Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
File:                     l1q_6qZD46S1NREOpcZYrmh4q14.roa (raw, json)
Hash identifier:          Z/MgumaJfC2R6kIMImdk7KxI/3h8MIAQaZYf3p7u2hg=
Subject key identifier:   97:5A:BF:EA:A6:43:E3:A4:B5:35:11:0E:A5:C6:58:AE:68:78:AB:5E
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       2A
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
Signing time:             Fri 02 Feb 2024 07:37:03 +0000
ROA not before:           Fri 02 Feb 2024 07:37:03 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9619
IP address blocks:        211.125.138.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Feb  2 07:37:03 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=975ABFEAA643E3A4B535110EA5C658AE6878AB5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:9c:a3:39:00:dc:be:60:28:08:04:77:01:b1:
                    47:59:e2:93:da:b1:ff:63:e8:1b:3a:f5:c7:8f:dd:
                    17:2f:75:7b:fb:62:af:19:71:f1:63:47:8e:a1:cc:
                    15:dd:f4:8b:80:e4:46:e5:a1:7b:e7:b1:b8:8b:7f:
                    6b:f4:be:6b:6b:60:68:69:28:53:8d:fa:e3:f0:9a:
                    9b:e1:f2:da:9d:a3:91:db:64:00:8b:c7:34:e2:37:
                    65:59:14:ae:dc:81:bf:b0:73:b0:fe:fa:ab:eb:84:
                    1d:54:78:7a:04:90:46:f7:e3:6a:98:bd:e3:0d:3b:
                    63:31:ee:4a:b6:a0:0d:88:30:ee:85:9f:90:0b:53:
                    3b:df:20:28:f4:42:92:ee:4b:f4:25:92:73:59:7f:
                    a1:ef:3d:e5:e4:1b:8e:c6:29:7d:ca:2c:13:79:0b:
                    c9:92:df:4c:06:db:40:a2:d6:fe:41:68:ab:e0:be:
                    05:72:7e:73:71:d2:4e:6e:63:99:e8:f9:31:f2:5b:
                    60:6d:10:d3:f8:c7:a7:a3:35:d5:11:a0:02:36:f7:
                    d5:3f:e5:19:87:75:0e:e0:c1:3d:2f:c6:38:0b:a1:
                    10:42:fe:c3:4a:f0:05:59:c9:38:f3:d6:c4:2a:2a:
                    b2:32:bd:26:3f:47:57:eb:88:3a:cb:09:41:dd:23:
                    7f:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5A:BF:EA:A6:43:E3:A4:B5:35:11:0E:A5:C6:58:AE:68:78:AB:5E
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/l1q_6qZD46S1NREOpcZYrmh4q14.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.138.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:76:4e:19:64:45:ee:5a:e2:30:69:d5:d4:dc:48:0d:2d:a5:
         d0:d1:19:4c:fc:5b:4d:c0:4c:8e:81:14:31:25:b8:0f:ef:71:
         ba:9f:2a:df:6d:ba:71:a1:2b:b9:e4:83:0d:21:cf:81:79:83:
         36:bb:35:24:c6:09:91:ea:85:14:19:77:37:a8:33:5a:56:4b:
         1d:0d:fd:c7:09:42:80:d9:f1:c2:cf:ef:0a:20:15:47:38:c8:
         1d:7c:8e:7b:95:15:36:99:05:b4:67:ac:9f:e2:da:af:2e:8a:
         e5:79:be:b6:22:fe:6b:cb:c6:ca:c5:cf:12:5a:e2:5a:a0:39:
         46:77:5e:12:75:3e:79:92:56:5e:d5:28:87:b9:26:9b:77:ed:
         34:d7:ed:2e:e7:f9:67:fe:85:17:ef:89:4e:10:99:68:46:01:
         45:4c:46:7c:a9:ed:74:d4:5b:18:33:ca:61:b2:e0:f8:21:f8:
         56:db:1b:83:10:af:97:98:a7:fb:6c:13:e7:be:e8:65:59:20:
         29:da:ee:9a:18:6a:ee:e2:70:c5:39:8e:43:a3:d8:17:a5:a3:
         3b:23:2c:b0:91:8a:42:60:03:38:df:f2:47:c0:69:42:db:7c:
         a3:39:0d:9e:35:fa:80:f1:7b:d5:2c:f9:a9:60:3c:ea:10:cc:
         a4:8c:09:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:16 2024 by rpki-client on console-ams.rpki-client.org