Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/655/sRfQbCiLBJ8VYYbvfGpEQYGbmaI.roa
File:                     sRfQbCiLBJ8VYYbvfGpEQYGbmaI.roa (raw, json)
Hash identifier:          EG4qMFq96Z4R6xRhxL8VtSXqOiAYhbl+JZRbEXgnpFE=
Subject key identifier:   B1:17:D0:6C:28:8B:04:9F:15:61:86:EF:7C:6A:44:41:81:9B:99:A2
Certificate issuer:       /CN=59639EA27DED460F3C9B43216EFC51955F6289C9
Certificate serial:       05
Authority key identifier: 59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/sRfQbCiLBJ8VYYbvfGpEQYGbmaI.roa
Signing time:             Mon 15 Apr 2024 23:49:47 +0000
ROA not before:           Mon 15 Apr 2024 23:49:47 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7690
IP address blocks:        210.172.192.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59639EA27DED460F3C9B43216EFC51955F6289C9
        Validity
            Not Before: Apr 15 23:49:47 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B117D06C288B049F156186EF7C6A4441819B99A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:21:1d:d5:24:e3:60:dd:34:99:49:44:c9:ae:
                    94:6b:80:41:e1:48:08:6a:4b:f3:44:9a:b0:e1:cf:
                    ab:23:67:c9:c9:61:a3:d2:bb:d1:1b:52:41:ce:05:
                    90:64:d8:e9:c5:4b:b8:b4:22:7e:77:a6:ea:ef:e1:
                    34:5b:14:8f:db:d2:da:25:22:71:c5:1b:80:f5:0a:
                    62:9f:b3:f0:3d:16:2b:37:6e:71:b8:ac:ff:6b:6b:
                    71:0e:13:08:4f:cb:ce:d8:78:8e:2d:ae:24:eb:36:
                    ea:36:86:43:46:14:9d:3f:b9:eb:22:f4:78:4d:af:
                    6e:1c:ee:03:72:11:22:57:96:20:37:59:db:4d:ca:
                    9f:7f:ce:a0:6c:fa:12:3c:a2:e3:9e:47:08:62:37:
                    cc:07:fb:11:8c:ec:87:23:fa:8c:56:56:e2:63:10:
                    98:89:20:36:8d:ac:6e:05:4e:6b:a2:5f:2e:7b:75:
                    96:95:9e:ec:91:98:d1:7f:2d:08:32:f1:b1:80:1f:
                    1d:5a:bf:c1:40:ea:96:25:c0:63:d9:35:6b:57:0f:
                    ee:2a:0d:87:95:e8:c3:29:1c:d8:01:7b:c5:9d:c7:
                    67:fd:77:cc:ce:7a:2f:1b:e2:97:b2:1c:40:11:36:
                    f0:e5:08:82:74:d9:7f:e0:a8:91:79:4b:51:23:f3:
                    b8:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:D0:6C:28:8B:04:9F:15:61:86:EF:7C:6A:44:41:81:9B:99:A2
            X509v3 Authority Key Identifier:
                keyid:59:63:9E:A2:7D:ED:46:0F:3C:9B:43:21:6E:FC:51:95:5F:62:89:C9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/WWOeon3tRg88m0MhbvxRlV9iick.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WWOeon3tRg88m0MhbvxRlV9iick.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/655/sRfQbCiLBJ8VYYbvfGpEQYGbmaI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.172.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ca:69:6d:3a:82:d1:06:a2:ba:2f:f3:92:5b:8a:90:ac:ca:84:
         99:41:94:d1:13:39:77:21:4d:83:7d:16:be:9e:f0:5d:51:8a:
         3b:0c:09:be:24:fc:85:51:28:b9:f3:20:dc:05:ed:fb:29:d7:
         52:58:63:65:d6:a5:04:eb:9f:77:fb:77:87:ee:bf:47:5f:2c:
         7e:b5:5c:aa:a0:77:4d:0a:2d:3e:e7:83:f0:8e:08:fa:cd:16:
         21:6e:49:94:0b:a2:31:7c:0f:85:79:ce:86:29:ab:9b:ee:8f:
         fe:f8:17:68:ef:73:5a:d7:97:53:00:57:d7:2e:15:c3:14:9f:
         5a:0b:a0:ec:c5:da:87:a8:13:f4:07:1c:51:a8:66:59:14:35:
         a3:e2:fe:35:81:7c:8a:cd:7d:1d:ec:50:da:7d:a0:ce:da:59:
         33:a3:60:f7:b0:7e:86:de:dc:77:a6:d3:1a:a5:e8:b0:e2:ab:
         68:78:d5:10:d4:3d:27:d5:78:6d:c5:a5:24:f4:12:cc:32:00:
         4f:3f:7a:ac:1a:c7:0d:e4:2f:02:6e:4a:3b:b7:e7:dc:47:63:
         2d:15:87:ad:60:6c:99:2a:68:1e:0d:32:8d:0a:8f:41:b5:a4:
         30:60:f6:38:ec:41:c4:f5:34:ed:3e:64:6e:16:3e:b6:78:bc:
         30:ff:ab:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:47 2024 by rpki-client on console-ams.rpki-client.org