Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
File:                     1ctN4PnDFbacaroCGnNWQWeOLdw.roa (raw, json)
Hash identifier:          ByDuQbRL1E78x1CWvgGOzYEOdltho6diLpoj5yx4BfU=
Subject key identifier:   D5:CB:4D:E0:F9:C3:15:B6:9C:6A:BA:02:1A:73:56:41:67:8E:2D:DC
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       CD
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
Signing time:             Tue 01 Aug 2023 01:30:39 +0000
ROA not before:           Tue 01 Aug 2023 01:30:39 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.220.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 205 (0xcd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:39 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=D5CB4DE0F9C315B69C6ABA021A735641678E2DDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:c6:44:aa:e1:23:9c:19:49:e8:53:0f:9b:4a:
                    51:10:e7:30:97:d3:eb:55:59:51:3f:97:76:b4:7d:
                    65:3f:d2:27:fd:cc:9e:e8:73:0f:33:53:d2:81:38:
                    ea:4e:80:db:17:3d:c4:e4:f0:c1:8a:98:c2:11:4a:
                    24:91:5d:f0:d3:3c:00:af:65:1c:85:5d:a8:f8:26:
                    92:84:53:6b:05:2b:96:85:98:1d:40:61:80:f4:09:
                    55:83:fe:5a:1c:64:00:8f:e4:e7:0d:21:58:30:df:
                    cb:33:c7:95:5a:c1:4a:6c:f8:ef:aa:7a:7d:b7:87:
                    07:8c:a4:41:8b:2d:c4:06:c4:70:f3:c9:6c:3c:73:
                    eb:55:e4:c4:68:7e:f1:8e:79:f6:b3:55:47:54:91:
                    e9:62:c2:d3:74:51:2e:be:8e:b0:48:4a:02:84:b4:
                    5a:87:e2:e3:cb:16:2a:4e:cb:8d:15:21:a1:3d:8a:
                    c8:00:c5:5b:64:ca:a7:69:ce:59:56:4b:12:a4:53:
                    05:c9:39:85:ab:1c:72:96:29:e3:0d:43:7f:72:17:
                    57:8e:60:d9:ba:60:0f:07:49:71:8f:0b:da:41:8b:
                    a9:57:57:20:52:ec:22:63:ee:56:bf:f6:d7:f4:bb:
                    91:25:2b:f9:54:27:3a:66:c4:a5:47:9f:1f:df:a5:
                    8a:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:CB:4D:E0:F9:C3:15:B6:9C:6A:BA:02:1A:73:56:41:67:8E:2D:DC
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/1ctN4PnDFbacaroCGnNWQWeOLdw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.220.0/22

    Signature Algorithm: sha256WithRSAEncryption
         27:a3:d2:58:f2:13:4b:45:61:66:f5:6d:18:f2:d5:96:62:0d:
         a2:fc:52:13:60:9c:67:24:20:43:d1:3f:fc:bf:14:53:8c:dc:
         ac:32:20:62:89:8c:52:bc:6e:c0:90:e5:c9:dc:ea:62:9e:a4:
         76:1c:51:8f:8d:62:5f:5a:2b:33:a9:1e:64:7f:af:e4:6c:3d:
         aa:da:4f:d4:90:37:36:26:a4:c2:21:a8:7d:35:00:9b:e9:95:
         38:53:94:71:80:c8:4d:a5:df:5b:0b:b7:1b:69:c6:a4:cb:e0:
         c0:01:bf:4b:4a:ac:85:8b:b2:af:cb:10:0e:39:6d:01:fb:04:
         38:37:ea:69:ba:87:c4:95:c4:d3:2f:53:88:80:60:18:e6:9c:
         90:82:0c:17:a0:97:14:17:04:71:c0:64:40:67:32:d9:a9:1f:
         f5:f6:80:78:ab:f5:b8:95:05:e4:8e:d5:af:29:c8:d8:17:7c:
         b8:99:93:c9:8b:9d:59:35:ad:f8:61:bd:35:7f:08:45:ec:18:
         3d:8b:07:28:d7:b4:00:f1:b5:9b:a8:c9:6e:93:7b:a2:88:3d:
         dc:e2:d2:30:65:bc:35:84:aa:bd:55:86:97:20:0c:a8:9e:e5:
         ed:dd:1d:b1:b5:c7:0b:f2:79:4e:c6:01:2d:c5:00:00:15:bc:
         dc:17:b7:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:59 2024 by rpki-client on console-ams.rpki-client.org