Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/EVwupOOBQ22_ae0TifU2zmB5CGI.roa
File:                     EVwupOOBQ22_ae0TifU2zmB5CGI.roa (raw, json)
Hash identifier:          YYF9ny3EklFSQref6QkEo9lAqyu6gadqGxzxTi8y90c=
Subject key identifier:   11:5C:2E:A4:E3:81:43:6D:BF:69:ED:13:89:F5:36:CE:60:79:08:62
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       07D5
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EVwupOOBQ22_ae0TifU2zmB5CGI.roa
Signing time:             Tue 30 Apr 2024 02:08:54 +0000
ROA not before:           Tue 30 Apr 2024 02:08:54 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        211.14.118.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2005 (0x7d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:08:54 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=115C2EA4E381436DBF69ED1389F536CE60790862
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:f3:d1:d8:6b:29:17:be:c7:40:22:56:cb:45:
                    59:9d:5b:8d:e3:b3:af:d1:cb:3c:00:ee:34:c7:56:
                    54:da:68:db:37:d7:34:21:8f:dc:8d:6f:e3:13:42:
                    78:0f:e6:c0:1a:d8:86:5c:64:b3:65:3e:48:6d:5a:
                    8c:ca:e3:7c:da:89:cc:09:aa:df:0c:75:39:87:5c:
                    a9:3a:7f:c5:6c:6c:b3:7f:7f:9c:87:82:f6:49:c7:
                    7e:51:c3:85:64:ec:fc:3e:b2:32:b3:d1:87:ae:f3:
                    22:7c:67:1b:2b:6e:e8:1e:21:9c:e7:64:46:3f:27:
                    33:b3:a1:51:06:11:41:c6:13:1d:26:8e:12:b7:27:
                    38:0d:1d:e5:b8:ba:9a:8e:f9:5f:ec:23:53:f8:04:
                    7c:b6:ed:ca:fa:d9:10:5c:e3:84:5b:d1:c4:6e:41:
                    7c:2b:3f:6c:ce:7f:e0:c6:0d:0c:90:53:75:4d:fa:
                    3a:b8:4f:dc:a6:71:43:f0:9b:17:5a:45:18:ba:23:
                    1a:35:4a:c5:44:7d:8e:f4:95:e8:49:a7:86:b7:d0:
                    c6:6f:03:f5:0e:03:04:8e:37:28:85:72:36:f1:75:
                    12:54:73:7b:ef:06:25:de:2a:2b:f3:1e:df:bf:a2:
                    fb:c5:8a:3d:64:66:19:8e:1e:f5:11:e1:c2:86:5c:
                    d3:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5C:2E:A4:E3:81:43:6D:BF:69:ED:13:89:F5:36:CE:60:79:08:62
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/EVwupOOBQ22_ae0TifU2zmB5CGI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.118.0/23

    Signature Algorithm: sha256WithRSAEncryption
         c5:c9:9e:a1:78:79:5c:bf:27:70:2a:f9:fb:73:66:51:fd:cf:
         d0:33:7e:4b:d9:91:8e:8d:61:d1:f8:4d:c3:f7:23:10:2c:20:
         5f:43:eb:1e:98:61:cd:fd:6a:8f:51:61:e4:54:30:b6:e3:0e:
         90:02:fd:93:2d:4d:ed:7e:82:6b:c3:9e:39:54:3a:90:af:0e:
         71:c0:9c:48:5d:0c:d6:10:73:d2:aa:60:9f:60:28:7e:c5:74:
         77:f7:dd:90:5a:8b:67:26:59:ef:98:7d:24:dc:7d:56:f1:af:
         ad:ec:53:5b:58:38:6b:85:f3:10:e2:ae:7b:75:4d:26:fd:c9:
         7b:53:10:bd:c9:8c:17:2b:c9:41:ec:41:84:c3:34:4d:4b:38:
         c9:d0:ed:48:db:51:1e:d4:ce:f3:3f:fa:16:a6:41:09:dc:cc:
         4d:2f:cc:6c:9c:1e:6e:7e:c4:0b:af:6a:47:d8:e4:ba:ca:51:
         68:ec:8b:82:ea:36:13:cf:80:03:5c:1d:bf:ba:4a:60:cb:3f:
         7c:2c:bc:99:f9:02:5c:fa:91:ef:05:be:4f:12:86:fd:05:fe:
         12:d6:2d:be:fb:ff:d8:9b:28:55:d4:b8:e0:bb:84:c3:13:bd:
         46:47:04:71:49:5f:b2:d2:53:e3:67:4d:8e:db:f5:81:b9:29:
         de:9f:c0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:23 2024 by rpki-client on console-ams.rpki-client.org