Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/YhJsOfb045qeK5AUzcIBUosuJB4.roa
File:                     YhJsOfb045qeK5AUzcIBUosuJB4.roa (raw, json)
Hash identifier:          i4ply1xX0KakzwDTntDH5DCCutMFTgUZBTxkeHb68u0=
Subject key identifier:   62:12:6C:39:F6:F4:E3:9A:9E:2B:90:14:CD:C2:01:52:8B:2E:24:1E
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       4C
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/YhJsOfb045qeK5AUzcIBUosuJB4.roa
Signing time:             Thu 31 Oct 2024 01:29:59 +0000
ROA not before:           Thu 31 Oct 2024 01:29:59 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131925
IP address blocks:        160.237.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Oct 31 01:29:59 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=62126C39F6F4E39A9E2B9014CDC201528B2E241E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:33:f5:09:bd:d0:bf:e4:be:15:43:05:6c:28:
                    89:b8:5b:57:ca:12:f9:7b:17:9f:2f:f1:86:a0:89:
                    39:b2:20:d0:4b:ee:f0:aa:93:ca:d7:de:d6:59:13:
                    1c:f7:84:57:d0:aa:07:96:f2:41:11:e0:10:09:c4:
                    75:05:51:8d:be:e3:89:a2:e4:75:17:8e:e2:f3:93:
                    e2:2b:e1:55:92:07:bb:58:31:4a:a5:ab:70:20:53:
                    38:fa:56:26:d8:2b:7a:40:81:c4:6e:ed:5d:09:33:
                    46:ac:75:31:0e:02:51:1d:71:e7:13:a8:cf:77:ef:
                    7d:64:f9:1c:38:84:64:15:32:df:83:1e:a4:ff:20:
                    bb:82:90:49:7b:c6:38:42:56:40:57:fc:0b:d0:ab:
                    42:c4:db:c9:74:c0:09:cf:36:7e:66:66:98:7f:8c:
                    71:58:4e:09:8b:93:16:e3:91:06:1c:5b:90:73:86:
                    d3:cb:f0:e4:ca:46:9c:98:14:4e:88:45:db:ce:15:
                    68:d6:5d:88:96:bd:4a:3f:e8:98:b3:4c:a3:ba:4c:
                    86:7d:6c:d0:ed:b7:c7:1b:77:ec:56:a0:8d:5d:ff:
                    59:68:bb:63:55:9c:4d:e3:87:a5:fe:8a:8f:fe:4d:
                    a3:8d:8f:2d:8b:21:9d:ba:0c:cc:3e:20:80:c5:32:
                    9c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:12:6C:39:F6:F4:E3:9A:9E:2B:90:14:CD:C2:01:52:8B:2E:24:1E
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/YhJsOfb045qeK5AUzcIBUosuJB4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         50:24:50:85:83:9d:ac:c1:1e:c0:d6:c9:34:3b:5b:3a:d5:6b:
         be:4e:dc:eb:62:1b:18:45:21:17:5f:66:4f:14:ea:3a:4f:34:
         33:7c:e5:91:dc:a5:20:77:52:1b:7c:35:2e:83:6f:f4:e0:0b:
         b4:4e:39:50:eb:79:62:2a:db:08:83:72:b6:04:f2:d3:4c:7d:
         91:9f:35:d5:49:5c:93:70:ea:fd:bb:90:b1:f6:35:af:57:52:
         f6:02:17:1c:37:c8:ae:c1:50:c7:f4:69:0c:4b:13:35:fd:72:
         1f:d8:45:8d:ff:e5:4a:bf:f6:e3:f3:74:6d:a3:d7:23:83:bf:
         d8:29:df:47:8c:bd:c2:21:7a:5c:91:f1:68:22:20:49:ae:89:
         44:0d:27:2c:e4:47:c9:c3:bb:58:30:1b:37:18:7a:d4:78:63:
         d5:e3:da:02:f6:6b:d7:65:0f:48:44:1a:be:f3:55:cc:67:3a:
         30:d8:f4:4a:fb:6a:88:46:13:2d:50:7f:80:be:d0:5b:89:ef:
         cd:96:75:77:a1:2b:5c:ab:62:3e:ba:03:89:50:be:96:4e:00:
         9a:bb:98:63:00:cf:ea:34:50:70:35:dc:70:40:01:ad:fb:94:
         6d:7a:43:2d:58:ad:dc:39:3d:1c:14:ec:0e:62:8b:48:15:a2:
         94:fa:75:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org