Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/APBz9k5LPegokbzUeL3K-vvnfTc.roa
File:                     APBz9k5LPegokbzUeL3K-vvnfTc.roa (raw, json)
Hash identifier:          +11d5c19t4ExO7H61TrbpTs9lqNe+j/7yDPlp/sriUo=
Subject key identifier:   00:F0:73:F6:4E:4B:3D:E8:28:91:BC:D4:78:BD:CA:FA:FB:E7:7D:37
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       1D
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/APBz9k5LPegokbzUeL3K-vvnfTc.roa
Signing time:             Sun 04 Aug 2024 03:06:36 +0000
ROA not before:           Sun 04 Aug 2024 03:06:36 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17682
IP address blocks:        223.29.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug  4 03:06:36 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=00F073F64E4B3DE82891BCD478BDCAFAFBE77D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:c2:a7:21:74:7e:1d:64:85:38:43:63:69:e1:
                    ef:00:d2:9d:e5:f1:c5:7b:c4:67:d5:14:71:69:c3:
                    41:a2:3b:e9:85:3f:d2:dc:c0:0c:3f:96:eb:5e:1b:
                    e9:71:9e:4a:c9:44:4e:dc:79:86:a0:e9:a0:7c:d3:
                    9a:71:06:ee:ec:50:98:9a:b3:b5:62:ee:dc:20:a8:
                    02:c7:46:78:de:32:21:50:f5:9b:cc:2c:fb:86:cc:
                    0d:f0:30:f0:f1:e8:2a:02:cd:f0:23:7d:a0:8d:3a:
                    24:53:50:f0:95:2a:be:60:1c:df:c1:f4:ae:cf:79:
                    e2:7f:58:44:ed:5c:b9:3f:99:73:51:4d:d6:88:50:
                    a8:67:0d:a7:3a:2a:47:b4:ed:60:49:de:4d:61:6e:
                    d2:56:d1:1f:52:bf:d2:fa:d6:ec:86:9d:a8:7b:f1:
                    47:b3:4c:21:89:b5:2a:64:0a:80:87:60:d2:f9:92:
                    55:c6:67:54:81:64:c4:97:6b:dc:37:a7:96:b3:b5:
                    3d:7b:f1:17:d4:66:19:fb:a4:15:bc:04:08:8e:44:
                    3e:17:0a:77:70:a6:0c:2b:bb:dc:bf:c2:89:f4:13:
                    94:3b:00:a5:fd:65:9b:2f:02:68:03:2c:8f:3a:18:
                    ca:00:f0:c1:76:a1:35:e3:3c:5c:16:53:d9:35:98:
                    6a:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:F0:73:F6:4E:4B:3D:E8:28:91:BC:D4:78:BD:CA:FA:FB:E7:7D:37
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/APBz9k5LPegokbzUeL3K-vvnfTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  223.29.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         44:6f:f6:02:25:98:a9:b3:46:cd:a4:be:4f:5c:4a:87:3b:c4:
         7a:f6:b7:54:40:5f:ce:ce:e2:40:a8:13:bb:14:49:fa:a2:d4:
         b7:55:24:f8:9d:56:64:6b:40:2b:bd:02:24:fb:1d:f8:44:19:
         94:39:7d:21:65:7c:a2:07:f4:cd:37:a0:72:10:30:f8:f8:ef:
         91:82:8b:7c:e7:e3:cf:28:a8:09:80:60:45:99:fc:32:1b:21:
         bd:dd:18:ec:cf:1e:93:6d:b4:f6:f7:91:96:07:10:22:2b:5d:
         4f:97:89:1f:8c:32:7d:bf:7a:09:87:0e:37:71:65:6c:f8:d9:
         c8:6d:c0:64:0e:0f:15:da:9b:16:9c:1d:39:9e:9f:1f:61:57:
         63:36:42:46:6a:a6:cf:d9:7f:5c:13:7d:06:ee:55:73:63:b8:
         89:74:f4:61:ab:86:13:f6:e4:99:83:82:6f:30:53:29:9a:0e:
         85:2e:5d:49:84:b8:c9:01:4f:4d:4c:8d:0b:3e:65:42:f4:38:
         79:b3:08:f8:bd:17:15:3c:7e:d7:3e:2a:8f:b9:c6:cf:2d:03:
         c8:32:0d:e5:f6:cd:18:98:b2:65:7d:e2:a5:79:f7:60:ca:43:
         a1:96:b8:9f:01:8d:80:c4:35:12:44:04:19:c7:e7:cb:68:80:
         52:79:13:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:47 2024 by rpki-client on console-ams.rpki-client.org