Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/3xssDyJaNf8IYcJKTB4_5956Uh0.roa
File:                     3xssDyJaNf8IYcJKTB4_5956Uh0.roa (raw, json)
Hash identifier:          QBer/9MLQAgYUbdVEbGqJzT6tOLRed2tQ/IKIsaQMOA=
Subject key identifier:   DF:1B:2C:0F:22:5A:35:FF:08:61:C2:4A:4C:1E:3F:E7:DE:7A:52:1D
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       62
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/3xssDyJaNf8IYcJKTB4_5956Uh0.roa
Signing time:             Thu 29 Feb 2024 01:30:56 +0000
ROA not before:           Thu 29 Feb 2024 01:30:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        219.109.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=DF1B2C0F225A35FF0861C24A4C1E3FE7DE7A521D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ad:e1:b8:d0:93:6c:05:62:40:66:44:34:12:
                    ed:1b:fd:49:f7:ce:7f:2f:64:51:2c:61:59:62:2d:
                    3f:38:00:58:99:af:80:cd:66:fc:83:9a:4e:81:02:
                    ab:3b:48:11:c5:30:43:22:19:b6:c3:f0:47:2a:5b:
                    6c:26:3c:6b:5b:f9:24:d2:35:1e:c0:d7:37:3e:07:
                    50:96:c2:05:09:d6:7d:f6:1c:48:3d:fa:12:28:c7:
                    1a:d6:95:f0:be:10:3e:29:54:86:f5:ad:e7:86:ba:
                    08:f3:c0:a7:b0:ad:ac:0e:d8:cb:23:4e:74:a2:03:
                    9a:cf:99:a4:5d:de:8f:ad:42:97:33:df:1f:3b:41:
                    0f:05:5c:42:df:59:ee:0a:7d:22:15:a5:60:56:2e:
                    73:86:93:c5:30:b9:7e:a2:8e:77:64:12:8f:9d:73:
                    3b:66:bd:f7:c7:0c:97:8f:89:5b:24:62:fa:02:18:
                    61:ce:ad:0b:c0:82:59:69:b3:76:37:61:03:27:77:
                    08:ce:fa:93:45:0e:8c:c4:5e:c6:c2:13:c5:58:88:
                    28:f6:e7:cf:1b:fc:ef:05:ac:9c:a5:53:59:28:af:
                    5a:67:f7:8a:1b:43:3c:b4:47:10:d5:ac:35:d5:ce:
                    69:09:61:61:ca:8f:0a:41:8d:68:63:1b:5b:26:2f:
                    21:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:1B:2C:0F:22:5A:35:FF:08:61:C2:4A:4C:1E:3F:E7:DE:7A:52:1D
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/3xssDyJaNf8IYcJKTB4_5956Uh0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5d:e7:8a:51:f3:ee:f6:a3:b6:e9:b9:71:21:cc:9e:8f:57:84:
         06:0e:67:ed:32:57:de:dd:d3:8d:f6:6f:f2:24:dd:c0:c8:5c:
         c5:63:3f:cb:e5:b2:96:c4:b9:a5:49:e0:d5:3a:84:be:12:1a:
         73:58:64:69:eb:6a:cb:c1:09:e4:60:f1:39:54:2c:b4:da:6f:
         8f:c2:26:e3:67:11:82:5b:f9:22:c0:8f:b1:2f:e4:49:64:32:
         aa:ef:77:fd:7e:b9:1f:85:75:66:1c:f9:c9:6e:f8:b8:fe:e1:
         be:d7:1f:fc:6f:1e:83:8b:fb:0c:16:5f:b2:b4:2d:0e:e0:d9:
         92:f0:7c:52:c1:4b:ff:89:44:9e:d6:2a:dd:5e:c0:d7:06:a9:
         ef:f4:23:1f:9b:37:51:f3:98:60:36:e5:91:5e:7b:16:49:c6:
         99:d8:3f:b9:fb:5c:86:aa:53:58:26:a4:56:6a:62:a9:ab:3f:
         91:91:d0:43:8b:63:ed:99:ef:2d:66:bd:8e:d6:e0:a1:71:91:
         67:0c:87:5f:40:4d:13:60:4c:aa:ee:a7:65:d9:37:71:6a:f7:
         cf:ec:6f:3c:ff:a8:7e:83:27:7a:6a:cd:c5:ba:46:ba:fd:41:
         7e:3a:2c:c0:bd:c0:02:a1:41:ee:57:c2:d9:09:52:0a:06:f2:
         78:7d:21:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org