Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
File:                     SNGktOoq4PacmA087YugNpJ7EQ4.roa (raw, json)
Hash identifier:          eLEM6V63jADBDxl694iTN+Y2K2hpBS+2+LCyeTNZKds=
Subject key identifier:   48:D1:A4:B4:EA:2A:E0:F6:9C:98:0D:3C:ED:8B:A0:36:92:7B:11:0E
Certificate issuer:       /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial:       04
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
Signing time:             Wed 14 Feb 2024 08:14:57 +0000
ROA not before:           Wed 14 Feb 2024 08:14:57 +0000
ROA not after:            Thu 13 Feb 2025 03:32:11 +0000
asID:                     23630
IP address blocks:        133.32.112.0/20 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
        Validity
            Not Before: Feb 14 08:14:57 2024 GMT
            Not After : Feb 13 03:32:11 2025 GMT
        Subject: CN=48D1A4B4EA2AE0F69C980D3CED8BA036927B110E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:33:07:0a:c1:d1:d1:9f:8a:20:ff:37:30:50:
                    b9:32:e8:e1:ca:cc:2e:02:32:97:b5:69:bf:7f:de:
                    9d:80:68:84:cb:7f:04:3b:03:2b:cb:5f:4e:5c:0d:
                    51:5e:48:4c:c9:f0:f5:8d:ee:2c:b1:d6:25:05:d6:
                    35:25:b1:09:e8:7a:26:2c:1e:11:25:42:e7:6d:c2:
                    1e:15:f6:b9:88:ad:07:ef:68:e1:12:b9:64:ff:fb:
                    04:a2:b1:72:af:cd:fb:51:d2:d2:04:de:a0:80:6a:
                    f2:43:e9:03:e3:fc:cd:16:b4:29:41:e4:0c:76:15:
                    b5:92:f6:31:71:b0:0a:82:16:51:87:bf:be:74:32:
                    f6:34:07:96:8c:32:b4:1a:cc:01:d8:04:ce:f1:99:
                    e9:dd:8b:45:bd:f2:8e:b0:17:43:9b:04:ab:03:ec:
                    98:12:98:04:9b:c7:27:0e:9e:6b:ca:0c:23:5b:6d:
                    15:ff:86:2e:25:ba:5d:cd:ff:c2:21:ca:66:52:5d:
                    31:4b:89:33:35:62:72:14:c9:83:b4:d2:59:d7:89:
                    c9:94:ea:7e:86:f6:d7:de:62:6b:61:36:0f:43:de:
                    f6:08:42:31:e7:8a:c7:cf:49:eb:5d:a0:5d:7c:48:
                    56:db:20:a4:5e:e9:c5:a1:6c:b5:80:49:2c:3c:36:
                    54:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D1:A4:B4:EA:2A:E0:F6:9C:98:0D:3C:ED:8B:A0:36:92:7B:11:0E
            X509v3 Authority Key Identifier:
                keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/SNGktOoq4PacmA087YugNpJ7EQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.32.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6c:67:d1:27:2d:c2:e1:7b:11:65:a5:b6:4a:ee:d8:9e:af:12:
         b6:12:2d:3c:4a:4f:28:cc:70:e0:18:6d:6e:bc:00:1b:4e:41:
         82:8b:15:0e:87:23:5e:e6:d7:e7:4b:a4:44:7f:f6:89:a5:83:
         20:65:e3:d4:97:62:a7:bb:d4:0d:8f:f2:cd:04:b7:99:3c:26:
         16:31:df:1f:26:e7:1a:5f:86:02:c6:a9:18:5e:a4:4f:58:92:
         dd:9e:1a:98:16:5b:ce:c9:39:ec:78:1e:ae:8f:aa:8b:e3:ca:
         82:45:ec:22:eb:ea:55:51:fb:73:ee:db:fb:1d:f2:a5:87:8c:
         98:4d:b0:6d:cf:b2:05:f1:38:a8:78:9c:5a:dc:25:df:b7:e1:
         68:8b:13:bb:fb:da:0b:3b:52:f7:b1:01:0b:47:3b:78:32:eb:
         89:1d:76:a6:69:3c:9b:40:30:40:92:e7:f5:73:48:80:38:6b:
         6f:1c:85:18:28:07:b6:b8:b6:6c:bb:f7:cd:2e:b9:4c:33:34:
         3b:a2:d6:4e:5b:20:cf:a7:3a:38:f3:f3:68:bd:60:45:e0:cb:
         93:81:3f:08:4d:fd:e6:9d:8c:cb:12:89:ec:c5:17:fa:c1:5c:
         fd:8f:1c:81:03:e4:af:c8:af:1b:e7:6e:bc:e7:ca:e1:92:39:
         1f:b4:74:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:50 2024 by rpki-client on console-ams.rpki-client.org