Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa
File:                     7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa (raw, json)
Hash identifier:          nG4BsxanNpY5EYZKSqnNyhEeG31jqsfcFpXF85af+6I=
Subject key identifier:   EF:24:6D:56:44:B1:7E:43:D4:44:94:36:7F:54:CE:FC:FB:0D:68:55
Certificate issuer:       /CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1
Certificate serial:       09
Authority key identifier: 4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa
Signing time:             Sun 08 Oct 2023 23:27:02 +0000
ROA not before:           Sun 08 Oct 2023 23:27:02 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        216.171.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F2A36BE85AB88338854C5A568CCD44E19E654F1
        Validity
            Not Before: Oct  8 23:27:02 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EF246D5644B17E43D44494367F54CEFCFB0D6855
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ea:7c:a7:e1:64:de:aa:b2:ec:e4:e3:27:ba:
                    25:3a:fa:5c:a4:7c:a5:a6:47:28:e6:d8:36:e7:f1:
                    f2:58:49:0a:ef:39:a3:72:d1:d3:5c:61:6f:bf:9d:
                    8f:e3:dd:83:2b:3e:29:29:f2:9c:d6:ca:ee:a5:1e:
                    6a:e2:c5:36:d9:0d:b7:70:73:06:8f:0c:34:22:20:
                    2b:af:cc:e3:a8:e0:d3:02:f9:3b:3a:da:b8:c0:02:
                    0d:2e:42:3b:d0:aa:7f:89:c3:48:61:31:c0:48:69:
                    0c:4e:6c:74:29:77:7b:72:00:bc:6e:3a:80:57:38:
                    50:b6:1f:ea:02:2b:2a:eb:74:56:d8:25:f6:35:b3:
                    bf:5c:dd:90:eb:d4:a1:8c:c2:4f:a3:f7:8d:db:b9:
                    28:51:61:4b:b4:52:93:97:da:f4:4d:d7:90:e1:77:
                    34:c5:b4:f0:fa:78:55:b3:f1:82:82:3c:1b:64:f0:
                    4c:04:20:f5:68:de:f4:6f:c8:0e:87:16:53:d6:d2:
                    b0:40:2d:1b:7b:18:af:31:cc:e0:a5:a0:44:f5:c4:
                    70:e3:56:43:17:72:5f:34:9b:91:ad:35:ee:11:a0:
                    7d:83:55:45:90:0b:24:80:b7:82:77:a8:f3:14:25:
                    40:bd:2a:b3:11:97:99:df:28:ab:0e:4d:08:79:d8:
                    2b:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:24:6D:56:44:B1:7E:43:D4:44:94:36:7F:54:CE:FC:FB:0D:68:55
            X509v3 Authority Key Identifier:
                keyid:4F:2A:36:BE:85:AB:88:33:88:54:C5:A5:68:CC:D4:4E:19:E6:54:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/Tyo2voWriDOIVMWlaMzUThnmVPE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tyo2voWriDOIVMWlaMzUThnmVPE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/7yRtVkSxfkPURJQ2f1TO_PsNaFU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  216.171.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:f3:e8:c2:3c:24:b8:29:a0:9b:7c:4c:55:07:c2:47:bf:98:
         d7:c1:f5:f3:e4:ac:3e:b5:19:aa:fc:7b:18:99:59:3c:4d:55:
         e3:6c:77:a4:6f:a2:64:05:9c:73:3f:19:35:32:dc:7e:15:7e:
         e8:a3:7c:f3:a0:56:f9:33:c3:f1:f6:35:5d:09:5c:a3:ff:ad:
         f5:c0:70:74:d4:55:b1:7f:59:2b:18:0e:17:fd:58:79:4b:d4:
         a1:11:3c:1b:d4:a7:4d:7e:15:b7:91:9b:65:ec:9a:c6:00:7d:
         76:8e:c2:b2:12:56:09:9c:bc:9e:f4:eb:01:6c:be:52:45:84:
         0c:5f:04:a0:04:d3:07:bc:d2:00:5f:6f:9b:5b:b3:ba:72:f9:
         6b:cd:ff:45:da:69:3b:ed:27:c1:d6:5c:ae:61:69:9a:d9:32:
         41:d8:ac:5e:af:e5:d9:f7:3a:f1:12:14:31:14:f4:f8:ad:ed:
         d7:84:21:26:ee:9a:91:ee:29:47:f3:46:72:67:96:5f:b3:41:
         70:49:98:a3:a1:45:4c:ce:ae:9e:b2:9e:6d:45:e1:f7:3a:6b:
         0b:69:22:9a:21:77:be:a4:ac:bb:21:27:9a:b2:cb:f2:43:17:
         44:af:58:83:8f:40:48:58:b2:b0:d1:a1:22:fa:34:48:79:7b:
         85:04:f8:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:10:42 2024 by rpki-client on console-fra.rpki-client.org