Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/DEQ5DU2vSbmlLgxNlP4bDTwcVco.roa
File:                     DEQ5DU2vSbmlLgxNlP4bDTwcVco.roa (raw, json)
Hash identifier:          zXCgcHqgEhCfqBQkFg8h8r1jlOutHew3hAk+m/XdjKY=
Subject key identifier:   0C:44:39:0D:4D:AF:49:B9:A5:2E:0C:4D:94:FE:1B:0D:3C:1C:55:CA
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       53
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DEQ5DU2vSbmlLgxNlP4bDTwcVco.roa
Signing time:             Sun 30 Jun 2024 01:50:34 +0000
ROA not before:           Sun 30 Jun 2024 01:50:34 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        157.112.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:50:34 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=0C44390D4DAF49B9A52E0C4D94FE1B0D3C1C55CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:0e:ec:43:87:e2:02:22:51:e1:04:95:0e:3b:
                    3a:19:e9:0a:07:61:21:8f:8f:7b:0e:b4:3c:2c:30:
                    a6:92:55:63:66:87:9c:e2:06:00:b7:0b:03:b9:18:
                    2f:e4:9f:25:ce:47:14:fd:f7:12:87:8b:37:3c:3e:
                    c6:0d:99:45:a9:59:33:5a:42:87:78:b1:18:51:48:
                    a4:b4:21:00:6c:d2:12:55:ec:f0:9e:6e:15:2c:dc:
                    58:f1:7d:51:d5:31:cd:60:af:02:15:1c:88:3f:94:
                    a2:df:5b:b9:15:c2:d6:26:b2:b0:aa:b3:df:41:e7:
                    9c:01:15:4f:b2:d3:08:71:67:60:4f:7c:a2:86:e9:
                    ec:5f:ae:81:30:80:5c:e3:11:e8:87:4b:67:6d:c4:
                    e8:75:31:3a:01:23:32:19:3a:0b:6f:ca:5b:66:df:
                    18:97:5f:fc:f9:05:9d:fe:c0:08:1f:f4:55:59:00:
                    ff:f3:b5:56:05:55:9f:05:28:67:05:c0:8c:85:a2:
                    79:32:0e:10:e1:4f:88:dc:ca:21:2e:55:52:f3:0f:
                    13:cf:b0:ed:8a:c5:1c:df:57:dd:af:fb:b1:43:f5:
                    22:56:45:67:ed:db:f1:b6:41:39:1b:ac:9e:0a:21:
                    39:1e:54:13:95:56:3f:9c:f1:b5:9b:7c:63:aa:20:
                    28:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:44:39:0D:4D:AF:49:B9:A5:2E:0C:4D:94:FE:1B:0D:3C:1C:55:CA
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/DEQ5DU2vSbmlLgxNlP4bDTwcVco.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bf:35:cd:ee:27:02:10:f9:9b:50:13:b2:ac:97:28:21:ae:b0:
         5b:ef:13:6d:51:bb:8b:24:2e:08:c9:c3:34:77:01:bd:bb:09:
         b6:8a:a7:34:e9:a3:d4:26:3c:73:17:cd:8d:5c:1b:07:e2:26:
         7d:8e:4a:5d:bb:51:3a:5b:4d:5f:a3:b5:54:8f:0b:26:9e:3b:
         ec:e7:15:58:50:9b:03:c2:16:9c:c1:36:f4:32:00:e5:74:1e:
         04:c7:ad:c1:ef:f5:a9:35:1d:04:14:5c:76:b9:8d:60:54:32:
         d4:63:c4:69:94:b0:48:86:cd:69:d3:3d:6b:e1:c8:08:1f:8d:
         90:28:e4:52:7a:d4:df:ba:8a:fb:9b:54:70:f9:c2:42:f6:e9:
         16:bf:e1:a9:50:5b:5d:aa:13:68:29:54:85:f7:60:29:bd:0e:
         f0:56:24:49:36:df:00:64:99:dc:00:16:d0:cd:c7:7f:97:6b:
         ed:82:11:04:dc:55:46:4e:2d:24:62:00:c0:be:39:fb:fe:e8:
         b5:e8:b5:24:36:b9:6c:28:52:0e:08:73:71:81:ea:11:1c:3c:
         fb:a3:bf:51:8a:c5:28:cf:6b:af:1f:55:b7:11:b3:50:4e:af:
         fc:89:1d:85:21:9e:43:f3:96:2a:22:72:22:55:b7:01:aa:fc:
         80:40:29:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:59 2024 by rpki-client on console-fra.rpki-client.org