=
Subject key identifier:   44:85:2D:C4:A3:14:8A:92:F8:1E:F7:B2:70:86:E4:62:5B:54:A0:C7
Certificate issuer:       /CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
Certificate serial:       12
Authority key identifier: FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/RIUtxKMUipL4HveycIbkYltUoMc.roa
Signing time:             Fri 18 Oct 2024 08:13:30 +0000
ROA not before:           Fri 18 Oct 2024 08:13:30 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        193.116.32.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB8C78D2025F365E0B6EBA41C8B2351D8116C2A5
        Validity
            Not Before: Oct 18 08:13:30 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=44852DC4A3148A92F81EF7B27086E4625B54A0C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:09:5c:30:6c:00:d6:e5:dd:d9:a3:67:13:a6:
                    e1:af:7d:f3:0a:f7:32:86:36:a5:3d:59:74:97:60:
                    94:28:ce:9e:07:55:28:9e:fe:06:a2:21:6c:5b:b6:
                    2c:d0:0f:55:e6:33:68:b4:c6:df:a3:6a:8b:00:19:
                    0e:05:56:1a:ec:ea:10:19:e6:4d:ac:a7:74:a1:0b:
                    ad:c9:66:2c:43:81:19:d5:a5:7a:f3:35:8b:2b:04:
                    30:00:d2:07:20:73:2c:76:7c:ed:b5:e7:57:bc:17:
                    b2:dc:cb:c0:fa:dc:00:a8:da:d0:04:64:c6:88:cf:
                    5e:b3:ab:25:d4:86:f2:ce:37:c4:8c:4a:e2:6d:a4:
                    07:d5:7f:3f:7e:9f:91:98:8c:6b:14:f1:d6:87:5c:
                    6b:90:c4:a6:18:ac:90:d7:53:f7:f6:86:2c:8a:d7:
                    d4:10:c3:3a:1a:35:33:6b:f3:0f:9e:9f:64:55:cf:
                    e8:4c:fb:3a:f2:61:cd:5a:08:0d:3f:9e:e8:ef:f2:
                    6c:20:e2:99:88:a9:19:a4:55:42:85:6a:6a:fd:d0:
                    e0:1b:d5:4d:88:6a:de:23:c2:a3:c3:2a:44:0f:c0:
                    46:e5:ee:2a:eb:9b:07:d0:f3:16:ca:1b:1c:f7:19:
                    1e:1d:75:01:a1:58:9a:9b:db:12:56:29:aa:cb:9d:
                    2d:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:85:2D:C4:A3:14:8A:92:F8:1E:F7:B2:70:86:E4:62:5B:54:A0:C7
            X509v3 Authority Key Identifier:
                keyid:FB:8C:78:D2:02:5F:36:5E:0B:6E:BA:41:C8:B2:35:1D:81:16:C2:A5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/-4x40gJfNl4LbrpByLI1HYEWwqU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-4x40gJfNl4LbrpByLI1HYEWwqU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/RIUtxKMUipL4HveycIbkYltUoMc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.116.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         39:c4:8c:a8:e5:8b:05:d6:c9:4b:37:70:df:8c:1f:75:a2:87:
         f1:27:d4:a6:50:5e:e8:63:2d:2a:08:4d:ec:56:ef:c9:59:13:
         f2:ef:1a:1c:22:3d:f8:fd:03:73:3d:08:b0:df:2d:9b:97:41:
         dd:3d:f1:5a:1e:7d:82:b8:a4:79:55:5d:69:80:83:d6:aa:b0:
         9c:86:5a:e5:7f:07:5b:db:0e:02:25:07:61:0c:63:af:df:dc:
         b1:e9:7f:1f:ea:5f:ff:79:6c:47:51:43:62:85:32:f7:45:de:
         b3:67:55:16:5c:1a:43:06:df:1c:fd:85:d1:85:9c:37:b5:97:
         b0:4b:72:f5:45:c7:11:21:37:58:6e:44:df:c9:08:dc:73:ae:
         3c:5d:7f:70:1a:0c:0f:b2:ad:ff:a4:ca:0c:f0:a8:d3:03:3a:
         af:c0:db:30:aa:15:a5:13:9f:9c:fd:66:40:6b:10:04:09:13:
         c0:e4:54:a0:90:0b:06:2d:12:91:f2:27:9a:99:53:30:9e:a1:
         d1:e6:ea:15:7d:b7:d7:48:b9:1c:68:bb:1f:ac:0c:fe:9f:b5:
         43:2c:fe:5e:cf:87:24:0f:54:1d:58:5c:bc:ac:5f:8b:56:24:
         83:2c:18:59:81:0f:a6:d1:96:66:45:ac:bd:c4:9d:c6:30:cf:
         15:87:e5:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:35 2024 by rpki-client on console-ams.rpki-client.org