Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/SRR2WlM4pGodFXXFLq2bAE6NlYM.roa
File:                     SRR2WlM4pGodFXXFLq2bAE6NlYM.roa (raw, json)
Hash identifier:          x7YZNVvjlhHVOZwbJEJR3VXXJDk+HpQ4aE5DyuDRCiE=
Subject key identifier:   49:14:76:5A:53:38:A4:6A:1D:15:75:C5:2E:AD:9B:00:4E:8D:95:83
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       19
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/SRR2WlM4pGodFXXFLq2bAE6NlYM.roa
Signing time:             Fri 16 Aug 2024 02:53:16 +0000
ROA not before:           Fri 16 Aug 2024 02:53:16 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18121
IP address blocks:        180.94.192.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug 16 02:53:16 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4914765A5338A46A1D1575C52EAD9B004E8D9583
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:03:43:f0:34:89:05:2d:80:a0:12:a9:c4:d6:
                    c4:9e:2c:07:61:35:73:94:b4:c3:10:68:b5:3b:61:
                    49:3a:5d:ef:71:81:77:ad:19:7d:a9:4c:13:4c:b7:
                    8e:5d:5d:44:cb:69:17:4b:73:74:e8:b2:2b:05:b1:
                    65:1b:ff:8a:f5:50:f7:ce:37:36:a8:2c:3e:9f:b9:
                    1f:02:1f:e4:ec:65:69:19:d9:ce:e6:06:2b:79:ec:
                    71:d0:6a:d3:cb:5b:25:f1:ac:e8:db:cc:45:41:3d:
                    59:91:ae:5a:f2:ff:b9:46:40:eb:7f:76:dd:e2:e7:
                    b9:cd:d2:39:d2:6d:5a:58:4c:56:dd:f8:7e:77:aa:
                    9d:90:8d:43:e3:7a:a3:16:e0:69:0a:31:5f:e5:75:
                    dd:44:3c:f1:b5:ca:09:63:b4:2e:7c:d1:ca:37:c0:
                    17:57:4e:d7:cc:89:06:3a:04:25:86:51:a7:d7:17:
                    03:3d:95:9d:cc:9a:62:5d:55:ed:51:93:c3:0e:42:
                    f2:a3:29:9e:fa:40:2b:69:7f:21:75:25:23:67:58:
                    f6:8b:a6:8e:64:f7:51:02:22:99:74:c9:22:54:30:
                    b6:cb:67:e4:42:cf:73:72:42:f5:50:a3:2c:dc:72:
                    b0:7e:f7:08:dd:e5:ca:b8:77:6f:dc:fc:d7:c3:03:
                    f6:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:14:76:5A:53:38:A4:6A:1D:15:75:C5:2E:AD:9B:00:4E:8D:95:83
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/SRR2WlM4pGodFXXFLq2bAE6NlYM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b7:1a:ac:1e:07:1f:95:fc:31:6b:32:f9:96:50:8e:f3:37:f0:
         69:3d:34:77:9b:b7:28:09:ce:f8:1a:40:c7:f9:23:fa:85:11:
         66:6e:cc:6f:d2:db:5f:5d:62:fa:15:42:82:d4:d5:ea:a3:13:
         cb:b5:b1:34:33:16:75:cf:36:b3:ee:c4:fc:11:29:f4:56:bd:
         b0:cd:5e:be:9c:00:77:b1:96:46:5a:37:cf:74:3c:24:1e:2a:
         d4:ea:59:41:76:7e:70:ac:c4:37:91:c0:03:c8:1a:a6:a4:f5:
         07:78:b1:2b:c5:df:41:a3:ad:8b:bf:49:d2:df:f7:d9:a7:f3:
         96:ec:94:1b:77:f4:c3:4f:02:f7:7c:60:81:4c:8a:13:ec:05:
         69:5c:0c:a4:81:9a:46:b5:07:52:44:eb:0a:f8:f0:d0:74:87:
         99:e9:c3:02:9e:18:a8:cb:0a:55:36:c1:41:c9:49:da:8c:94:
         77:50:07:12:5a:c6:0e:87:21:11:de:30:24:7b:21:a3:55:51:
         1f:87:d1:ea:33:64:3a:d7:67:bf:50:6d:92:eb:c1:5c:91:8c:
         e9:f0:e1:76:7c:4d:c5:e0:87:f5:1f:1c:0f:81:72:21:a6:5f:
         b2:83:6b:48:1e:9f:fe:a9:81:7a:07:78:6f:e8:09:98:97:02:
         9f:fa:cd:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org