Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/rAwieR0sU9ZZwDERoTOCI9x5-Js.roa
File:                     rAwieR0sU9ZZwDERoTOCI9x5-Js.roa (raw, json)
Hash identifier:          gaOKStxd0ujfhGj/S8gTor5EbtZ1SBNIlPT2AVT1uyE=
Subject key identifier:   AC:0C:22:79:1D:2C:53:D6:59:C0:31:11:A1:33:82:23:DC:79:F8:9B
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       27
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/rAwieR0sU9ZZwDERoTOCI9x5-Js.roa
Signing time:             Sat 31 Aug 2024 01:31:26 +0000
ROA not before:           Sat 31 Aug 2024 01:31:26 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     55376
IP address blocks:        202.6.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Aug 31 01:31:26 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=AC0C22791D2C53D659C03111A1338223DC79F89B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:73:82:82:69:87:94:6e:2e:63:56:bf:d5:e4:
                    19:00:5f:ab:7c:b2:e8:e2:b8:1f:9a:be:99:d1:6a:
                    56:d7:64:49:22:c0:fe:74:b6:e0:28:05:85:f8:22:
                    e6:1b:29:fe:f6:05:72:99:f3:83:be:2f:d1:e4:81:
                    ab:e2:2b:54:ef:95:b2:86:3a:49:b6:b3:19:f6:34:
                    7f:a4:36:e4:86:3d:96:77:af:9a:d1:aa:31:4f:71:
                    9b:48:2d:39:71:1e:8e:e3:56:d8:73:5a:8d:c1:98:
                    1d:3f:1d:91:e9:b9:7c:fe:da:b5:a9:53:0e:43:20:
                    91:e8:45:ed:c2:9e:3d:aa:c6:4c:24:d3:cd:65:09:
                    ba:8c:62:0a:e5:97:58:6d:da:e9:db:85:88:bd:05:
                    01:f2:0b:5a:20:68:9f:86:77:7c:6a:24:0e:81:e9:
                    ea:07:25:bc:a9:6a:0f:0c:ab:ef:d0:2a:52:8c:ef:
                    86:f1:a7:95:d1:04:90:47:63:3b:63:82:ec:b7:5a:
                    5f:5e:ec:46:f7:71:56:30:78:c1:4b:40:3e:b3:44:
                    37:09:4b:55:09:6c:95:30:c4:32:a6:f4:91:0b:a8:
                    b6:e3:96:72:09:ab:57:e0:e2:0c:5d:2a:a4:72:a0:
                    59:9b:62:6b:8d:d5:c1:52:0d:9d:1d:8d:1a:8d:d8:
                    e0:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:0C:22:79:1D:2C:53:D6:59:C0:31:11:A1:33:82:23:DC:79:F8:9B
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/rAwieR0sU9ZZwDERoTOCI9x5-Js.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:59:76:c4:29:78:09:89:9e:7e:4b:89:6b:c2:cb:2b:ed:98:
         98:2a:25:ce:a3:3f:bf:31:c8:2f:68:23:a2:3f:e1:1e:f6:9c:
         9b:3b:35:df:aa:f6:be:48:22:74:58:95:fc:45:fd:77:0f:ad:
         ed:26:c1:f3:4d:e8:5d:b3:8b:db:be:9d:30:de:5c:9a:e6:1b:
         e8:f7:b8:69:ff:0d:aa:b4:b2:77:a1:32:4e:71:6d:72:6b:36:
         5e:d5:15:38:0e:70:c9:cd:8e:44:c0:88:b2:9f:1b:10:e7:d0:
         5c:5b:e8:13:62:d3:bc:f2:92:31:8d:df:90:95:d5:26:17:71:
         69:7d:31:72:ae:0c:06:17:de:ff:04:1b:a7:0c:0e:ca:cf:0d:
         a1:fc:2d:fa:20:43:03:8a:19:93:d5:45:da:91:b3:d2:dd:f0:
         23:ce:e1:f9:0c:d5:44:9c:a2:00:55:e4:25:93:19:ef:59:c4:
         0f:14:f0:47:d5:0b:ba:a1:db:93:14:93:53:a6:89:5d:f3:ca:
         c6:da:f0:96:72:a0:59:b8:30:6d:56:de:39:26:4d:14:c7:ee:
         85:ac:e1:cf:7a:ee:b2:76:08:f4:da:f3:15:94:97:e1:3e:e2:
         15:cc:fc:f0:05:8e:ba:ff:ad:49:15:9c:cd:89:80:fc:e3:74:
         c1:98:27:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org