Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/uktQ7e2Pi2dfHhY74P4jE1R-ASU.roa
File:                     uktQ7e2Pi2dfHhY74P4jE1R-ASU.roa (raw, json)
Hash identifier:          kf9lC83iaZUzcdfTTStQGsesDp9svFg9193P+2sStGY=
Subject key identifier:   BA:4B:50:ED:ED:8F:8B:67:5F:1E:16:3B:E0:FE:23:13:54:7E:01:25
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       08
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/uktQ7e2Pi2dfHhY74P4jE1R-ASU.roa
Signing time:             Thu 14 Sep 2023 00:30:57 +0000
ROA not before:           Thu 14 Sep 2023 00:30:57 +0000
ROA not after:            Fri 30 Aug 2024 02:51:12 +0000
asID:                     18121
IP address blocks:        219.121.224.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Sep 14 00:30:57 2023 GMT
            Not After : Aug 30 02:51:12 2024 GMT
        Subject: CN=BA4B50EDED8F8B675F1E163BE0FE2313547E0125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:80:6d:98:74:bf:ab:71:1b:d5:f5:9f:d3:
                    14:55:d9:f2:ba:8e:c9:34:0e:db:82:8f:c1:af:6b:
                    ee:63:f6:e6:49:2b:1f:a3:61:8a:5a:b3:77:04:4a:
                    15:39:12:22:f1:7e:5a:02:6e:1b:3c:53:9c:95:84:
                    4d:9f:c0:c3:f1:c7:26:48:63:cc:25:fe:94:67:6f:
                    3e:bf:6b:90:63:6b:5b:20:3d:76:c5:0b:8e:85:50:
                    39:bf:d6:70:df:f4:82:29:01:86:38:2b:4b:56:0a:
                    40:a3:ff:54:19:42:7c:64:3e:aa:41:ad:ec:70:a3:
                    17:a3:7d:42:02:1d:b5:ff:63:d2:53:0e:7f:80:d1:
                    53:49:60:91:d4:5e:ec:c0:c5:89:b0:72:cd:23:07:
                    ca:65:00:f7:29:a3:94:7c:c9:3f:7c:33:1b:cf:2a:
                    42:d0:6b:31:79:4c:ec:3d:9b:6b:8b:27:74:01:59:
                    d7:05:2f:64:f4:94:bf:cc:b4:26:41:79:02:90:65:
                    c5:48:20:ee:c5:76:68:b6:b0:7e:34:f0:07:ab:2f:
                    90:4e:f2:a0:c6:1a:e6:5b:8f:59:00:9c:8d:3d:ef:
                    6f:47:90:f7:bb:ee:9e:fc:46:ba:6e:eb:28:60:53:
                    26:ce:8c:d2:5e:0e:a6:11:54:e4:2f:d7:ff:76:0c:
                    78:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:4B:50:ED:ED:8F:8B:67:5F:1E:16:3B:E0:FE:23:13:54:7E:01:25
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/uktQ7e2Pi2dfHhY74P4jE1R-ASU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         dd:2d:28:e2:32:08:42:48:ae:95:70:f6:b9:bf:7e:cb:b6:9a:
         ff:6c:24:69:0b:0f:6e:17:65:b7:1f:41:0c:e3:e5:a8:4d:23:
         66:e5:bd:71:02:63:fe:55:67:d3:e2:1c:c9:5f:b0:a7:3f:91:
         78:47:7b:0c:c5:40:8b:2e:d7:03:35:e1:b2:55:b0:98:98:7e:
         12:53:e6:bd:57:cc:55:de:e6:8c:18:05:92:83:31:75:29:97:
         a0:00:26:df:39:4b:d1:5b:3b:96:fe:24:10:24:92:31:7c:fb:
         5f:f8:94:71:db:29:2b:6f:7a:35:44:2f:99:fe:8e:f2:29:af:
         2f:de:3f:87:04:f0:ee:d7:ba:00:82:cb:98:5a:4f:40:8d:4b:
         00:af:54:0a:d8:a6:cf:b6:ca:38:1d:4b:39:e2:73:0d:a8:18:
         20:96:d0:85:df:a7:2c:74:c9:d5:82:e1:58:ef:49:de:bb:53:
         39:55:f5:0d:f9:0a:5e:76:c1:53:66:75:a3:70:b6:e7:6c:d6:
         e9:b4:45:6e:83:d8:38:30:1c:5c:79:6f:1f:ec:53:a7:3c:4b:
         b1:55:52:8a:a3:47:d6:4c:fc:db:7d:d0:d0:dc:f7:03:cd:de:
         cf:8e:f6:9d:72:fc:ae:f0:ed:da:5f:e4:52:ad:72:7f:47:a4:
         01:98:53:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org