Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/nW9at5gBWcQD3fcbma6KjOQD4mo.roa
File:                     nW9at5gBWcQD3fcbma6KjOQD4mo.roa (raw, json)
Hash identifier:          tKjGZCoDRSCWihA87xtb41hJe+Ma2E8WsAdjTCxz2HM=
Subject key identifier:   9D:6F:5A:B7:98:01:59:C4:03:DD:F7:1B:99:AE:8A:8C:E4:03:E2:6A
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       06
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/nW9at5gBWcQD3fcbma6KjOQD4mo.roa
Signing time:             Tue 29 Aug 2023 00:46:40 +0000
ROA not before:           Tue 29 Aug 2023 00:46:40 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        218.40.88.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug 29 00:46:40 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=9D6F5AB7980159C403DDF71B99AE8A8CE403E26A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ee:40:fc:34:99:a7:b0:4b:7b:60:db:0c:a9:
                    26:c8:a2:db:ee:a6:2c:27:6b:71:9e:80:a3:b2:64:
                    bf:51:20:ee:48:18:47:0f:b4:7b:5c:23:ca:87:f2:
                    d1:75:f8:26:00:37:69:61:48:95:44:ff:a0:8f:d3:
                    80:ce:f4:79:21:ab:37:76:7f:4b:84:65:91:c0:60:
                    27:65:d1:66:f7:f0:51:7a:4a:87:0f:b2:9a:b9:fd:
                    e8:39:b9:68:e7:e5:3d:58:6a:b9:1f:fb:1b:5d:6d:
                    56:1e:de:71:6b:11:49:62:7f:db:8d:9e:76:22:cc:
                    35:d2:02:1e:74:86:74:a0:30:0b:18:08:da:17:50:
                    c7:9c:da:9f:42:c4:63:9b:6f:6a:31:8b:8b:1a:57:
                    a0:39:14:83:05:a2:cd:2f:71:97:f2:21:97:7e:45:
                    03:c2:d3:ab:76:1e:21:2f:30:9a:85:c0:85:86:2e:
                    e4:93:c2:90:98:7d:ec:f7:fd:de:b8:82:c9:6a:d7:
                    e1:47:c2:60:e1:46:02:99:8f:91:5d:c5:8a:29:5e:
                    5a:16:db:cc:c9:71:83:c9:81:0e:65:03:24:35:69:
                    0e:f3:d4:95:c4:50:34:e9:26:ad:86:bf:89:a3:8d:
                    47:08:3d:e9:7b:17:8e:11:db:f9:27:1c:d6:98:6d:
                    04:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:6F:5A:B7:98:01:59:C4:03:DD:F7:1B:99:AE:8A:8C:E4:03:E2:6A
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/nW9at5gBWcQD3fcbma6KjOQD4mo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.88.0/21

    Signature Algorithm: sha256WithRSAEncryption
         0d:f1:23:9f:6e:3f:50:85:45:28:f3:69:59:75:47:6b:78:4a:
         d8:9c:54:ec:b2:cc:9b:b7:3a:9e:0c:af:86:a5:43:67:e9:fa:
         ad:12:af:85:42:16:a3:f0:5d:b7:c8:14:1d:0b:ea:18:f6:b6:
         52:33:a0:b7:a1:ec:5d:1d:3c:88:67:95:d3:0c:0b:d3:9f:07:
         90:36:07:90:9e:eb:c0:3c:ef:5e:e2:4d:54:69:9b:5e:d2:27:
         22:ac:9b:66:01:8e:53:21:f9:01:ed:bb:5d:f5:33:76:57:80:
         c0:08:49:ae:82:56:11:d3:17:da:90:bc:c6:78:c8:cd:01:af:
         09:ac:6a:94:83:5b:47:4f:03:f4:75:96:70:8e:f7:26:67:a4:
         be:53:c8:d3:5e:b1:c8:1e:ed:ab:4e:d4:51:2f:60:7c:d5:92:
         20:59:d2:94:b0:92:84:3b:f5:80:14:79:7b:9e:d7:7f:40:d6:
         cc:58:a3:2f:49:c3:b3:78:45:51:fc:08:01:65:39:e1:73:12:
         07:fe:24:c9:c6:b7:95:99:63:a4:89:ec:92:df:87:02:ba:4d:
         1f:dc:7c:26:ee:f3:42:43:cc:36:ae:90:1b:33:1c:26:30:9b:
         b7:35:68:93:f5:45:0c:8b:57:ea:c4:6f:85:6a:30:96:59:c1:
         ea:f8:c4:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:16 2024 by rpki-client on console-fra.rpki-client.org