Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
File:                     dvOiILgmWanBOBrG12gd3anbHt4.roa (raw, json)
Hash identifier:          Z7i9veI/tTD5IZfaxFAq1LFOtQd5OGzhjsotZHfCpnY=
Subject key identifier:   76:F3:A2:20:B8:26:59:A9:C1:38:1A:C6:D7:68:1D:DD:A9:DB:1E:DE
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       52
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
Signing time:             Sun 31 Mar 2024 01:30:04 +0000
ROA not before:           Sun 31 Mar 2024 01:30:04 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        202.91.144.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:04 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=76F3A220B82659A9C1381AC6D7681DDDA9DB1EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ff:3e:4e:f7:6b:bf:29:d4:b9:fa:8c:9e:7e:
                    e9:8a:c1:8c:e3:3d:e3:53:74:bb:0a:6e:00:50:1b:
                    a5:d2:82:34:26:12:24:ee:15:93:e0:66:42:89:2b:
                    89:a8:99:1b:99:ee:62:33:94:cc:df:03:66:92:fa:
                    d9:a5:38:86:85:00:9a:37:b9:57:a8:ae:29:5b:0b:
                    73:f8:5e:16:a3:23:55:a7:cb:94:7e:29:75:28:2d:
                    d7:e9:4f:2c:e1:64:16:cb:5b:76:29:19:17:81:76:
                    49:1f:9e:96:19:db:23:0c:7c:87:87:cf:09:e5:5f:
                    51:55:0f:f3:03:ae:50:88:40:98:65:78:7b:70:fb:
                    55:32:a2:ba:f1:3a:ed:bf:87:d8:46:2b:bd:7f:b6:
                    e2:58:8b:27:02:33:ce:3d:21:c8:23:49:aa:54:57:
                    22:eb:33:ba:07:e1:5b:84:29:59:55:93:1f:36:f1:
                    bd:a7:4b:57:f1:03:28:d4:83:6c:3d:65:18:1f:6e:
                    1d:52:20:41:80:aa:c1:4c:a4:e2:d6:00:08:bf:0f:
                    dc:51:c5:e4:62:bd:a1:81:9c:7a:30:bc:9b:cd:91:
                    68:44:7c:d4:7f:6d:ea:17:4c:e2:5b:24:0f:f6:7f:
                    51:1f:4d:e2:f8:07:39:69:d4:19:40:a2:c1:0d:f5:
                    71:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:F3:A2:20:B8:26:59:A9:C1:38:1A:C6:D7:68:1D:DD:A9:DB:1E:DE
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/dvOiILgmWanBOBrG12gd3anbHt4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.91.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         40:a7:60:b3:3f:7b:b2:c2:23:b0:ea:64:69:dd:60:f6:2a:52:
         c0:16:74:1d:e7:7b:d6:c4:f0:47:b5:3b:17:26:3c:b8:49:a4:
         c7:67:22:15:a5:44:5d:69:62:0e:25:b1:5e:d9:43:c7:c8:ba:
         85:57:ee:4a:f4:7e:91:3b:89:a2:b2:e3:0c:fc:5f:78:59:00:
         04:47:58:69:4c:c2:bb:f3:6d:90:5c:ec:be:d7:ce:08:b1:d5:
         96:03:b0:55:ff:74:c8:6d:99:17:1a:d4:0e:cc:0f:f0:c0:3a:
         51:1b:64:66:a0:f6:ab:c4:35:90:5d:31:0d:dc:3c:2c:a3:41:
         e6:3e:95:6d:09:82:f5:66:c6:26:76:0b:29:6f:eb:ef:5a:c5:
         0d:52:c4:db:74:50:ac:b0:28:65:d4:3a:5d:e7:31:30:fd:d2:
         aa:78:49:1b:63:de:d1:31:ab:60:06:8e:dd:4b:6f:34:b7:4d:
         0b:6f:cf:4c:d2:41:82:d2:c1:ab:f5:65:7a:86:32:d9:84:0b:
         7f:23:c8:2e:99:e7:6a:9b:29:bc:56:f1:27:95:03:66:70:bf:
         01:77:43:f2:39:e4:8f:07:97:66:6a:27:22:23:50:a1:69:b9:
         d3:63:55:94:b5:f9:ab:7a:ea:c4:c5:e3:1a:8e:eb:5f:c5:30:
         fc:95:f4:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:39 2024 by rpki-client on console-ams.rpki-client.org