Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/uPAq0Bi0qHMkOXb7ueuy_iqtemE.roa
File:                     uPAq0Bi0qHMkOXb7ueuy_iqtemE.roa (raw, json)
Hash identifier:          olDNC+YHZsNhVsmb0YbbUBt8TjGaWRYPqxW16mxqiDQ=
Subject key identifier:   B8:F0:2A:D0:18:B4:A8:73:24:39:76:FB:B9:EB:B2:FE:2A:AD:7A:61
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       02
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/uPAq0Bi0qHMkOXb7ueuy_iqtemE.roa
Signing time:             Tue 03 Oct 2023 06:40:41 +0000
ROA not before:           Tue 03 Oct 2023 06:40:41 +0000
ROA not after:            Wed 18 Sep 2024 07:00:52 +0000
asID:                     24255
IP address blocks:        182.50.164.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Oct  3 06:40:41 2023 GMT
            Not After : Sep 18 07:00:52 2024 GMT
        Subject: CN=B8F02AD018B4A873243976FBB9EBB2FE2AAD7A61
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:19:05:b2:62:ba:44:45:4d:8b:14:df:7e:60:
                    5f:7b:51:d9:b0:c3:1e:59:82:48:38:4d:52:a9:c7:
                    25:b7:2c:f4:2b:c0:ef:2b:b8:2b:c8:84:96:f3:12:
                    bd:a1:5b:d1:a3:aa:ee:d9:b8:30:21:9f:cf:2a:ba:
                    98:57:71:d3:c7:c0:08:fb:d8:cf:49:34:72:bc:7c:
                    57:c3:90:02:90:15:5e:d8:e1:01:61:dc:e4:5e:03:
                    dd:c8:26:59:bf:c0:5c:6b:33:26:15:48:13:be:52:
                    f6:56:09:13:2b:49:3b:a0:76:73:66:e1:e8:a2:0e:
                    37:6f:6c:a6:57:70:99:a4:21:8e:ba:a9:e1:9c:4d:
                    1a:53:d1:85:51:39:79:27:b6:a1:bf:2a:5f:c8:ae:
                    e3:d1:51:11:65:fa:0c:59:c8:e8:37:10:2b:5c:3d:
                    ee:b4:7f:94:27:03:24:dc:6a:7c:0a:ad:f0:a9:73:
                    43:96:ff:1b:ea:18:75:a8:69:0c:4c:4e:45:43:db:
                    a4:bc:04:96:c3:2f:e1:f1:f3:c1:63:a8:e2:de:86:
                    7f:2d:d3:d7:a5:c1:d5:40:87:a7:fd:3f:98:ce:e9:
                    dc:4f:6e:8f:b0:e8:86:17:9e:7a:c2:d7:83:c8:6b:
                    fa:af:81:8f:dd:51:19:bc:9f:64:07:4f:ae:55:ca:
                    8f:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:F0:2A:D0:18:B4:A8:73:24:39:76:FB:B9:EB:B2:FE:2A:AD:7A:61
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/uPAq0Bi0qHMkOXb7ueuy_iqtemE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.50.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         23:68:47:af:8d:da:ac:bf:a6:27:25:38:45:22:42:2d:32:90:
         09:95:75:21:ca:85:61:f8:ee:49:24:82:4a:8f:b1:e2:e8:3b:
         3d:d8:cf:cf:06:1f:87:88:59:57:cf:01:20:40:40:f3:23:35:
         1a:7f:52:22:03:1c:4f:94:9a:53:be:9b:73:c0:47:4d:73:4b:
         24:7e:de:40:97:75:bd:27:f8:49:ba:99:f0:0c:e5:ab:bb:b3:
         18:bc:8c:06:13:54:a5:32:a9:aa:32:45:45:07:28:fd:0b:a6:
         c5:d9:86:ae:84:fd:75:ee:f5:f0:2f:84:f5:13:81:74:32:73:
         fa:0e:7a:fb:68:8b:3b:e8:12:2c:33:fe:6f:d6:60:b1:aa:6b:
         04:56:f1:38:e3:e8:8c:85:6f:20:45:7c:ed:2a:ea:1e:26:13:
         c6:c7:fa:77:36:f0:28:b6:59:f3:0a:ea:20:27:d1:6e:90:35:
         67:70:ab:00:69:a5:48:16:58:26:87:c1:1a:d8:e8:32:70:c7:
         94:0a:44:e4:07:2b:07:bc:9b:a0:66:c0:4a:88:3a:1d:2c:79:
         d4:0b:8e:ea:b6:37:4b:af:db:d4:4d:d9:9a:6d:7c:92:d1:11:
         28:98:5b:71:9c:cb:c1:1a:7b:b4:67:9b:ab:67:54:19:81:8a:
         b4:db:15:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:47 2024 by rpki-client on console-fra.rpki-client.org