Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/415qLJ-4kigkJOCrWQ27mSGNIIY.roa
File:                     415qLJ-4kigkJOCrWQ27mSGNIIY.roa (raw, json)
Hash identifier:          gXVxkEQkQ90z9ltums5hHIU0Kx0b0Gu/rF0wLL0s9jg=
Subject key identifier:   E3:5E:6A:2C:9F:B8:92:28:24:24:E0:AB:59:0D:BB:99:21:8D:20:86
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       35
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/415qLJ-4kigkJOCrWQ27mSGNIIY.roa
Signing time:             Fri 15 Sep 2023 06:48:45 +0000
ROA not before:           Fri 15 Sep 2023 06:48:45 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        202.7.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 53 (0x35)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:48:45 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=E35E6A2C9FB892282424E0AB590DBB99218D2086
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:9d:53:8e:77:ee:d8:0a:77:8a:a5:81:0e:ed:
                    5b:57:c0:eb:05:08:53:7e:70:27:cc:76:67:f1:25:
                    90:95:4a:9f:cf:92:90:25:1f:d6:13:d7:7d:44:72:
                    18:4a:4f:2c:e2:5e:45:65:83:78:dd:4a:14:20:f0:
                    29:13:63:8d:61:b0:9d:ae:ea:50:89:f1:5a:93:49:
                    3f:bb:15:db:5c:36:ef:92:3b:d2:73:54:4e:16:fc:
                    78:0d:d2:97:b7:48:63:82:98:79:22:6d:82:1e:96:
                    45:b1:5f:05:48:e8:81:06:93:04:54:75:e3:d8:ed:
                    fb:9f:26:7f:aa:06:c9:8b:9c:36:07:9a:7d:6d:fb:
                    8a:3b:e3:14:d8:ef:d4:42:0c:79:00:5d:ad:1f:9e:
                    c0:e9:42:51:59:e4:3f:04:b4:50:f9:d5:25:20:e7:
                    a5:1b:b6:1b:e9:40:0a:6c:0a:2a:5e:13:f4:99:2a:
                    a8:3b:78:d2:c7:6c:f8:b3:26:0e:6e:50:2c:f7:f1:
                    d0:c8:3b:40:8d:4a:11:b4:23:77:b5:93:ac:50:ac:
                    37:8e:c6:43:4c:b1:e9:e4:55:47:5c:c8:53:51:e7:
                    c3:0a:6e:56:66:fd:3b:f3:e3:6f:6a:86:ad:56:67:
                    c8:2a:2b:49:41:58:9e:01:0e:83:fd:bd:60:4f:bf:
                    55:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:5E:6A:2C:9F:B8:92:28:24:24:E0:AB:59:0D:BB:99:21:8D:20:86
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/415qLJ-4kigkJOCrWQ27mSGNIIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a3:15:92:cb:e6:b8:42:3f:d8:c4:0e:e5:ac:ff:0d:30:ea:6e:
         1b:77:79:38:85:83:90:e3:50:38:ec:fd:ef:7f:a8:08:e2:d8:
         ec:b9:cc:9e:73:22:b6:d9:b6:f0:54:d6:bb:82:0b:0b:fb:a3:
         aa:fa:67:ac:a3:3c:5d:6f:84:cd:92:80:04:c9:b7:bd:a1:6d:
         9d:43:59:e9:a6:23:c3:de:e9:70:29:e6:99:21:02:aa:d2:47:
         f5:d5:f0:aa:4e:96:2c:d1:8d:35:7d:25:6d:31:7b:f2:55:61:
         06:3f:bd:f8:15:25:94:d1:e7:59:2c:9e:c7:f5:33:46:0f:b1:
         24:5a:da:82:67:aa:66:ac:c4:88:39:67:78:d5:a3:5b:41:f9:
         8d:f4:6e:8c:be:d0:a6:92:6e:fb:5c:37:ab:a7:20:4c:d1:ac:
         37:9d:0f:dc:55:e9:6d:da:4b:fc:fe:a5:3b:72:13:94:42:da:
         fd:6f:6a:39:91:a7:f2:ea:20:13:54:63:2b:d7:e8:7d:ae:fd:
         54:63:4d:07:2c:a7:dd:89:f4:8b:7f:de:91:01:d6:ba:6a:7a:
         2c:fb:64:cf:15:25:e2:20:74:a4:b3:7a:bf:7a:7f:49:e2:1d:
         e4:ce:38:70:60:c6:c8:39:52:bc:ae:c5:6c:ad:25:6f:bf:2f:
         81:0c:ac:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:10:42 2024 by rpki-client on console-fra.rpki-client.org