Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
File:                     uApnkOfWwwlCtZNfFSAe8S9tkLo.roa (raw, json)
Hash identifier:          zvMWhMinbQNuCOAz5uYuAYLhCBBFDYknBxk6g4b7SLI=
Subject key identifier:   B8:0A:67:90:E7:D6:C3:09:42:B5:93:5F:15:20:1E:F1:2F:6D:90:BA
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       2C
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
Signing time:             Thu 01 Feb 2024 01:30:24 +0000
ROA not before:           Thu 01 Feb 2024 01:30:24 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     17683
IP address blocks:        202.227.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Feb  1 01:30:24 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=B80A6790E7D6C30942B5935F15201EF12F6D90BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:ff:ff:54:67:47:8c:76:60:19:c5:74:f3:2d:
                    ea:48:58:d9:15:c7:0e:e4:54:52:ba:24:2a:d4:f3:
                    31:37:7e:3a:af:e4:fa:3f:45:ed:0e:00:73:7b:ab:
                    1d:a4:99:e0:6c:66:06:36:bd:a8:1c:5f:a9:44:95:
                    56:23:5d:72:b7:7a:49:31:9b:5e:ca:15:c8:3a:ae:
                    36:28:14:4a:54:8c:9a:df:84:d2:a4:b5:39:70:df:
                    ac:ea:d5:0e:34:c3:9c:18:71:17:de:eb:2f:2b:6f:
                    41:7c:13:6e:f1:06:0c:c4:a1:18:a1:15:e0:6e:36:
                    bc:cd:d3:2d:c5:d7:b1:91:fd:64:2b:43:bb:d4:9c:
                    d3:11:b0:91:5f:7b:31:52:43:f8:9c:d7:7b:f2:6e:
                    ab:b3:22:d1:ac:17:6d:09:ed:bf:82:8a:38:5c:52:
                    86:71:07:85:0c:9f:e0:88:e6:0d:ce:8f:24:ed:d5:
                    d3:16:d3:ce:71:df:2e:47:aa:ef:ea:22:3d:cc:86:
                    d1:9e:5f:ad:b6:83:6b:f5:6f:2b:5c:9e:fc:ae:6c:
                    23:18:57:6d:07:22:ae:d9:0f:51:8c:9f:19:6a:ea:
                    7b:d5:06:54:c0:80:fb:db:53:c0:e1:1d:76:92:83:
                    c9:f5:49:40:92:be:0d:77:6b:3c:7e:94:bf:0d:fb:
                    d7:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:0A:67:90:E7:D6:C3:09:42:B5:93:5F:15:20:1E:F1:2F:6D:90:BA
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/uApnkOfWwwlCtZNfFSAe8S9tkLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:e3:9c:a1:ab:65:e0:5f:10:28:36:cb:49:56:83:89:ee:98:
         b8:83:3f:e1:f8:40:6c:98:12:9b:cd:b7:ba:4e:d0:30:d3:24:
         25:15:8a:ec:ca:f7:1f:c6:08:6e:3e:f5:6b:88:8f:21:5f:77:
         2b:40:84:40:5d:9e:03:80:08:b4:d2:73:fa:96:84:cc:dc:d7:
         ca:fb:b8:34:23:0b:e0:a0:72:69:ed:68:89:56:2e:4f:02:7e:
         9a:9f:4d:3c:4a:b5:e8:ae:5b:e1:79:2f:08:f2:38:93:a6:b6:
         f8:36:1c:e5:33:43:da:c1:36:a6:61:83:3c:b3:ff:2e:af:6c:
         87:8b:f7:5c:af:c0:1b:49:57:c9:67:ac:ec:eb:82:cd:0e:8b:
         22:a9:c6:a6:44:2a:1e:87:37:0c:b5:c6:14:2a:02:c7:40:6a:
         03:99:2b:58:08:e2:df:6b:4d:00:d5:20:93:33:ca:a6:3e:ac:
         fd:9e:fb:23:be:a9:82:d4:d9:96:3e:c3:80:67:25:c6:43:74:
         8b:95:a1:eb:49:cb:6a:31:da:81:d5:e4:df:81:f0:a9:14:24:
         cb:21:c4:46:6b:dc:16:8e:8d:08:51:ad:06:1f:57:77:ea:d7:
         c4:ac:4c:3b:05:b5:9e:50:55:cc:db:93:fe:41:7b:94:54:15:
         3e:da:eb:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org