Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
File:                     Q9b4maPvBDwwELK9rjm_FPSfeJE.roa (raw, json)
Hash identifier:          GM8PC79FHPVPvPFyQ2gt7Jguby/KSwsswoARPaLpEEQ=
Subject key identifier:   43:D6:F8:99:A3:EF:04:3C:30:10:B2:BD:AE:39:BF:14:F4:9F:78:91
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       018C
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
Signing time:             Sat 31 Aug 2024 01:29:14 +0000
ROA not before:           Sat 31 Aug 2024 01:29:14 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        133.238.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 396 (0x18c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Aug 31 01:29:14 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=43D6F899A3EF043C3010B2BDAE39BF14F49F7891
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6c:49:3e:ba:a9:5b:ce:59:12:1a:a3:e2:17:
                    8d:4f:10:5d:82:ff:81:3d:2d:73:c1:b3:c5:c0:ff:
                    bc:42:d8:53:e4:3d:24:8b:f2:37:3b:19:da:b2:32:
                    48:c9:54:98:57:65:99:31:9d:c9:b0:9a:bd:bd:93:
                    45:63:38:18:7c:a7:ac:94:03:27:63:c7:23:f2:c7:
                    2a:fc:ec:64:f0:d8:70:c2:59:e8:c0:da:d0:50:31:
                    12:d3:5a:4b:4c:04:f2:1d:ad:db:b4:83:3e:56:31:
                    ee:bd:23:8e:18:9b:60:a0:eb:3f:dc:84:0a:83:8b:
                    a1:c2:24:e4:e5:9d:2d:c4:9c:ad:6b:6b:76:76:4c:
                    04:64:3b:2c:fa:d6:4a:f1:91:dc:f1:81:58:be:2b:
                    f5:7c:28:00:00:39:07:cb:26:7a:2e:71:91:83:65:
                    6a:a0:f6:83:e7:bb:98:38:f9:af:06:c9:ca:e7:89:
                    9b:5e:d7:49:4d:08:18:60:b4:1b:a9:a8:85:54:e3:
                    c6:f3:dc:1e:24:90:39:cc:ce:9b:d8:09:ac:a2:cd:
                    e2:2a:2f:c3:60:37:11:00:68:e9:4f:e9:83:c1:f7:
                    e5:74:62:74:32:99:82:1c:2f:47:6d:7f:ca:e7:77:
                    a4:c6:0d:0c:39:15:80:dd:2f:bb:50:b5:99:17:e9:
                    8b:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:D6:F8:99:A3:EF:04:3C:30:10:B2:BD:AE:39:BF:14:F4:9F:78:91
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Q9b4maPvBDwwELK9rjm_FPSfeJE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.238.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1a:3e:fc:d1:71:d6:4f:89:af:e8:52:dc:aa:75:74:94:44:a9:
         e8:a9:41:79:54:ad:b0:a2:7b:4b:64:a7:82:5d:16:8d:52:90:
         76:50:71:54:b0:d5:f6:5d:48:ab:ba:f4:6c:19:0a:f6:20:b3:
         92:40:92:b2:de:d0:59:d9:20:87:b4:82:3a:eb:cc:a4:6f:bd:
         d4:d3:80:77:bb:75:47:48:4f:0a:bd:9a:88:83:a9:66:36:91:
         49:f2:bd:aa:1b:8d:ac:65:3e:29:29:34:d1:58:17:dc:c9:f6:
         b6:52:92:5b:58:cb:37:ff:00:b1:d6:67:d5:6a:d0:25:55:5a:
         05:0c:34:b1:8c:52:0c:41:02:33:0d:d2:d1:95:9d:70:cd:74:
         3f:ea:67:cd:da:89:88:cf:05:26:6b:88:bd:ed:e5:f8:01:2d:
         17:fb:ff:cd:35:14:7a:f8:80:71:66:76:36:61:d8:32:ba:98:
         1c:a0:90:aa:e0:ee:2a:a3:4b:e7:01:2a:39:f2:de:2a:84:f3:
         4b:a7:96:d8:23:e1:7e:46:da:bb:cd:e6:34:c5:46:59:97:a8:
         d0:b3:f8:f9:6a:5d:af:a6:4b:7d:f2:bd:01:b7:25:94:c8:ac:
         8e:53:b4:e1:41:c5:1b:64:7c:28:c8:91:85:f8:44:6c:40:fa:
         3d:8f:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org