Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/_l75C9F-ev7ofd1e2cNp6sW7pCY.roa
File:                     _l75C9F-ev7ofd1e2cNp6sW7pCY.roa (raw, json)
Hash identifier:          av0nrncvIAK3tap5JeXpksIo60b+51Lhf/O2Jsu4Yfw=
Subject key identifier:   FE:5E:F9:0B:D1:7E:7A:FE:E8:7D:DD:5E:D9:C3:69:EA:C5:BB:A4:26
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       09
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/_l75C9F-ev7ofd1e2cNp6sW7pCY.roa
Signing time:             Wed 02 Aug 2023 02:05:46 +0000
ROA not before:           Wed 02 Aug 2023 02:05:46 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        124.110.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Aug  2 02:05:46 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=FE5EF90BD17E7AFEE87DDD5ED9C369EAC5BBA426
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a5:34:19:f1:c8:e4:b9:e1:fd:0b:be:11:d0:
                    1a:97:34:a3:0b:58:6f:93:ba:df:78:13:e4:6d:55:
                    ce:15:f0:d3:7c:8f:ec:c2:fb:1b:d7:87:18:56:b8:
                    be:8e:a9:e5:e2:11:41:33:1f:01:b9:e0:bc:e2:d1:
                    a6:2f:5b:e8:a7:19:df:8f:d2:b8:29:cb:08:b3:4d:
                    67:f4:b4:71:fd:91:70:e4:46:a9:2b:e8:fa:a3:b2:
                    b1:1c:6a:54:64:ed:8e:f4:df:f5:b4:a5:c5:fc:fb:
                    ed:58:8b:1f:09:4a:82:2a:27:77:21:44:24:89:2a:
                    30:e6:63:26:cf:75:b9:2f:5c:10:b7:f8:a6:75:6e:
                    5f:d2:1c:c5:e3:29:24:f0:fe:26:5e:6e:fe:eb:27:
                    39:fa:d4:a3:69:e0:1e:13:eb:17:fb:f0:79:df:69:
                    dd:84:a1:7d:b3:6d:3e:d7:5a:6b:04:69:6a:5f:10:
                    c8:34:c3:f8:ed:15:0f:5b:ff:8a:16:00:44:83:08:
                    bd:9a:41:34:58:00:65:4e:21:78:3b:cf:21:a9:83:
                    93:4e:ff:3d:f5:61:d7:8e:68:2e:1e:b2:0a:d4:8a:
                    b7:b4:4b:5f:4b:9b:29:28:39:6a:55:00:f0:a2:1d:
                    b5:fd:41:03:6d:d3:10:f8:85:c6:26:a0:76:11:a0:
                    a2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5E:F9:0B:D1:7E:7A:FE:E8:7D:DD:5E:D9:C3:69:EA:C5:BB:A4:26
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/_l75C9F-ev7ofd1e2cNp6sW7pCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.110.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         59:54:e5:99:75:53:73:66:1f:2c:38:02:1c:af:b3:53:27:24:
         2f:21:8e:9f:ff:97:0b:e8:8a:39:f6:16:44:bb:9d:6e:bc:76:
         e7:23:38:35:59:cb:f1:10:d0:ca:8e:3f:8d:93:f5:d2:d5:49:
         8f:4b:57:7d:64:08:1d:d1:2c:f5:30:62:74:0f:73:73:8e:9c:
         cb:a6:0c:3c:16:cf:b9:d1:21:b1:2d:89:9b:7b:34:16:b8:cc:
         39:00:9c:2a:bc:77:b1:a7:91:d0:0e:1d:dc:25:d4:f2:f1:dc:
         38:02:25:1f:84:6a:08:f6:7b:bf:25:ec:6a:25:99:ff:05:7d:
         c6:bc:fc:e8:8c:d1:43:2c:18:9e:b8:77:ff:dd:c5:ff:8f:6a:
         30:81:cf:01:3a:bf:e8:72:ff:4c:ad:a0:ee:8e:63:77:1d:83:
         c5:d6:f2:84:dd:f8:c9:16:17:5e:0f:88:d2:f8:3b:3b:b1:7f:
         b9:82:ec:89:78:b6:a1:13:07:ec:ca:ef:c0:2c:4a:a3:9a:e8:
         ed:c8:17:43:17:e8:04:be:2d:98:51:fe:fb:7e:01:cc:2c:7a:
         40:35:05:e7:33:58:36:ef:47:d2:52:4a:a7:31:a6:56:72:e5:
         8f:40:33:6a:45:b1:55:21:cc:99:80:df:52:95:32:e2:a0:cd:
         af:8b:69:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org