Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/VHek4iaUbyfZRN9AzshHWOvXcY8.roa
File:                     VHek4iaUbyfZRN9AzshHWOvXcY8.roa (raw, json)
Hash identifier:          L2/LpeXvDgSifGDQ/2ec/234az76kyz8U/9HCyWTgnI=
Subject key identifier:   54:77:A4:E2:26:94:6F:27:D9:44:DF:40:CE:C8:47:58:EB:D7:71:8F
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       5D
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/VHek4iaUbyfZRN9AzshHWOvXcY8.roa
Signing time:             Thu 29 Feb 2024 01:31:39 +0000
ROA not before:           Thu 29 Feb 2024 01:31:39 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        202.52.16.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 93 (0x5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:39 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=5477A4E226946F27D944DF40CEC84758EBD7718F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:7e:28:ec:40:54:fd:a5:f1:63:a9:ba:f2:25:
                    b2:65:87:bb:40:4b:19:6f:26:7b:15:f4:bb:ea:2d:
                    03:ee:ea:70:03:fd:4a:88:c7:54:0e:74:07:87:ef:
                    a3:c7:26:99:42:4c:d4:9d:17:76:79:90:df:be:bb:
                    5a:8b:82:ae:46:12:c0:00:06:c0:45:ec:97:6b:04:
                    1d:09:1f:68:77:6d:01:78:e7:97:9b:0c:c5:03:4f:
                    23:db:37:86:07:23:26:f4:b4:aa:b8:9d:42:83:27:
                    bd:fc:8c:30:9e:a1:e2:4a:76:b0:fc:d5:eb:e9:7a:
                    b2:dc:03:56:69:fe:ca:6f:11:b3:51:e5:1d:f3:f9:
                    3d:ca:d8:8b:21:74:03:18:60:00:34:42:78:3a:52:
                    da:2d:b1:79:4d:66:14:d6:9a:0d:1e:2a:c6:b7:de:
                    28:ed:ff:42:0a:e5:e1:40:95:92:b2:42:36:7f:cf:
                    42:10:a1:6b:36:78:8f:18:6e:d2:4f:fc:96:f8:f7:
                    73:66:e1:25:99:24:74:16:1e:fb:ed:ab:2a:f3:ae:
                    b1:a1:58:00:b3:cc:c6:57:a8:b5:40:a8:12:34:73:
                    a6:6e:ce:65:cc:ff:57:41:4b:58:e6:07:8d:34:6b:
                    a7:63:cb:54:2a:f8:35:12:a2:a1:48:2b:df:d7:d1:
                    ca:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:77:A4:E2:26:94:6F:27:D9:44:DF:40:CE:C8:47:58:EB:D7:71:8F
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/VHek4iaUbyfZRN9AzshHWOvXcY8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.52.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:10:fc:24:c8:85:85:5a:26:1b:ee:ca:0a:0a:00:af:d3:e8:
         e1:7c:08:b9:de:da:92:86:65:8e:36:70:f7:7d:d0:26:20:80:
         01:f1:09:03:8b:90:ba:77:b7:5f:0d:0e:5f:81:35:61:b6:07:
         a5:94:47:c4:e1:55:fd:33:e7:8b:94:b7:a9:76:56:3e:74:31:
         15:b7:8d:46:89:fb:43:bf:e6:11:58:a2:17:bc:72:43:2f:b0:
         87:93:d4:7a:d5:24:e3:67:e9:06:34:54:47:d9:9a:ad:06:82:
         c1:b0:e8:44:6b:0a:05:5e:b5:ce:4f:d7:1a:6e:ca:dc:4a:da:
         f5:ee:02:48:03:0d:0a:42:4d:ee:3c:4e:bd:9e:14:b8:ac:79:
         d5:e1:ea:4b:19:23:71:47:5d:f0:fa:06:2f:52:ee:45:ea:6e:
         e1:bf:24:80:c1:f7:84:fd:17:70:bf:86:19:20:64:d5:a4:87:
         e7:ff:ff:9f:39:06:96:30:bb:e1:cb:15:f4:da:43:10:ad:cb:
         5d:33:e4:53:54:48:67:80:6d:ab:00:b1:93:2d:8c:93:ec:cc:
         49:8e:ba:23:3c:4d:d8:8b:d1:cd:c0:9c:2d:e1:2e:49:6b:cf:
         25:22:2f:b9:44:92:86:2e:07:97:1e:94:b5:4a:1b:a7:3b:4b:
         20:50:c0:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org