Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/ySy80wLFLtvSbjyQhFRYWbl7Y9k.roa
File:                     ySy80wLFLtvSbjyQhFRYWbl7Y9k.roa (raw, json)
Hash identifier:          PVN6eQH4V6O+2rJtlhBHQASAhlvE/96Fvp8k/75rn2Q=
Subject key identifier:   C9:2C:BC:D3:02:C5:2E:DB:D2:6E:3C:90:84:54:58:59:B9:7B:63:D9
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       1B
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/ySy80wLFLtvSbjyQhFRYWbl7Y9k.roa
Signing time:             Wed 11 Oct 2023 00:45:28 +0000
ROA not before:           Wed 11 Oct 2023 00:45:28 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18274
IP address blocks:        202.208.64.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Oct 11 00:45:28 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C92CBCD302C52EDBD26E3C9084545859B97B63D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:de:65:e9:30:8a:3f:e7:03:ae:47:5e:c2:63:
                    f1:ce:1f:97:78:1b:e0:32:8a:23:79:d4:47:4e:73:
                    65:7e:af:5b:7e:ef:23:d4:00:20:79:b6:e8:3b:ca:
                    bc:74:7e:4a:c3:b4:3d:24:51:ef:5d:ac:0c:38:01:
                    1e:58:e4:27:37:61:25:80:b1:9d:7e:94:2c:15:16:
                    b7:10:12:86:3f:7a:a0:73:54:1f:44:33:75:c1:f5:
                    51:b6:3b:ac:23:8b:20:f9:f7:dc:67:c6:ba:59:a5:
                    76:a2:b4:79:87:d6:2f:a5:68:dc:32:5c:11:5b:6c:
                    da:c3:41:f8:ab:b7:f9:fa:b9:8b:d1:8d:e7:5c:98:
                    d3:e4:e1:8c:ef:e2:41:05:00:5c:1a:8b:e6:b9:10:
                    6f:b9:0b:88:ca:a2:d3:71:b8:d9:60:55:da:2d:16:
                    46:b0:cf:5a:ac:f0:38:32:e7:82:32:26:40:ac:38:
                    d4:f7:05:d6:ca:89:6f:c1:59:8e:32:84:4c:08:c2:
                    f5:58:24:07:0a:4f:1d:3d:c8:c6:16:51:19:3e:b4:
                    d1:ac:41:ce:d1:69:bc:c9:f1:b3:4e:e8:f9:3c:a7:
                    d5:6c:e4:9d:9e:17:db:0e:7e:a2:ea:c5:ad:9a:ab:
                    ea:4f:46:00:b9:29:1d:c4:7c:69:85:ea:be:c8:1b:
                    85:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:2C:BC:D3:02:C5:2E:DB:D2:6E:3C:90:84:54:58:59:B9:7B:63:D9
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/ySy80wLFLtvSbjyQhFRYWbl7Y9k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b6:10:ad:af:b9:25:e1:45:d4:96:de:04:05:f3:a3:7b:cf:d3:
         e8:0d:56:5f:89:4f:f7:0a:40:e1:7b:e6:a7:8d:0d:1c:0d:7f:
         08:a1:79:89:66:40:e7:3d:34:a2:45:72:38:1d:7f:1e:8a:3b:
         91:6d:08:12:44:c3:ff:a6:ff:70:b4:68:3f:e5:45:36:26:d5:
         dc:e1:7f:d3:48:74:6d:0e:75:68:11:2b:49:38:aa:23:03:3f:
         e7:4f:cb:ff:c1:23:8d:e7:4b:27:72:1e:e8:ff:dc:90:42:3b:
         c3:9d:4e:b0:06:ad:e8:e7:a0:ca:34:3e:79:d3:5f:77:54:14:
         da:b2:35:e3:b3:aa:4a:9a:d8:4d:dc:b5:ca:8f:35:e5:15:81:
         d9:b5:e7:45:c6:1b:b6:9d:89:e5:d6:95:1a:24:7c:e2:20:a1:
         62:05:9b:38:7e:59:5e:99:40:4a:ca:4e:b6:6b:c7:b5:6b:c3:
         da:71:58:fc:3d:6c:a8:91:3a:3e:03:54:d3:83:f9:ce:e2:8f:
         2e:55:a7:de:fb:35:9d:22:4c:b0:d5:23:4d:00:5b:ea:24:19:
         6c:f8:81:6c:63:f8:3f:12:0c:9b:f8:0b:b4:ff:6a:96:7a:f9:
         75:d8:1e:d6:7c:ba:94:27:50:b8:b6:86:32:05:89:e6:05:33:
         e3:59:04:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org