Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa
File:                     AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa (raw, json)
Hash identifier:          05WlY5IJKcNxmYNOQdXunUS6AOv97Em0MDLbGpBfjjs=
Subject key identifier:   01:E4:23:64:B0:DC:FF:4C:E6:01:42:7C:D4:96:C1:2A:13:37:8B:19
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       083D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa
Signing time:             Tue 30 Apr 2024 02:14:31 +0000
ROA not before:           Tue 30 Apr 2024 02:14:31 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.92.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2109 (0x83d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:14:31 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=01E42364B0DCFF4CE601427CD496C12A13378B19
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:9c:a8:2b:b8:0a:36:c6:f8:ba:b6:8b:c5:03:
                    44:9e:b6:57:29:3a:e0:a6:09:85:18:0f:ed:d5:54:
                    2e:56:b2:52:f6:08:b6:2c:e9:e1:2b:06:71:0e:23:
                    c0:23:36:66:9f:b3:fd:20:84:63:32:1f:54:34:3e:
                    80:fd:6e:56:0a:2e:42:ff:fa:d7:9f:f6:08:08:c0:
                    ab:30:34:1f:d6:1b:85:b6:dc:19:e3:cb:e5:ff:79:
                    fc:4a:07:7c:90:eb:ec:27:eb:93:54:fb:62:e1:97:
                    36:c6:e7:cf:54:f0:fc:9c:3e:1a:79:c0:e6:6f:c5:
                    c2:09:be:9a:4f:91:d5:59:e2:68:f5:92:27:dc:ed:
                    d5:b6:e3:62:ed:7e:4e:6a:ae:b5:a7:f8:9d:b2:d8:
                    d3:93:ed:c4:25:27:14:49:82:56:cd:b8:58:b7:5b:
                    52:f6:32:e2:76:08:ad:2c:fa:4d:ee:c4:09:ab:c6:
                    3a:73:90:ea:e4:1f:3d:4f:b9:bb:7f:38:67:d6:8e:
                    a1:36:37:56:6d:ee:0f:b7:f6:eb:b8:5a:b6:b7:69:
                    57:86:6a:fb:bb:00:ea:96:b9:30:7a:ac:3c:05:60:
                    9a:32:0c:39:8f:4b:88:c7:03:9f:55:e1:a7:70:54:
                    6e:d8:ca:5e:5e:7e:52:16:17:b6:4b:3f:d9:06:f1:
                    a0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:E4:23:64:B0:DC:FF:4C:E6:01:42:7C:D4:96:C1:2A:13:37:8B:19
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/AeQjZLDc_0zmAUJ81JbBKhM3ixk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.92.0/23

    Signature Algorithm: sha256WithRSAEncryption
         9a:64:5a:76:81:d5:e5:c8:d9:c1:f8:2a:b8:ee:48:96:70:fb:
         0c:93:f6:a8:0f:e9:5f:1a:2d:08:59:ee:45:eb:4f:6c:04:ab:
         e2:75:44:31:20:b0:89:4e:ea:b1:5a:26:1f:6a:6f:82:b4:86:
         04:f1:24:82:cd:e8:c0:ec:4e:cb:76:85:87:85:75:2d:1e:ef:
         9c:82:e3:68:58:8c:dc:28:9a:6b:0b:b2:2b:45:bf:f8:09:3a:
         1a:95:23:80:74:bf:7d:4f:a3:ed:d8:ee:e8:67:47:42:06:08:
         73:fb:c6:b4:c8:48:5d:98:7c:9e:ac:48:f3:73:22:2e:b1:d5:
         8b:bf:f6:ca:e3:a7:3d:28:5f:a4:c3:a0:3b:2d:43:91:b9:2b:
         6a:7e:6a:f0:75:58:43:03:96:3b:12:ac:ca:dc:cd:7c:82:fa:
         28:99:09:03:61:2f:2a:6a:43:81:33:a7:7e:7c:6c:b6:d0:14:
         cc:89:cb:48:f0:9b:09:64:b4:d9:a0:8c:da:89:c2:4a:40:78:
         cb:c8:fa:9b:a7:68:69:1d:ea:a7:c8:a3:ea:e7:c8:7c:b0:66:
         30:25:83:43:ee:ae:98:c3:8e:c8:6f:cd:d5:2a:46:47:db:e8:
         37:af:ac:f9:5d:68:94:52:59:bc:91:8e:da:76:f1:c0:34:c4:
         d3:03:21:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org