Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/HT91EF9PnJp79x2ZV4EItjHz0B0.roa
File:                     HT91EF9PnJp79x2ZV4EItjHz0B0.roa (raw, json)
Hash identifier:          +k/AKgtmENDP8GB4pfyCuu9lNcvi8yakna+2D/RYmLg=
Subject key identifier:   1D:3F:75:10:5F:4F:9C:9A:7B:F7:1D:99:57:81:08:B6:31:F3:D0:1D
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       1A
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/HT91EF9PnJp79x2ZV4EItjHz0B0.roa
Signing time:             Fri 11 Aug 2023 07:39:15 +0000
ROA not before:           Fri 11 Aug 2023 07:39:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9615
IP address blocks:        202.129.176.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 11 07:39:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1D3F75105F4F9C9A7BF71D99578108B631F3D01D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:c4:f8:2d:1f:a9:ad:04:e8:cd:1b:6a:60:
                    62:85:6c:67:88:22:25:bb:40:43:d5:82:ac:f0:94:
                    8d:73:ca:36:77:b2:a3:62:12:8e:d9:c9:85:df:3a:
                    8e:96:51:9c:2d:a1:97:5d:cf:cf:2f:9b:e9:3e:49:
                    c0:b6:96:1f:80:78:68:27:97:18:b9:2f:4b:f2:e5:
                    b2:73:df:45:31:00:14:f7:a1:a4:ed:d6:27:db:7f:
                    5c:02:9f:ab:7e:28:82:5d:6f:d8:f6:90:75:99:20:
                    bd:42:b0:5b:83:0e:62:ed:61:ed:3f:27:0c:4f:2d:
                    8c:47:e8:dc:81:17:a4:42:0b:26:e2:51:f9:d9:c6:
                    a3:66:e3:e4:8a:a8:80:7c:9c:41:a0:a4:a3:f4:a3:
                    92:fc:23:ee:cf:89:7a:3f:14:f6:6f:c4:28:59:41:
                    9d:f7:1e:1f:80:5c:c6:0e:f7:67:e1:da:1d:5a:31:
                    a1:35:07:c0:4a:a0:94:ec:e4:2c:7d:f2:07:48:9a:
                    ae:f7:18:0d:72:e7:66:d4:57:69:9f:5a:0f:bd:41:
                    63:30:3a:50:71:9c:e5:66:e3:42:77:a5:c6:04:08:
                    c0:cf:e0:89:fa:af:b4:c8:cf:e4:69:2f:17:22:0b:
                    22:e3:45:49:1c:3d:58:7b:6c:99:d2:24:1d:5a:f9:
                    0d:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:3F:75:10:5F:4F:9C:9A:7B:F7:1D:99:57:81:08:B6:31:F3:D0:1D
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/HT91EF9PnJp79x2ZV4EItjHz0B0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.129.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         6b:4e:b2:04:42:f9:69:48:2b:c5:d7:e5:c1:5a:63:87:9f:63:
         ff:9a:5e:76:88:e6:d0:70:3b:17:33:00:c5:a8:d8:ef:03:df:
         b6:96:9e:77:2d:95:0b:e9:81:28:13:3f:47:a4:70:18:0f:59:
         59:e9:a8:97:97:75:ab:02:9b:df:da:7e:c8:e8:0c:29:4b:c2:
         40:ec:20:6f:9b:06:42:a4:db:af:6d:bf:2b:f2:94:9c:a6:bd:
         8b:36:fe:c2:c0:72:41:2d:95:43:8d:4f:ca:80:0b:cd:f1:ed:
         56:0c:dc:09:c5:a2:89:b3:2a:a6:94:95:71:95:94:9c:cc:ca:
         dd:c5:41:a2:7f:95:ed:71:c3:e6:06:e7:3c:8e:50:07:7f:97:
         02:e3:eb:8e:6d:05:c2:7c:2f:ad:ed:6a:e2:03:ab:44:46:e2:
         e5:8a:39:69:ff:24:92:02:b4:f6:ec:bb:cb:af:d3:18:86:b4:
         b4:cd:e9:6f:70:ab:fe:6c:ed:07:5f:2a:7b:b9:39:1a:07:13:
         7b:27:07:d0:2a:5a:04:c3:28:cf:be:78:aa:94:13:30:57:a2:
         f4:4b:b2:a9:a6:51:0c:f1:d4:35:d8:e1:fb:dd:12:89:b2:51:
         44:51:e5:53:8a:09:81:7e:d1:fc:5b:90:e8:c0:c9:48:4d:da:
         56:c2:ba:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:56 2024 by rpki-client on console-ams.rpki-client.org