Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
File:                     n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa (raw, json)
Hash identifier:          BjMs4aNXFKO7HsOXamic39SaLQABv0dXBxPoNAvTcNU=
Subject key identifier:   9F:9B:32:D5:1B:F7:97:A2:F3:88:B2:10:87:CC:20:4F:E9:80:C8:C2
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A51
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
Signing time:             Sun 30 Jun 2024 01:48:31 +0000
ROA not before:           Sun 30 Jun 2024 01:48:31 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        211.14.100.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2641 (0xa51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:48:31 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=9F9B32D51BF797A2F388B21087CC204FE980C8C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:80:14:fe:b3:de:8c:e1:0e:10:e8:78:8d:6e:
                    d4:87:62:09:53:f9:65:72:97:a0:78:07:4c:c2:92:
                    81:91:70:bd:8e:23:5e:25:f8:1a:47:75:5c:0c:a2:
                    da:a8:57:fe:f7:15:78:cd:ab:52:32:7f:6e:e3:94:
                    0a:a9:48:4f:0e:f3:7b:08:70:bb:cd:48:82:71:0d:
                    a8:02:aa:2c:eb:cb:d9:26:36:ad:88:0c:6a:02:6a:
                    cc:70:ec:80:76:d5:ad:28:d1:73:30:09:3b:30:6e:
                    7b:bf:33:e2:a3:c5:97:6f:5e:35:15:5d:96:75:69:
                    c0:17:05:14:e5:53:a9:83:6d:ca:52:f7:42:b5:40:
                    f9:d6:32:c5:41:3e:60:1e:7f:7e:50:30:f0:64:07:
                    25:6d:18:1f:2b:53:88:f7:b2:79:3c:ea:da:29:5d:
                    4e:96:a6:cc:14:46:41:d4:84:46:38:68:f9:c9:56:
                    33:28:ad:94:74:f6:95:0b:3a:cb:15:67:63:45:70:
                    dc:33:f9:db:35:b3:6f:5e:52:2f:c5:f5:c9:14:16:
                    36:c5:bf:e7:6c:f1:73:2f:bb:44:be:bf:c0:3f:99:
                    cd:ea:23:a8:f8:59:50:2d:2a:97:56:63:c7:7c:19:
                    2a:d7:93:72:ac:37:dc:58:d9:16:84:2f:50:02:2f:
                    fc:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:9B:32:D5:1B:F7:97:A2:F3:88:B2:10:87:CC:20:4F:E9:80:C8:C2
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/n5sy1Rv3l6LziLIQh8wgT-mAyMI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.100.0/22

    Signature Algorithm: sha256WithRSAEncryption
         03:87:e2:2c:b2:59:d1:7b:aa:29:89:6d:69:a1:4e:09:37:d2:
         da:ff:e6:aa:c6:79:7b:b1:07:18:63:6f:ce:43:6f:52:03:9f:
         4b:3c:c2:e0:fb:75:b6:87:44:29:de:3d:94:0b:35:e5:3f:e2:
         ce:7e:a2:ca:46:48:7d:56:09:a9:9e:4c:cc:de:0a:af:ca:8e:
         75:46:9e:b8:0d:bc:42:28:f7:02:e0:cd:fc:9f:34:65:e7:11:
         67:f7:15:f0:9d:4a:65:ae:28:d4:03:2e:60:a8:d0:75:12:ff:
         64:2b:fd:b9:f5:71:41:eb:0f:2c:50:0f:6c:5c:c1:b9:8f:9c:
         ba:8f:cb:b7:b2:ca:d1:be:26:51:06:41:66:f5:74:20:10:aa:
         39:12:9f:89:dd:df:3b:75:a2:49:59:87:b7:2d:d9:53:1a:36:
         dc:8d:af:6c:78:fe:ea:44:dd:bf:7a:f5:0f:10:49:52:a9:83:
         0b:2c:0b:2d:2d:b3:b5:43:c0:ae:88:cc:c6:b6:6e:e5:03:1d:
         2c:0a:b2:e5:67:80:d9:ae:37:9a:0c:1e:75:70:d7:fc:bc:95:
         d1:8c:7b:fc:b3:85:be:b4:cc:47:66:e6:4d:13:9c:d7:5e:54:
         82:c5:b1:28:e9:4e:79:f6:7b:8e:20:27:c0:76:20:10:72:8e:
         d0:ca:33:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:42 2024 by rpki-client on console-ams.rpki-client.org