Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/VDWZzlgQB-a_Q1ot2Dklv5Kwt1M.roa
File:                     VDWZzlgQB-a_Q1ot2Dklv5Kwt1M.roa (raw, json)
Hash identifier:          Z7i2xoh0ZnFnpmREMTs2irt7cjtDiMBFv2q1dkp5G44=
Subject key identifier:   54:35:99:CE:58:10:07:E6:BF:43:5A:2D:D8:39:25:BF:92:B0:B7:53
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       06
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/VDWZzlgQB-a_Q1ot2Dklv5Kwt1M.roa
Signing time:             Mon 21 Oct 2024 01:58:59 +0000
ROA not before:           Mon 21 Oct 2024 01:58:58 +0000
ROA not after:            Tue 21 Oct 2025 01:23:02 +0000
asID:                     9354
IP address blocks:        219.118.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct 21 01:58:58 2024 GMT
            Not After : Oct 21 01:23:02 2025 GMT
        Subject: CN=543599CE581007E6BF435A2DD83925BF92B0B753
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:ce:aa:23:ba:23:53:1b:d9:c4:d8:4e:75:0f:
                    64:87:1c:91:b4:fd:ca:44:21:31:7d:1d:33:b2:af:
                    18:9a:9b:5c:df:74:26:69:32:a9:23:cc:47:92:12:
                    3f:f3:08:a4:dd:f3:13:38:4e:bc:3d:16:af:77:30:
                    45:f7:b5:72:7d:a2:06:a2:b6:3f:49:96:9c:a5:50:
                    23:c5:d9:63:69:e2:48:d5:c9:04:94:77:33:c9:01:
                    1d:bb:68:f7:0f:b6:55:39:78:c3:16:24:a4:31:96:
                    49:b5:2b:7a:fd:59:91:fc:45:fb:51:76:1e:a2:72:
                    92:ff:e5:dc:05:16:e5:62:6c:a4:20:e3:b8:08:0c:
                    05:0b:20:41:43:69:66:ca:82:67:fb:ec:c2:4e:e9:
                    9f:26:33:36:1d:df:ab:8f:d3:0e:7b:a3:73:0a:19:
                    42:2c:5e:0d:7f:79:01:8f:e8:11:8e:17:86:79:ad:
                    e0:55:fa:9e:d2:43:75:c6:3e:05:21:26:e6:84:b3:
                    d7:63:55:79:e3:dc:bf:bf:bf:d3:bd:84:90:44:fe:
                    60:02:c3:2b:b5:41:a1:22:81:de:dc:2b:0b:87:5f:
                    cf:0e:3f:23:71:b4:2e:e2:34:b9:cd:e3:10:a9:be:
                    81:bf:c4:36:40:d8:cb:f8:03:cc:ae:5b:8b:05:24:
                    ab:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:35:99:CE:58:10:07:E6:BF:43:5A:2D:D8:39:25:BF:92:B0:B7:53
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/VDWZzlgQB-a_Q1ot2Dklv5Kwt1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.118.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a3:9d:0d:ff:85:a8:87:5f:1c:c2:bc:a5:f1:be:0b:86:c6:39:
         2a:0f:4c:57:34:53:9a:bd:ab:f7:4b:20:ee:98:fb:19:30:de:
         bf:2e:c8:bb:0f:fe:c5:f5:8b:6d:bf:cd:6a:05:a0:76:b9:25:
         a4:35:45:20:59:40:82:ef:a4:bd:94:66:c3:ea:3a:ae:1b:ee:
         c4:8c:b7:7e:b9:0b:d3:13:5b:26:1d:92:d4:fb:cf:95:c0:c5:
         aa:d3:1d:4f:6b:4f:87:00:89:bc:00:bc:09:91:9d:6b:24:ed:
         4c:25:02:f8:d1:10:79:b1:04:73:bf:5e:60:cb:5e:44:28:dd:
         ed:2d:e5:99:8b:24:b7:bf:5b:8b:a1:44:3f:77:6b:72:d5:ab:
         04:6e:09:e1:bc:ba:0f:c5:da:29:cb:31:3f:dd:0a:05:f0:a9:
         8e:59:25:4a:a5:38:42:53:10:4b:c1:e6:9d:09:e5:3e:94:be:
         f4:74:08:c7:e6:80:a5:db:b7:3d:ba:b4:b9:ff:7a:f0:53:1b:
         8d:f2:30:fa:44:30:a8:d9:40:f2:73:4f:6f:3f:65:5a:39:7a:
         85:59:c2:bd:6b:63:91:43:fe:50:af:24:30:4d:f2:d7:07:86:
         7d:1b:6d:57:b5:55:ba:a5:84:5b:8e:8c:f7:32:13:e6:2c:2f:
         41:f0:68:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:21 2024 by rpki-client on console-ams.rpki-client.org