Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/5uOw1TsXhFEp6wEvah6P00BOFzk.roa
File:                     5uOw1TsXhFEp6wEvah6P00BOFzk.roa (raw, json)
Hash identifier:          LorZlJX3oojpy6tf4KXQdneEOSBMEQHczqaDcanbhgc=
Subject key identifier:   E6:E3:B0:D5:3B:17:84:51:29:EB:01:2F:6A:1E:8F:D3:40:4E:17:39
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       1D
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/5uOw1TsXhFEp6wEvah6P00BOFzk.roa
Signing time:             Fri 16 Aug 2024 02:53:18 +0000
ROA not before:           Fri 16 Aug 2024 02:53:18 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18121
IP address blocks:        219.121.224.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug 16 02:53:18 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E6E3B0D53B17845129EB012F6A1E8FD3404E1739
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:fd:8e:f6:d7:6e:17:7f:59:6f:1d:46:cc:da:
                    8c:39:fa:f4:71:02:c7:e7:40:35:a4:a5:0c:fc:99:
                    cc:a8:6a:94:90:55:d0:d8:3f:4f:d7:d6:fb:a4:d6:
                    d8:59:aa:c7:0e:8f:31:1b:c1:aa:da:f8:36:82:ec:
                    c0:fd:97:e9:be:4d:39:ee:f0:58:fa:47:1b:c2:da:
                    35:04:89:69:95:fd:10:f8:ae:8d:92:23:89:80:38:
                    f8:28:f6:b6:a8:85:74:3a:ba:fb:44:9e:51:96:1b:
                    fa:10:36:5c:5b:41:3c:34:84:e3:dc:ae:a7:e9:37:
                    62:67:4f:cd:84:58:d7:68:25:78:8d:7a:8f:99:48:
                    a8:76:0f:8d:59:3a:55:0f:e5:df:4f:33:a1:dc:13:
                    ab:c3:07:72:cd:04:48:66:d0:fd:71:06:79:d9:75:
                    0a:2c:6e:09:ba:37:7c:f6:3a:28:12:24:6b:e1:8d:
                    6a:88:34:ec:36:a4:87:8d:6b:73:ef:97:6b:d3:75:
                    d2:71:17:20:b1:8b:d1:c7:db:6a:01:9a:e0:36:e8:
                    be:e8:e9:3e:44:04:48:48:f2:1b:92:47:01:4a:c1:
                    f1:85:c2:28:61:cf:8d:ca:26:b5:69:9a:ff:ec:bd:
                    97:7b:1d:eb:db:4c:76:eb:8a:b8:7f:9a:a0:ac:26:
                    a9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:E3:B0:D5:3B:17:84:51:29:EB:01:2F:6A:1E:8F:D3:40:4E:17:39
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/5uOw1TsXhFEp6wEvah6P00BOFzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4f:67:60:22:05:2f:dc:7e:b1:0f:d9:89:71:d6:f8:54:80:0b:
         28:7d:a5:47:a3:89:fe:28:32:78:3b:61:b5:1b:cb:c2:64:33:
         4d:3c:60:7d:e6:06:15:7e:68:65:02:2d:bb:a8:f5:4a:94:ec:
         6f:db:ad:0c:86:b4:8c:91:97:98:a7:d1:7e:b0:4e:1e:17:69:
         08:b3:af:76:1b:29:00:8f:a4:d7:18:25:f5:48:a9:3a:c3:1d:
         87:6d:fc:43:d1:82:4a:64:00:70:c5:6d:24:e7:e8:3e:52:2f:
         2b:a8:b5:e6:20:19:cc:17:a8:34:8e:29:7a:02:fe:cb:e1:14:
         7e:4e:b7:5c:46:3e:ed:80:e6:b9:68:17:de:09:2a:c9:ff:ac:
         de:b4:65:c9:62:22:ce:39:e9:00:f9:c1:9d:aa:b1:8f:0f:8e:
         d2:6a:18:fb:22:ca:6e:76:89:3b:94:46:2f:eb:d6:33:34:a5:
         7a:94:4e:72:5c:1a:5d:26:6b:e8:af:ad:4d:6c:89:cd:73:d9:
         56:7c:ea:18:e4:ef:3c:10:05:e4:3b:f1:a2:1f:f6:e6:12:86:
         c6:72:3a:dc:b0:42:c4:34:18:85:4f:de:eb:8b:b5:c7:68:5e:
         ab:2a:80:2f:96:be:b5:19:56:3c:19:b4:05:d8:4b:17:a2:ca:
         33:80:db:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org