Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/rKQpgwD7fPnlq8RIMHumRm3G26Y.roa
File:                     rKQpgwD7fPnlq8RIMHumRm3G26Y.roa (raw, json)
Hash identifier:          KsBfBav0x16KVH6KudcCgSoTS7/E+SUQXsuL42aTKnA=
Subject key identifier:   AC:A4:29:83:00:FB:7C:F9:E5:AB:C4:48:30:7B:A6:46:6D:C6:DB:A6
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       B8
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rKQpgwD7fPnlq8RIMHumRm3G26Y.roa
Signing time:             Fri 31 May 2024 01:31:55 +0000
ROA not before:           Fri 31 May 2024 01:31:55 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        202.247.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 184 (0xb8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:55 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=ACA4298300FB7CF9E5ABC448307BA6466DC6DBA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:ea:79:e2:c2:53:a8:ca:e6:01:d7:77:50:1a:
                    b9:0a:74:9d:f2:21:16:87:e3:a8:7a:98:1b:43:3d:
                    6c:fd:db:c9:c1:65:07:13:d1:5e:e7:b1:aa:6a:8f:
                    89:b3:87:54:fb:82:af:b8:ac:44:48:ce:4f:89:de:
                    ca:b0:94:9f:99:a1:ff:a7:e4:04:4e:f8:8d:e2:75:
                    75:9a:27:a2:fb:ad:39:22:3b:35:ae:99:1b:e5:b8:
                    da:90:f9:6d:c3:82:c7:03:46:c3:b4:48:25:83:f2:
                    76:d2:44:f6:ee:66:11:b9:08:67:18:b9:f9:67:a1:
                    4a:b1:69:e7:12:d0:34:72:b6:fc:2a:25:24:28:2e:
                    cc:90:47:7c:ea:f8:fc:ab:e7:e7:31:4c:f3:92:44:
                    5a:70:08:89:7c:ce:3e:1d:89:80:24:bd:e7:81:28:
                    fa:3f:ba:84:6f:bc:26:56:ef:ac:d1:ef:75:b1:52:
                    3c:ff:8e:11:43:60:d0:06:f1:c7:9d:7b:00:4a:63:
                    ba:ec:9b:6c:9a:a6:86:e1:63:bc:33:65:38:cd:78:
                    6b:2a:bd:f7:7b:e7:08:91:af:ec:ce:fb:ac:1f:a9:
                    a0:eb:4c:75:7c:5d:ee:37:28:f5:7c:4c:46:f4:2d:
                    26:22:09:a2:cb:fe:e9:39:04:fe:45:2d:da:81:b3:
                    c6:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:A4:29:83:00:FB:7C:F9:E5:AB:C4:48:30:7B:A6:46:6D:C6:DB:A6
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/rKQpgwD7fPnlq8RIMHumRm3G26Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         4b:c9:ad:78:06:9d:a9:6a:41:b7:db:d2:dd:9b:3f:cf:73:0f:
         87:93:4b:b1:14:96:dd:e2:99:13:68:9e:6d:d0:da:3c:02:99:
         f2:f0:f1:50:1a:6a:1f:8a:6e:86:d4:8c:af:0f:16:d1:3f:0c:
         77:93:9c:2d:80:31:42:d1:7f:4a:e0:c5:1d:ae:75:f8:12:ba:
         89:c6:43:b5:a9:dd:94:48:12:7d:15:e5:bf:c5:52:c4:ca:c4:
         75:b9:07:9e:97:78:c5:de:18:f6:33:40:25:a3:35:dc:e5:b7:
         d7:4b:01:eb:d7:e4:41:dd:7d:e1:fa:4f:96:6c:e4:3e:e6:0c:
         c0:f3:8b:e0:cf:63:4b:a4:01:77:52:cc:c0:bf:d3:3a:d6:45:
         b3:f3:0e:12:04:f8:5b:f0:9e:37:cb:6f:b6:75:e7:5f:5c:c2:
         52:0e:cd:cc:ed:95:26:92:03:97:fb:0d:68:1c:a9:b4:81:b2:
         56:4c:1e:73:9e:6f:60:04:b5:4a:35:33:a8:96:e5:8f:c7:71:
         fa:96:a2:45:1e:f4:83:12:ce:c1:11:62:5f:0f:96:a3:3e:68:
         e9:d6:14:e1:c2:b0:5f:cb:fa:81:dd:65:79:ff:9c:ae:eb:5b:
         2e:a1:65:38:a5:3e:a8:0d:7e:97:22:00:1a:3b:0a:ff:a8:71:
         64:44:dc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:52:09 2024 by rpki-client on console-fra.rpki-client.org