Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/n_A3vDu66XOqaMWgcj_UK5TU9Hs.roa
File:                     n_A3vDu66XOqaMWgcj_UK5TU9Hs.roa (raw, json)
Hash identifier:          vw6YVqnuy2MPp5RFjH1MgtUzoeldOw7SMqmZmncz5R8=
Subject key identifier:   9F:F0:37:BC:3B:BA:E9:73:AA:68:C5:A0:72:3F:D4:2B:94:D4:F4:7B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       013E
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/n_A3vDu66XOqaMWgcj_UK5TU9Hs.roa
Signing time:             Mon 01 Jan 2024 01:30:10 +0000
ROA not before:           Mon 01 Jan 2024 01:30:10 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        220.156.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 318 (0x13e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jan  1 01:30:10 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=9FF037BC3BBAE973AA68C5A0723FD42B94D4F47B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:6a:da:67:64:c3:0f:04:07:d3:fd:bb:17:07:
                    ee:63:bc:94:2e:1c:7f:bf:13:e4:ba:9e:cc:5e:d7:
                    ff:7b:ea:32:8a:37:e2:0b:94:ad:a3:b0:75:17:9f:
                    b6:f7:80:34:d1:70:28:a4:d4:84:a3:9b:dd:77:55:
                    87:07:c1:21:6d:c4:3f:ea:92:19:74:6b:2d:33:38:
                    61:79:96:37:9e:34:fb:c5:d0:a6:c7:0a:4e:d5:96:
                    1c:f2:51:b3:e6:4a:a1:16:1c:7e:65:d5:27:55:3b:
                    53:94:18:0f:16:dd:b3:82:05:01:af:81:9f:ac:7a:
                    fb:8b:a3:fe:e4:3e:3c:44:9a:55:8b:4b:fc:87:5a:
                    e2:a6:4b:87:fc:12:83:ec:fd:9d:7d:06:e5:d5:99:
                    3f:d6:47:49:be:d2:a5:3c:e7:bb:ce:38:ac:1c:69:
                    ab:5c:8b:df:9b:0d:4d:b0:2f:f2:d5:64:55:5d:70:
                    ec:d8:8d:1a:ad:80:cd:33:4b:b7:4f:a9:3f:92:8d:
                    ae:4d:96:e1:6f:e2:e1:f8:0a:1a:63:14:47:3e:7d:
                    62:dd:a4:07:e5:90:fa:f0:00:3e:84:d8:6f:57:33:
                    ff:b5:b7:43:c3:40:6c:29:e8:93:e6:f5:4a:93:63:
                    7c:f0:2b:c6:ac:a6:0e:a1:ab:41:12:81:cc:24:67:
                    3b:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F0:37:BC:3B:BA:E9:73:AA:68:C5:A0:72:3F:D4:2B:94:D4:F4:7B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/n_A3vDu66XOqaMWgcj_UK5TU9Hs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         54:39:34:7d:af:10:da:9a:cd:14:3d:68:5f:47:44:61:ac:d0:
         39:a6:ca:e0:a1:47:ac:50:01:51:7e:36:93:8b:b5:0f:e4:f1:
         87:c0:2b:06:c7:37:5f:56:07:fe:30:a2:ce:6f:59:af:29:37:
         6a:35:31:d1:70:55:1a:f3:2f:30:68:22:c1:d4:ec:ec:ee:f6:
         a3:19:73:ed:b4:1e:71:3d:37:71:c9:4a:0c:7e:f1:00:b7:9e:
         17:04:60:39:6e:f9:b0:92:55:25:c0:c7:4a:4b:93:b2:94:a4:
         9e:14:ce:54:a7:ce:e6:d4:28:34:ba:8d:5e:97:e1:85:9b:31:
         bb:d0:3c:a1:b8:50:e2:26:64:22:99:c8:b9:c6:b8:a4:91:ac:
         98:a7:8e:64:bb:44:50:37:0f:da:de:05:f5:3d:01:6f:ea:d3:
         14:28:7e:70:45:a6:d8:cf:98:e0:57:e9:8f:29:97:8d:8e:2f:
         f4:f4:ab:07:5e:0f:a1:39:1e:6a:1a:59:6d:c5:07:f8:18:ec:
         ac:bb:3c:8e:eb:25:28:2d:fa:23:c2:3b:9c:c5:99:64:f1:b9:
         aa:8b:97:43:e2:11:51:e1:9b:5a:79:fc:29:9b:92:6f:40:02:
         52:11:7c:a4:99:8a:c5:aa:ab:71:f3:d4:45:7e:7d:d5:8b:ce:
         63:53:97:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org