Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/eQESzNbCkS6iS6duSE5VKTFQMNk.roa
File:                     eQESzNbCkS6iS6duSE5VKTFQMNk.roa (raw, json)
Hash identifier:          nOK7QmIQViwqV+Ihiz+YNWahs9ZNzb2lL2iXIu+VtdU=
Subject key identifier:   79:01:12:CC:D6:C2:91:2E:A2:4B:A7:6E:48:4E:55:29:31:50:30:D9
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       3A
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/eQESzNbCkS6iS6duSE5VKTFQMNk.roa
Signing time:             Thu 28 Mar 2024 08:35:41 +0000
ROA not before:           Thu 28 Mar 2024 08:35:41 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2519
IP address blocks:        203.79.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:35:41 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=790112CCD6C2912EA24BA76E484E5529315030D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f6:4c:d1:d7:67:cd:ec:82:29:1d:4a:2c:c7:
                    13:dd:dc:12:70:7f:2d:24:4f:bc:47:3d:59:16:2b:
                    0c:a9:bf:39:aa:64:75:8c:ef:90:07:13:59:86:cb:
                    77:f4:3d:89:03:e2:91:33:fe:46:0f:f5:64:87:d6:
                    49:db:a7:41:d6:17:89:f5:41:0d:0f:31:b9:39:64:
                    5b:7c:83:0d:2d:86:d5:6f:67:fb:f7:b9:17:52:f8:
                    77:5f:f5:40:c5:0b:c5:84:b4:93:0e:aa:d5:17:6a:
                    34:5b:51:e3:13:c9:8a:59:4e:aa:d1:ad:a3:ee:c0:
                    72:fb:8c:88:00:31:39:e5:fc:7a:db:96:8d:57:e2:
                    a2:70:38:62:51:db:06:10:0e:26:26:88:e1:14:f0:
                    bc:3e:af:54:8e:89:bc:69:b9:66:47:c5:1f:31:6c:
                    4d:a0:6d:9a:1a:68:d8:76:8a:3c:5b:73:a4:ac:1f:
                    41:d4:16:8b:7f:dd:85:65:b9:68:5b:85:03:1d:e5:
                    3c:5b:8f:a9:c3:b2:61:81:d0:49:c3:9f:c2:47:43:
                    9d:4c:80:0c:ed:52:af:13:a0:2a:45:61:a5:40:03:
                    7e:85:40:79:31:bc:bb:2b:42:60:ae:75:0b:2c:c1:
                    75:76:c1:ba:64:1e:10:d1:25:19:ff:bd:f4:9b:b1:
                    97:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:01:12:CC:D6:C2:91:2E:A2:4B:A7:6E:48:4E:55:29:31:50:30:D9
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/eQESzNbCkS6iS6duSE5VKTFQMNk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a1:3f:da:ef:00:c6:7d:ec:f3:f4:73:8e:2e:3d:de:f3:f7:b7:
         9a:47:00:af:04:59:67:3c:c0:e4:ca:fd:3e:84:f8:2e:4a:b4:
         af:8f:f3:35:99:b1:35:a1:59:c4:22:5d:04:a7:a3:32:53:41:
         12:42:4e:81:60:e3:31:e4:c6:ac:ff:45:17:97:24:98:c8:c9:
         51:0b:ef:75:2a:73:e5:6a:18:e1:98:39:bb:2b:39:5f:55:66:
         21:ef:17:95:a3:12:2c:d4:f6:21:ad:77:97:83:97:9f:01:f6:
         23:68:d1:c9:58:4b:1c:05:4a:3b:8f:5e:6e:b3:07:f0:50:e9:
         59:01:67:cc:4c:55:b2:b6:f2:dc:2b:92:94:cb:2b:38:d9:2b:
         3d:fb:ef:e0:70:4b:23:66:e4:cd:9b:f3:e0:f4:90:57:c8:f9:
         3b:d3:d9:2d:2f:de:52:89:a0:48:a0:c5:e8:fa:3d:d2:10:f7:
         ab:97:c7:70:62:ed:39:d9:a2:0f:be:df:9a:15:9d:2d:de:33:
         4d:71:f1:e7:1c:bb:48:ce:37:6f:a7:68:57:8f:1a:fc:11:fa:
         71:44:d9:41:e5:ee:68:18:4f:7c:67:28:43:71:f4:6b:b0:3b:
         32:69:ea:12:39:dd:11:cf:79:26:32:dc:7a:3f:a7:2f:d7:4b:
         f6:3e:90:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:26 2024 by rpki-client on console-fra.rpki-client.org