Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
File:                     7E9GnOzJDBXnO1SnbBin5GjYWjU.roa (raw, json)
Hash identifier:          zC41yjymL4v1cckSV6gvZ5PEEv1q1mdpuSKplfdmkXM=
Subject key identifier:   EC:4F:46:9C:EC:C9:0C:15:E7:3B:54:A7:6C:18:A7:E4:68:D8:5A:35
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       37
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
Signing time:             Fri 06 Oct 2023 06:05:45 +0000
ROA not before:           Fri 06 Oct 2023 06:05:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        218.216.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EC4F469CECC90C15E73B54A76C18A7E468D85A35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:97:74:b2:47:ee:8c:1f:d1:a6:86:77:32:5a:
                    38:93:d4:e0:27:cd:43:ae:3a:e4:ac:cc:84:26:87:
                    e6:e8:8d:a6:64:c6:48:4d:6b:a6:b0:68:99:8b:e6:
                    fa:4c:8c:e6:3a:52:f0:2a:0f:36:93:8d:79:a1:68:
                    c2:d9:e0:d7:57:45:cc:8e:9f:06:59:15:42:89:e6:
                    04:9d:ff:a4:e7:c4:ad:31:ab:54:ba:7f:67:f5:00:
                    9c:a4:01:aa:54:db:20:93:c8:c0:d2:d7:d4:1b:be:
                    c9:8e:d3:30:da:a5:7d:a2:43:c3:7f:de:72:d3:c7:
                    8b:aa:72:61:00:c3:b6:bb:fd:95:19:d0:35:47:37:
                    99:58:8b:65:d0:8a:a3:22:15:d9:87:00:03:46:bc:
                    ca:9b:61:4b:cc:1e:73:71:5c:20:c6:dc:b4:62:56:
                    e4:83:b1:3c:5e:a5:e5:22:e5:6f:a7:81:16:d9:2d:
                    bc:98:a2:cd:e3:4a:ca:f0:c1:b5:25:57:77:61:18:
                    2c:08:1b:64:a6:53:81:2f:aa:b9:bf:46:44:25:c9:
                    3f:10:d3:3c:cf:ae:3a:0f:af:55:a9:bf:42:15:91:
                    4e:10:6e:a2:e9:9a:dc:68:87:01:13:ed:f6:85:c7:
                    7b:9d:54:54:db:77:39:e8:2e:17:e5:d6:37:46:dd:
                    66:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:4F:46:9C:EC:C9:0C:15:E7:3B:54:A7:6C:18:A7:E4:68:D8:5A:35
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/7E9GnOzJDBXnO1SnbBin5GjYWjU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         02:58:e2:26:ab:a7:57:95:9b:1d:0f:16:89:81:b1:34:8c:72:
         9e:c6:91:f0:5c:56:56:66:30:f0:92:04:1d:05:58:ed:9d:e3:
         97:fe:9a:a1:40:04:4c:6f:cc:f4:3f:a2:6b:9a:f4:cf:ce:5f:
         fe:cb:f3:20:31:ba:25:6a:d5:a1:fa:8c:18:42:7e:1c:e6:36:
         af:d6:3c:0d:2b:91:f9:8a:62:bf:fc:a1:e6:e6:dc:ca:5e:b4:
         ca:fa:24:5c:64:f6:95:de:30:20:28:5b:0e:d8:72:ee:6e:fd:
         91:55:5c:10:a2:4f:60:f5:b0:e1:a5:e5:63:df:2d:ca:3b:37:
         aa:51:86:7b:35:29:ea:0d:c9:2a:c5:38:32:ef:29:32:e8:bb:
         93:81:70:0d:4d:46:eb:3e:fa:e1:9c:ac:b0:f2:63:97:3b:e2:
         cc:33:67:31:c8:75:91:5a:3e:95:67:c1:62:60:b0:fc:55:96:
         90:23:a1:1f:b0:7e:73:c4:c0:4c:31:f6:43:c8:2f:fd:e0:48:
         98:c7:ca:76:cb:d4:f5:34:d5:88:17:be:28:90:7c:86:96:36:
         8e:77:a4:b8:f6:7c:2b:90:b3:93:a7:5f:53:de:cd:cd:e0:da:
         c5:e6:a7:d8:7c:31:b3:9a:51:c8:b1:4e:87:27:62:ac:d6:c2:
         53:66:47:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org