Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/OfOTIi-dH_bXNQu4wBVDczH5cVo.roa
File:                     OfOTIi-dH_bXNQu4wBVDczH5cVo.roa (raw, json)
Hash identifier:          pmMFPPiS2HRkNHmRAFne80dM4xFjd5rIsaNYFBSmVSY=
Subject key identifier:   39:F3:93:22:2F:9D:1F:F6:D7:35:0B:B8:C0:15:43:73:31:F9:71:5A
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       5E
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/OfOTIi-dH_bXNQu4wBVDczH5cVo.roa
Signing time:             Fri 31 May 2024 01:28:10 +0000
ROA not before:           Fri 31 May 2024 01:28:10 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     17675
IP address blocks:        122.200.36.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May 31 01:28:10 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=39F393222F9D1FF6D7350BB8C015437331F9715A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:a6:2d:e1:80:77:c8:86:43:70:cb:24:c7:05:
                    cb:12:f0:bb:90:e0:a7:c1:15:a9:db:cb:46:67:db:
                    1e:26:16:98:5e:91:c4:0e:c3:0d:d3:2e:5c:75:fc:
                    44:b2:6b:ca:1f:98:15:35:1d:f2:56:02:11:21:6c:
                    8c:33:5c:9e:4b:eb:c2:69:3e:7a:30:e5:02:34:67:
                    1d:53:43:3b:0f:6e:14:61:a5:d0:1b:d6:f3:e3:f7:
                    6e:9e:6c:6f:19:29:7a:5d:ca:98:39:d6:27:23:4f:
                    59:27:32:b2:fc:ec:82:1f:02:fa:80:b5:0c:98:99:
                    d8:92:3f:c3:e9:58:61:78:8b:61:bd:db:a9:12:1c:
                    59:55:d5:be:b1:d2:64:0d:50:3d:9f:3e:ea:96:75:
                    f9:36:d1:f2:d6:ea:3a:82:7c:1e:60:2c:71:c9:d9:
                    5f:26:a7:6a:1e:03:26:6b:a7:6b:26:b2:3d:ba:b4:
                    4e:09:8f:dd:58:ed:07:26:51:5b:f3:53:e4:8d:3d:
                    5f:0f:ef:1d:40:93:95:e2:78:c1:25:a3:80:7f:e8:
                    82:71:72:4a:13:39:80:5b:87:cd:ae:fa:8f:1a:04:
                    82:84:0a:d3:9b:31:2a:95:0a:11:36:10:f7:f7:a0:
                    6d:12:a6:9c:aa:42:dc:57:55:91:5d:b0:60:35:e4:
                    3e:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:F3:93:22:2F:9D:1F:F6:D7:35:0B:B8:C0:15:43:73:31:F9:71:5A
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/OfOTIi-dH_bXNQu4wBVDczH5cVo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.36.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:99:a4:f9:dc:c9:f7:ef:c7:23:66:34:e7:6f:11:9c:40:1e:
         cf:c3:f3:04:d9:30:aa:d2:0c:2c:95:07:12:da:7b:86:4b:7e:
         94:5b:fc:bf:7a:ab:0f:35:f8:63:17:76:b4:6a:d6:58:05:e5:
         cc:e1:74:d5:62:bb:bb:54:f2:32:c0:4a:6b:20:83:94:ef:a6:
         30:62:92:69:c8:a6:ea:90:0a:4b:5c:2c:2e:0d:3e:cd:b7:f9:
         c7:a2:db:e1:fd:c1:3d:ee:62:43:3a:a7:7b:02:6b:02:03:d8:
         72:44:6c:4c:08:19:41:3d:b7:41:79:57:07:67:de:c5:f1:91:
         27:55:15:35:ea:f4:63:5d:b2:42:9b:78:b4:5f:fe:2c:67:ea:
         dc:9b:fa:c6:02:21:b7:39:17:2e:0a:93:9d:7b:49:a3:4a:80:
         55:b9:6b:82:59:0e:18:73:bc:e2:0e:3e:55:ad:37:d5:a8:8f:
         fd:87:15:87:c8:e6:b7:3f:c3:0b:37:fa:e2:0c:4b:40:9d:c3:
         2e:cd:8a:64:22:67:7f:c0:00:ba:c4:80:ae:21:c0:bf:1b:9c:
         4b:6a:f9:88:4a:eb:56:34:2f:3a:ba:4c:1f:6b:07:7e:22:e9:
         f6:d6:38:b5:24:69:21:48:7c:ad:65:45:50:e8:04:9c:83:0c:
         22:4a:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org