Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3148/migOOetv4G9ib6EKwscT7ro4AJU.roa
File:                     migOOetv4G9ib6EKwscT7ro4AJU.roa (raw, json)
Hash identifier:          DFLfZVpw7+9vAP9DrVflgcrB82xEybUMHg22MBoGzlk=
Subject key identifier:   9A:28:0E:39:EB:6F:E0:6F:62:6F:A1:0A:C2:C7:13:EE:BA:38:00:95
Certificate issuer:       /CN=1A58DF54F62A6833085C76FA6198598BF904C0A3
Certificate serial:       02
Authority key identifier: 1A:58:DF:54:F6:2A:68:33:08:5C:76:FA:61:98:59:8B:F9:04:C0:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/migOOetv4G9ib6EKwscT7ro4AJU.roa
Signing time:             Thu 27 Jul 2023 08:45:35 +0000
ROA not before:           Thu 27 Jul 2023 08:45:35 +0000
ROA not after:            Fri 26 Jul 2024 08:39:09 +0000
asID:                     17683
IP address blocks:        202.11.156.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A58DF54F62A6833085C76FA6198598BF904C0A3
        Validity
            Not Before: Jul 27 08:45:35 2023 GMT
            Not After : Jul 26 08:39:09 2024 GMT
        Subject: CN=9A280E39EB6FE06F626FA10AC2C713EEBA380095
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:95:2f:d4:ac:66:8f:9c:64:84:52:04:7e:29:
                    9b:34:8d:3c:55:74:8d:72:9f:7e:1f:f4:2f:35:4c:
                    e0:c0:25:9b:23:c3:f1:91:59:e2:8d:6b:44:66:da:
                    9f:92:5d:ca:95:00:b7:33:58:2f:45:f3:87:a1:d0:
                    ac:8b:65:00:de:25:2f:6a:e8:28:72:f6:f9:20:6a:
                    91:a5:85:47:0b:c1:04:8c:ed:8f:3a:c0:de:07:62:
                    dc:be:8f:04:4d:f0:3d:05:90:d8:26:8e:72:76:da:
                    6e:7c:b0:21:f8:96:08:50:d7:ad:15:2a:46:11:d1:
                    05:d4:16:40:b8:d5:43:34:9a:c9:b2:a4:01:af:7f:
                    f4:c8:bd:82:38:3b:da:29:b4:b9:6d:b5:f8:3b:08:
                    88:f5:0a:69:33:0b:05:ea:46:9b:4b:f4:d5:72:11:
                    63:19:5d:f5:f9:90:0a:1a:ab:b7:0d:b3:c1:f0:c7:
                    67:ee:52:a6:d9:36:c3:69:e2:5f:ad:c0:69:27:f8:
                    23:6a:29:1e:84:c6:97:16:6c:fe:d9:73:30:18:be:
                    c9:49:2f:11:b1:30:2f:bc:10:db:3d:5e:7f:f9:8e:
                    76:06:93:5f:35:d0:1a:b5:0f:1f:52:b9:d7:9d:1e:
                    60:aa:46:f8:62:ac:c4:48:ab:cc:97:1d:05:91:aa:
                    42:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:28:0E:39:EB:6F:E0:6F:62:6F:A1:0A:C2:C7:13:EE:BA:38:00:95
            X509v3 Authority Key Identifier:
                keyid:1A:58:DF:54:F6:2A:68:33:08:5C:76:FA:61:98:59:8B:F9:04:C0:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/GljfVPYqaDMIXHb6YZhZi_kEwKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GljfVPYqaDMIXHb6YZhZi_kEwKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3148/migOOetv4G9ib6EKwscT7ro4AJU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.11.156.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:88:df:16:91:b1:9e:09:f0:1d:fc:47:df:75:90:68:2c:e1:
         17:89:0b:3e:fe:40:36:74:81:40:96:d3:be:10:d8:01:6b:60:
         b8:3b:08:2f:1c:b0:f2:ae:f7:c2:ee:02:cd:e9:b9:d2:d6:82:
         d3:f7:b5:58:2a:38:86:be:fa:5c:d2:77:80:fc:09:88:f2:19:
         44:dd:7c:92:b6:6a:76:36:bb:3d:af:ca:34:c5:b8:d5:29:4a:
         4b:a0:ed:2f:8c:d3:48:48:73:2c:4a:c2:85:14:c6:a5:13:01:
         c7:82:65:ba:c5:16:c4:c1:6e:4c:70:ed:42:f4:67:d5:1e:d7:
         63:0e:46:22:ed:28:35:ae:c8:3f:6a:d9:1d:bb:f9:b8:a8:f2:
         f5:13:19:d1:ea:15:03:98:60:e9:f8:52:c1:6f:3e:12:3c:3f:
         bd:43:5e:aa:b2:c5:a9:fd:e0:7a:10:7e:6d:b3:ce:83:e7:c2:
         8b:0c:bf:40:5f:6e:02:6a:2e:49:68:f3:f5:a4:7a:b3:7c:93:
         4e:38:9a:0a:26:8f:e8:0d:62:0b:4e:d9:bc:f6:df:f2:31:e8:
         31:25:88:53:ac:31:8b:a4:ec:81:f0:5d:74:10:e0:3f:3c:9b:
         84:dc:dc:28:c1:b9:1e:23:e0:0c:ea:ce:f9:12:ba:ac:4a:62:
         f0:39:0b:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org