Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/PlXujQnIvaBVcgfdZUzMCXjJkDo.roa
File:                     PlXujQnIvaBVcgfdZUzMCXjJkDo.roa (raw, json)
Hash identifier:          aCxl5jvQ7JXLWmmFHmSbXTq8loJZ9FyWSuvvPH4W5oM=
Subject key identifier:   3E:55:EE:8D:09:C8:BD:A0:55:72:07:DD:65:4C:CC:09:78:C9:90:3A
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       2C
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/PlXujQnIvaBVcgfdZUzMCXjJkDo.roa
Signing time:             Thu 31 Oct 2024 01:31:36 +0000
ROA not before:           Thu 31 Oct 2024 01:31:36 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2516
IP address blocks:        106.72.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 17:05:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Oct 31 01:31:36 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=3E55EE8D09C8BDA0557207DD654CCC0978C9903A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a8:a7:01:88:72:60:b4:29:3c:41:c9:62:65:
                    61:e0:42:e0:40:04:dc:86:82:c8:24:52:57:92:28:
                    f4:6e:d7:fb:da:8b:03:59:a2:4e:ce:47:c8:ea:57:
                    d2:ba:42:d0:d8:0f:d3:99:47:ae:59:ef:58:66:04:
                    be:78:ec:58:70:cc:8b:d4:cb:3c:1f:d6:56:2c:ed:
                    d1:40:bb:37:ba:37:3c:a0:57:70:66:8c:35:6a:04:
                    31:12:25:11:1c:62:ec:0b:5c:24:10:91:c6:ce:f4:
                    5f:7d:a5:2e:99:01:59:89:15:04:f3:2b:3b:7b:c3:
                    93:b0:e6:2e:8e:5d:73:b1:bf:f1:f8:41:14:1e:85:
                    55:29:55:8f:b6:14:c3:5c:50:d2:4e:cb:82:46:24:
                    d0:d9:49:b1:89:e0:ca:51:77:7f:59:36:a0:cd:0a:
                    5c:e2:b1:9e:f1:b0:5b:9c:94:59:be:2f:dc:02:bd:
                    38:99:d6:5c:9c:96:45:3b:70:39:ff:c1:13:8c:aa:
                    45:58:4b:83:34:78:38:16:3a:f2:9c:d0:ae:ae:c3:
                    91:1f:bd:ba:0f:7e:c0:2f:ee:c5:f4:79:9d:67:0b:
                    5e:28:a4:27:bc:2d:c0:42:fe:1e:d8:1a:cc:e6:83:
                    db:0f:d3:a6:84:aa:e3:a9:6c:e4:97:15:4b:a7:e3:
                    29:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:55:EE:8D:09:C8:BD:A0:55:72:07:DD:65:4C:CC:09:78:C9:90:3A
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/PlXujQnIvaBVcgfdZUzMCXjJkDo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.72.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:80:1c:fa:c5:f2:0c:78:67:7b:aa:a1:97:b4:f9:ab:aa:ff:
         ba:99:2f:54:e9:0f:04:2e:ce:0a:75:15:bc:cb:ca:dc:76:08:
         9a:e1:64:9f:f4:86:c5:10:20:4c:76:ae:7b:bd:13:de:a9:0e:
         29:e1:65:ac:4c:81:09:99:ce:82:58:a3:69:b4:37:5d:49:5b:
         8b:08:58:29:43:05:26:aa:f9:0d:9c:f9:7e:ef:05:57:73:8c:
         9b:87:0d:03:03:cc:21:2e:b5:99:8d:18:9d:74:2e:4d:7d:05:
         be:82:59:d2:ea:b7:80:ef:83:3a:54:cf:31:d3:d4:05:a4:c0:
         d9:07:fd:18:0f:c6:56:55:77:52:52:e8:13:23:c6:c8:a2:1f:
         07:93:8d:11:02:20:ba:43:4a:6d:97:13:68:9d:0e:dc:2b:93:
         bb:d0:fb:05:bc:a8:4a:cf:27:04:9e:56:82:92:56:81:95:fe:
         61:c8:59:2c:2e:9f:5f:a7:7e:b9:80:f2:55:33:60:1a:ff:bc:
         ae:15:9f:3b:11:6f:40:43:b8:43:2e:17:b6:e4:0e:d3:8b:19:
         b6:66:17:e0:59:cb:56:ea:af:2e:82:34:53:7e:3f:2c:f3:5f:
         54:16:fa:0e:50:51:fb:11:a0:19:bb:7e:29:73:f5:3c:c7:b9:
         a5:27:3b:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 18:45:04 2024 by rpki-client on console-ams.rpki-client.org