Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/UXtAAsT0WaujqljwA6sHq2Ev2iY.roa
File:                     UXtAAsT0WaujqljwA6sHq2Ev2iY.roa (raw, json)
Hash identifier:          b+R7NyDCDLhZ/Rk82vAhoiANsHFNBnLtEkKKWJhP/2k=
Subject key identifier:   51:7B:40:02:C4:F4:59:AB:A3:AA:58:F0:03:AB:07:AB:61:2F:DA:26
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       53
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/UXtAAsT0WaujqljwA6sHq2Ev2iY.roa
Signing time:             Sun 31 Mar 2024 01:30:04 +0000
ROA not before:           Sun 31 Mar 2024 01:30:04 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        211.125.144.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 29 Jun 2024 06:42:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:04 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=517B4002C4F459ABA3AA58F003AB07AB612FDA26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c5:56:c7:b0:3a:e5:e3:f3:bd:fd:8a:ca:8f:
                    a9:d9:4f:f4:ee:9c:7d:16:08:45:6d:71:f7:e7:21:
                    8f:1c:64:ac:32:73:88:c9:cc:26:c4:80:36:bb:29:
                    06:88:00:7a:24:7d:82:3a:f0:6a:de:46:19:09:2c:
                    15:ef:f3:45:ee:5e:6e:7e:5e:db:27:04:b3:5f:28:
                    1a:43:6e:06:02:58:7e:d6:7b:ad:95:d0:3c:9a:7f:
                    90:c7:be:5d:33:12:a0:03:54:60:f1:27:23:e2:c5:
                    ea:ac:8c:6a:97:03:1c:6d:46:ae:e6:51:02:21:66:
                    ca:b3:ef:6c:e7:e4:f1:93:66:01:27:cc:6e:40:c2:
                    aa:6c:81:d2:ad:62:94:27:4e:a8:de:3a:f4:db:01:
                    c6:c5:f1:47:67:05:02:04:8e:ad:4d:3d:5f:d4:a8:
                    f2:f6:44:19:5b:f0:4f:6e:b6:28:6a:08:bf:18:3e:
                    0e:63:f4:9f:e9:24:7d:01:08:af:25:0a:ae:a4:99:
                    a6:1f:f4:0b:b4:15:a6:cb:33:18:14:73:23:03:38:
                    85:18:a6:44:4b:4e:84:92:d8:62:6b:05:a6:92:6c:
                    87:da:7b:90:79:f9:78:7a:a8:7d:3a:73:84:89:46:
                    b4:82:fe:92:27:6b:7f:aa:da:c2:13:70:61:6d:91:
                    f3:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:7B:40:02:C4:F4:59:AB:A3:AA:58:F0:03:AB:07:AB:61:2F:DA:26
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/UXtAAsT0WaujqljwA6sHq2Ev2iY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         96:8c:8e:1b:80:50:91:5f:f1:41:b4:35:95:66:0f:51:88:35:
         98:17:ac:64:8d:2a:d8:11:e9:5c:6a:d4:c3:77:22:41:1a:bd:
         d3:15:5e:da:77:80:0b:d3:88:55:99:fa:c4:dc:ef:05:5d:e6:
         8c:83:23:ce:49:64:87:bb:00:34:b3:86:2c:82:9e:46:98:e5:
         32:87:0f:0f:9d:bf:dc:4d:71:af:31:95:3b:50:13:39:cb:4b:
         8c:b1:17:a3:2d:10:f9:f9:f1:2d:f3:8a:22:9f:04:21:13:81:
         d4:b1:0a:43:54:2a:66:15:fa:f3:cd:1f:a6:ac:e9:1f:f6:e3:
         d1:fc:16:f2:af:95:9b:7d:df:16:e4:f3:df:d5:72:cb:a4:8f:
         55:24:fd:6c:a6:5b:23:2f:f3:ff:84:56:0a:cb:00:8b:1a:74:
         5e:ff:b5:95:ff:c4:8a:17:e7:3f:e4:fd:ca:2c:9d:69:82:4d:
         8a:70:84:ab:c7:0d:b2:4d:11:d6:2c:90:41:10:09:d3:73:5f:
         8f:23:5c:6d:e0:2c:b2:2b:61:6d:23:2f:b2:04:48:61:a7:e0:
         a2:04:f9:f9:80:d8:72:a1:36:af:87:5f:89:f8:b6:d3:c7:81:
         1f:65:51:6f:a2:64:52:d8:a2:c4:99:cc:5b:8a:1d:fd:5b:b6:
         87:8c:76:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 22 14:22:08 2024 by rpki-client on console-ams.rpki-client.org