Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
File:                     dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa (raw, json)
Hash identifier:          Nbi2yg9rankbYrMZJl1qjynW+zUeZuwItlavG+vq/Bc=
Subject key identifier:   74:83:E6:CE:B1:F1:00:88:14:B9:A8:85:AB:3C:FB:54:42:A5:48:C9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0173
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
Signing time:             Wed 31 Jul 2024 01:34:17 +0000
ROA not before:           Wed 31 Jul 2024 01:34:17 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        210.149.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 371 (0x173)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:17 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=7483E6CEB1F1008814B9A885AB3CFB5442A548C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:f9:26:f7:05:8e:85:42:85:ca:31:88:9e:16:
                    b5:97:dd:1b:11:b8:80:65:f6:79:ee:c1:07:2d:6e:
                    41:d8:fc:21:03:25:61:4d:ac:c2:a2:ec:c5:a7:fe:
                    c8:a3:12:c1:1e:21:08:1e:a3:a7:d9:e1:47:4d:eb:
                    54:c3:dc:90:7e:86:f0:ea:0c:c1:c0:09:46:cf:8e:
                    1d:8c:9a:34:19:80:8b:0c:42:45:cd:a6:60:1e:18:
                    80:e5:c9:a5:ab:19:27:f6:fb:ed:12:eb:bc:da:27:
                    47:e7:9c:dc:15:6c:11:8d:97:e4:df:67:1c:86:be:
                    49:17:35:0f:fa:bb:fc:63:c4:66:f9:95:de:3c:a3:
                    f0:bd:0c:5a:88:ea:c6:e3:e1:02:51:97:28:9f:5a:
                    78:66:b5:5d:d7:f9:2d:24:6d:da:f9:7c:8c:f8:cd:
                    2a:d1:70:f4:68:40:6a:db:8c:bf:9a:5a:14:d4:c5:
                    84:94:0a:26:35:24:b4:ee:4b:aa:ad:99:c9:fe:9b:
                    53:6c:57:8d:5b:e5:44:12:56:29:03:f9:ea:87:35:
                    d7:02:ce:0d:79:2e:82:77:57:6e:4e:ec:12:cc:ad:
                    47:b7:7c:93:a1:cb:32:e8:24:62:58:0c:82:5d:35:
                    f2:26:fb:ff:fd:cf:23:a1:d5:ba:34:d0:d6:a6:1d:
                    b8:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:83:E6:CE:B1:F1:00:88:14:B9:A8:85:AB:3C:FB:54:42:A5:48:C9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/dIPmzrHxAIgUuaiFqzz7VEKlSMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.149.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         69:3f:82:69:cd:ef:22:d6:75:48:c7:44:32:7d:e3:8c:a3:ea:
         b6:ec:6e:43:18:d3:75:ab:68:97:26:c1:6e:b0:7f:a6:2c:e5:
         dc:9c:69:9a:7e:4a:d7:30:eb:46:53:ce:9c:ed:0c:3c:5d:55:
         ae:24:e8:b4:27:bd:54:1f:fb:87:f4:ae:f6:27:a1:e0:f4:9b:
         3d:7f:c0:74:f0:12:dd:13:ce:4a:1b:cd:10:86:09:68:c0:a8:
         79:87:fa:d4:1d:a1:4b:a0:d1:2f:8c:78:3d:02:e1:6f:83:45:
         5f:b7:40:7e:3c:04:52:1c:5e:d5:a9:4d:f6:60:09:2d:12:da:
         72:c8:e8:91:34:bc:bc:49:51:b0:5b:b6:0b:77:e3:05:cf:a0:
         d3:e0:1e:cb:69:7f:4c:f4:fc:7a:10:80:99:3d:95:53:e0:ea:
         f0:0a:c1:8d:12:8d:ef:60:3b:b6:e2:fe:7d:6a:f2:80:f7:57:
         17:b0:36:d9:84:6b:a8:21:0e:08:51:f7:69:b6:fe:8e:3e:f6:
         00:08:c6:cd:bb:6f:fe:40:04:c1:8c:0e:38:6f:37:74:a3:17:
         61:60:82:ff:d2:46:34:2a:ad:88:d6:df:10:df:e7:30:43:fd:
         18:ab:1e:8a:7e:d9:19:43:17:62:ba:73:34:dd:62:6d:72:75:
         28:fb:3d:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org