Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Elt7xsbWY7jmpGSUoiYrZaVWwZM.roa
File:                     Elt7xsbWY7jmpGSUoiYrZaVWwZM.roa (raw, json)
Hash identifier:          rmc4N/nFlx+b5ygx1agtOtUt2BKVVKRmiqCF7Qr70qE=
Subject key identifier:   12:5B:7B:C6:C6:D6:63:B8:E6:A4:64:94:A2:26:2B:65:A5:56:C1:93
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       3A
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Elt7xsbWY7jmpGSUoiYrZaVWwZM.roa
Signing time:             Fri 01 Dec 2023 08:41:43 +0000
ROA not before:           Fri 01 Dec 2023 08:41:43 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131925
IP address blocks:        160.237.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Dec  1 08:41:43 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=125B7BC6C6D663B8E6A46494A2262B65A556C193
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:c5:38:c1:81:c3:e4:c8:4c:63:67:03:e6:3c:
                    de:f8:f7:de:53:d2:19:d4:7b:88:02:bf:5b:64:42:
                    91:eb:bb:56:41:38:38:7a:8e:f8:68:d2:7e:6d:86:
                    84:5b:af:39:c0:0f:81:2b:cf:50:bd:0e:4b:01:fb:
                    2e:d0:73:7c:d7:09:e8:7c:da:83:7c:b3:5f:cc:54:
                    b6:19:9c:34:b0:5b:8f:a6:cf:95:cb:04:ee:49:3f:
                    4e:44:84:fd:e9:ec:83:18:55:b5:b9:0e:1d:06:f5:
                    50:81:7a:12:58:56:6d:1a:11:a6:27:fd:ee:82:63:
                    d3:d7:cf:f2:d5:ea:28:cb:b2:06:e9:b5:fa:b3:f4:
                    24:44:12:15:64:81:a8:50:25:d4:ec:71:d6:e6:70:
                    7a:eb:ca:c8:aa:44:37:1c:7c:70:f8:93:9d:af:b7:
                    ea:cb:a2:e7:9f:48:48:ba:56:c8:03:da:26:a3:6c:
                    71:2d:86:5e:70:42:c9:17:f1:e0:dd:10:db:b6:d5:
                    76:d8:4c:b7:54:19:1d:e1:81:3f:24:7e:3c:a2:cd:
                    37:16:e2:5a:e3:18:c3:38:44:a6:d0:c6:9e:7e:95:
                    2b:29:36:11:38:06:f7:48:6e:ed:08:ea:68:d1:68:
                    42:f2:b0:4a:91:bc:f6:9c:73:51:ce:ce:fa:df:8e:
                    98:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:5B:7B:C6:C6:D6:63:B8:E6:A4:64:94:A2:26:2B:65:A5:56:C1:93
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Elt7xsbWY7jmpGSUoiYrZaVWwZM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7a:28:9c:d6:7a:47:99:64:bc:7e:56:3c:c3:0b:76:c7:9a:59:
         be:43:7f:56:17:f7:b3:9c:f7:71:ea:57:e8:d9:6e:78:82:a2:
         20:97:2f:5a:15:62:89:7b:dc:e8:35:e7:4e:04:5c:4a:3d:f6:
         54:11:b9:b3:a6:14:3a:b1:c5:af:3a:97:ae:25:33:b9:d0:25:
         87:ae:87:01:41:3d:ee:c3:5f:81:ab:4b:17:12:21:63:a1:9b:
         92:71:16:bf:a0:41:8a:74:b3:54:b3:80:1c:ac:10:1c:23:96:
         60:40:3a:bf:ec:fb:4a:e0:24:71:b4:6f:90:ce:3e:a7:98:b4:
         6d:33:f6:ca:5b:8d:1f:e8:45:67:e8:85:3b:f0:8d:7b:a2:6d:
         e8:8f:1c:8f:39:31:2e:c0:fd:32:7e:76:2d:93:57:ed:7e:b4:
         48:c7:8c:c9:16:46:f6:e6:57:55:d9:66:ff:5d:24:b4:a1:bf:
         1d:9c:e1:99:77:f7:6b:9b:69:a4:b4:d4:b4:99:0a:ee:ab:52:
         84:42:1f:d4:1f:06:1b:df:69:ed:5a:fd:2b:df:a8:58:79:f0:
         92:b2:be:f1:b2:81:02:f1:56:3d:32:ae:dc:1d:9a:f2:49:3e:
         a5:5c:97:8c:a3:56:d9:ff:6a:52:1c:1b:f0:7d:34:d5:1f:e2:
         36:2a:36:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org