Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/sXKYnxzxkWh3Kq6_2Z4RRDTd94E.roa
File:                     sXKYnxzxkWh3Kq6_2Z4RRDTd94E.roa (raw, json)
Hash identifier:          SnmZnihQGv3oG+V4PIwfJQLOrrmw6r7IMKtT00rOjWw=
Subject key identifier:   B1:72:98:9F:1C:F1:91:68:77:2A:AE:BF:D9:9E:11:44:34:DD:F7:81
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C9
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sXKYnxzxkWh3Kq6_2Z4RRDTd94E.roa
Signing time:             Tue 01 Aug 2023 01:30:37 +0000
ROA not before:           Tue 01 Aug 2023 01:30:37 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 201 (0xc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:37 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=B172989F1CF19168772AAEBFD99E114434DDF781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:55:ce:5a:67:0b:70:8e:ee:5f:ab:10:41:d8:
                    b1:4e:38:97:26:9b:32:1b:25:fb:c3:a7:1f:a4:e8:
                    d2:11:e5:40:8c:ff:34:44:dd:70:43:b1:4e:94:3c:
                    08:98:4c:90:6b:eb:08:67:28:8e:b4:cb:ee:0c:b7:
                    f8:2c:8a:90:0a:2f:9c:0f:01:1a:e9:67:3e:33:15:
                    a7:1d:0b:5d:37:10:c9:fe:82:3b:5a:d3:fd:5a:36:
                    0b:16:14:b2:5c:66:dc:b7:1c:e0:51:30:dc:94:22:
                    f0:51:33:18:75:d1:fd:f3:35:a8:b9:97:2b:ca:3c:
                    c8:ba:3d:8d:e6:8a:1b:d4:be:d5:19:8b:8a:ed:7a:
                    fe:d3:c4:5b:95:87:e3:b2:bd:23:fa:ce:2f:ca:9f:
                    a8:91:fc:99:7c:13:08:66:5e:8a:58:e1:76:df:19:
                    34:8d:d5:87:ea:24:dd:22:4d:a0:c6:e2:2b:66:69:
                    3d:e3:3f:d1:a6:1e:63:bd:00:eb:b0:7c:0a:eb:34:
                    dc:18:ed:ab:c5:95:0b:87:c7:b3:37:aa:59:52:5e:
                    32:19:c1:c8:c5:9b:d0:78:d9:07:e2:1b:ac:fb:26:
                    96:0e:f4:af:cf:d2:d3:7f:97:ce:86:7e:a1:ec:15:
                    5a:e4:69:20:6f:d0:42:03:eb:42:4f:b8:6b:eb:d6:
                    e6:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:72:98:9F:1C:F1:91:68:77:2A:AE:BF:D9:9E:11:44:34:DD:F7:81
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/sXKYnxzxkWh3Kq6_2Z4RRDTd94E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6e:3e:42:aa:0c:c7:8e:c7:89:ef:ad:79:61:ac:05:09:53:68:
         4a:48:59:e5:5f:c2:3b:13:9d:9f:7f:df:92:9b:69:33:e9:cf:
         a1:47:6a:df:75:0d:96:de:9e:d5:c9:1f:19:77:00:a4:65:59:
         10:31:4f:a0:d0:74:9a:fa:12:13:72:a4:0e:d9:b9:27:b3:92:
         00:47:7f:db:11:a0:44:83:4a:42:74:45:ae:71:1d:1e:31:fe:
         f0:b8:2f:7c:44:8a:9e:fe:34:54:f0:92:90:c1:c3:46:a2:24:
         a6:c5:78:04:d8:19:ef:2a:5b:8b:9b:7e:a2:7b:44:5c:bf:10:
         9e:73:2d:4c:81:cd:d4:1e:fc:b3:23:50:00:59:f7:6b:f5:75:
         59:fa:55:fb:06:ab:20:0d:4f:46:b7:55:8b:36:67:3a:cc:b4:
         07:d0:1e:e5:af:54:44:cb:70:7c:55:b3:c9:0b:11:3c:69:2e:
         38:e7:6b:65:5a:d9:2a:65:dd:27:f6:5d:ae:c7:b7:54:fd:c0:
         e1:9b:72:01:f4:5a:6c:fc:4c:10:de:5d:b4:d9:d8:bf:80:82:
         16:c2:27:17:a9:ae:16:ed:c2:66:94:f9:b5:fb:9c:3c:9a:27:
         e9:09:cf:a2:95:a7:d1:a0:7b:a6:b1:ec:c4:1f:09:cf:28:b6:
         91:01:0e:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org