Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
File:                     HULAEhTEaPKAAqiwCPVJLRXA4c4.roa (raw, json)
Hash identifier:          3MawhDuyFtU+QZk+8/cvyWSFt4HpWdrcXZf0icZpJKg=
Subject key identifier:   1D:42:C0:12:14:C4:68:F2:80:02:A8:B0:08:F5:49:2D:15:C0:E1:CE
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       2B
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
Signing time:             Thu 31 Oct 2024 01:31:35 +0000
ROA not before:           Thu 31 Oct 2024 01:31:35 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7527
IP address blocks:        210.171.228.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Oct 31 01:31:35 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=1D42C01214C468F28002A8B008F5492D15C0E1CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:d6:54:d8:5d:f5:82:96:cf:fb:bc:67:6a:1e:
                    76:77:70:05:8c:90:fc:8a:50:17:9b:38:dc:3d:01:
                    50:b2:ae:b8:c9:20:56:98:36:6c:c4:5a:8d:a4:56:
                    e7:4c:4e:c0:e8:b7:25:8f:08:63:4c:95:b4:96:17:
                    d4:be:d6:5d:41:39:5e:1d:8e:39:1a:1f:c6:76:08:
                    9d:35:17:74:d1:96:2d:c4:7b:fa:9a:9b:89:eb:0e:
                    8b:89:d4:16:00:e0:7c:70:ac:b3:70:08:41:95:9f:
                    9e:be:3d:74:5c:51:56:d5:e3:ef:e2:45:fd:b8:fc:
                    d0:d6:78:74:b9:b0:06:f9:cd:dd:18:a0:37:e8:7e:
                    08:c2:38:09:78:4e:ea:b1:a2:ff:08:86:e9:0d:47:
                    49:ca:cb:a6:cf:f4:97:80:1d:f0:8a:2d:00:c0:ce:
                    39:6b:94:09:a7:2c:af:64:cb:f7:00:7b:de:b4:b4:
                    c2:e4:fd:d3:d8:1f:35:11:64:e1:50:a4:c5:34:b0:
                    2b:ee:8e:2b:80:42:19:71:ec:c6:bc:c5:7e:b7:dc:
                    f3:ec:02:55:d1:92:61:dc:4a:18:97:1d:43:ec:e6:
                    54:9f:e4:c4:75:75:18:4b:9b:ea:c5:df:db:90:5a:
                    e3:18:e2:e9:57:1c:b6:6d:04:cc:f7:1b:b0:8c:21:
                    a7:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:42:C0:12:14:C4:68:F2:80:02:A8:B0:08:F5:49:2D:15:C0:E1:CE
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/HULAEhTEaPKAAqiwCPVJLRXA4c4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.228.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8a:6c:5b:fe:01:2f:86:fa:ce:1b:d7:fc:79:c7:58:c3:ac:d7:
         46:e6:36:04:44:b3:6b:b0:ef:68:f7:32:11:86:39:13:d3:b5:
         39:79:d2:2b:27:53:47:5d:b2:9d:89:1d:2a:b9:8f:67:15:72:
         ce:e4:80:76:76:98:95:4c:ff:ae:36:24:84:2c:87:78:a0:83:
         9d:4b:a3:82:da:0a:30:cc:04:a0:b2:0e:d8:af:f0:76:88:30:
         7d:d0:dd:61:63:4f:46:bd:d0:3a:5e:5a:b8:b7:4d:ae:63:ac:
         65:03:fb:53:0e:ce:89:a1:d1:8e:73:58:36:58:1b:82:fe:b7:
         50:7a:89:34:67:78:b3:41:a6:f0:26:f5:7c:95:2b:ef:91:fc:
         24:ce:be:36:a3:e3:74:06:39:67:a4:23:d3:4c:c0:61:b1:5b:
         31:3f:15:9f:1a:b7:3d:fb:e0:ed:e2:93:10:c8:37:ae:ef:cb:
         74:e9:d7:a7:f7:2f:3b:bc:a5:50:75:61:45:d0:67:82:c2:d6:
         08:2a:61:ec:14:74:75:69:46:b8:5f:08:bd:81:35:43:9c:51:
         91:79:3e:00:67:89:b1:07:08:81:a5:c0:6c:be:18:f3:0b:0a:
         64:42:e9:1b:4c:50:f6:84:44:93:66:ff:a1:d6:3e:26:86:a6:
         95:0d:fe:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org