Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/jU1qP4pOQHlRt6n3GFtgcizbFPk.roa
File:                     jU1qP4pOQHlRt6n3GFtgcizbFPk.roa (raw, json)
Hash identifier:          sctywdc/Jgsra2tqpHJe3P+qoyhmd9yz8RedNvYCo34=
Subject key identifier:   8D:4D:6A:3F:8A:4E:40:79:51:B7:A9:F7:18:5B:60:72:2C:DB:14:F9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       DF
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/jU1qP4pOQHlRt6n3GFtgcizbFPk.roa
Signing time:             Sun 01 Oct 2023 01:28:53 +0000
ROA not before:           Sun 01 Oct 2023 01:28:53 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        202.7.106.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 223 (0xdf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:53 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8D4D6A3F8A4E407951B7A9F7185B60722CDB14F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:48:81:9d:81:7e:dc:0d:d1:0d:1b:18:17:72:
                    92:a0:e9:d9:06:91:0c:29:16:25:96:cd:ca:b2:03:
                    0a:78:3b:0d:68:92:88:55:e2:6b:1d:b0:02:17:97:
                    1b:99:37:ad:b0:87:1f:61:90:ec:5f:e3:7e:2f:0e:
                    72:ce:99:f3:2e:22:dc:41:91:5b:b8:dc:eb:07:e5:
                    2c:a4:7d:f2:c9:ac:ff:ef:d9:b1:10:fc:f4:1a:41:
                    96:cb:b5:28:72:67:b6:58:f6:00:ec:16:4d:49:a3:
                    f7:94:8e:36:27:1b:30:8f:04:09:fe:d0:d3:b4:94:
                    8e:1b:e8:86:7f:ab:4f:f3:89:21:f7:47:3d:f1:96:
                    b2:15:14:55:a5:1a:cc:89:c0:9f:4e:02:fa:36:c3:
                    e3:bc:ae:31:d0:fa:03:a7:49:d6:23:f3:96:48:19:
                    28:c0:cc:7e:f5:d4:9a:df:99:00:99:1d:7b:b4:1f:
                    35:0d:23:9b:d3:27:9f:b8:7a:5e:44:17:27:1c:b2:
                    20:5b:7d:f7:37:ca:47:80:31:a7:39:d2:c5:c7:0b:
                    a5:a8:b4:28:43:13:0c:74:85:b8:0c:00:fd:c3:17:
                    20:ad:a7:8a:23:96:a3:a8:cb:37:10:b6:71:ef:d1:
                    fe:e9:48:bc:73:c1:1b:af:c1:03:25:70:c4:52:1e:
                    c0:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:4D:6A:3F:8A:4E:40:79:51:B7:A9:F7:18:5B:60:72:2C:DB:14:F9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/jU1qP4pOQHlRt6n3GFtgcizbFPk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.106.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b5:8c:6b:40:19:14:a7:90:29:64:8c:7b:56:45:9a:a6:49:14:
         25:13:14:8e:ba:54:59:40:75:1c:0a:5a:15:1e:a2:6e:66:57:
         24:ef:24:69:b7:1d:5b:94:c8:48:39:fe:e1:6c:65:85:27:13:
         35:68:33:e0:2c:f3:f9:f9:61:69:bf:77:0c:76:bd:65:31:ff:
         0b:63:a1:82:32:1c:16:ee:49:be:7c:9b:f1:2d:53:60:5a:4a:
         45:08:c1:4f:68:8b:b8:7d:7c:bb:e6:22:a3:7f:a1:95:49:df:
         ea:2b:87:8e:1a:dd:16:b0:7f:a5:ff:59:28:88:7f:14:71:3f:
         19:a3:58:64:0f:31:91:ba:7e:1c:1a:3d:96:4d:35:85:1a:8b:
         94:cf:c4:d0:e9:f4:30:27:2e:b1:52:bf:19:dd:61:59:1e:9a:
         a2:20:7b:ea:3e:f2:d1:c4:20:fa:36:e9:26:9b:5e:2f:18:14:
         b6:d0:08:fd:21:a8:97:01:5b:12:da:17:2d:9e:2a:2e:bc:5f:
         37:2a:6e:32:80:e8:fd:8e:a7:21:a6:c3:91:d7:e0:53:f1:be:
         63:08:0e:0f:3b:92:2d:5f:f8:72:e9:22:d2:f6:74:fd:29:47:
         e9:ef:d3:b5:b3:ac:79:15:32:f9:79:d9:7d:4a:ef:19:6e:2c:
         da:c2:d7:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org