Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/zhdj89E9PJM7i7W_RdHm57BxDOw.roa
File:                     zhdj89E9PJM7i7W_RdHm57BxDOw.roa (raw, json)
Hash identifier:          d2xseYiA4+r77CzqRT3nDmJ/+BlJyqL5zzhC9YKXJs0=
Subject key identifier:   CE:17:63:F3:D1:3D:3C:93:3B:8B:B5:BF:45:D1:E6:E7:B0:71:0C:EC
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       AC
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/zhdj89E9PJM7i7W_RdHm57BxDOw.roa
Signing time:             Fri 31 May 2024 01:31:51 +0000
ROA not before:           Fri 31 May 2024 01:31:51 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        218.227.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 172 (0xac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:51 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CE1763F3D13D3C933B8BB5BF45D1E6E7B0710CEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:4c:22:24:10:26:d2:99:ce:66:4f:8e:a8:8b:
                    d4:d7:fd:4d:09:c2:cb:4f:b7:e1:8f:de:d2:e7:ed:
                    82:33:a7:b5:ad:68:c2:84:92:84:35:c6:f7:e3:dc:
                    e6:eb:74:c2:d9:43:30:f7:2c:ca:6a:62:16:58:01:
                    61:be:e3:b6:db:10:4a:9d:b9:3f:33:0d:f0:30:dc:
                    7d:1b:10:d6:dc:bd:89:ee:44:92:ee:a7:d9:d0:da:
                    a4:01:8a:b6:43:b1:32:69:3e:3b:85:2a:bb:44:bc:
                    d3:42:0b:49:6b:c9:f6:d0:d8:ec:e5:8d:5a:c7:2e:
                    e4:40:7d:c0:a2:3e:e1:3b:6e:9f:a0:e4:7c:9c:08:
                    7f:3e:28:fb:18:21:5e:d9:d9:aa:e0:0c:fc:a6:66:
                    5d:ec:0c:d0:07:a4:8b:56:09:6e:f6:31:2c:f4:9a:
                    c1:71:50:44:4b:7e:7b:13:8f:7d:01:f1:8f:76:e4:
                    ac:83:86:fc:39:0f:76:26:15:5f:6b:a6:d7:ae:c4:
                    da:af:86:51:c9:8b:76:f1:59:ae:bc:8b:55:67:1d:
                    23:1d:09:9f:0e:6e:0e:b6:b5:33:30:04:08:43:e9:
                    ad:ba:0e:8f:53:83:5f:9c:86:09:2a:81:d0:79:95:
                    04:a8:fa:5c:53:23:ff:3c:3d:e0:95:9d:56:97:2f:
                    53:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:17:63:F3:D1:3D:3C:93:3B:8B:B5:BF:45:D1:E6:E7:B0:71:0C:EC
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/zhdj89E9PJM7i7W_RdHm57BxDOw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.227.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:42:80:e4:05:3b:02:1e:3e:25:36:b2:ea:d7:ab:03:ad:b0:
         25:96:24:6f:29:e4:92:3a:ef:ee:ce:aa:76:bb:0a:06:4d:81:
         84:9e:5c:e2:de:13:55:1d:27:b1:4f:79:0f:f7:f8:57:84:2b:
         2a:b8:dc:dd:60:7d:84:53:32:a5:1c:29:28:c4:27:80:58:0f:
         aa:ea:0d:41:f3:a9:4f:59:a7:dc:ea:a8:11:74:a3:4d:79:b1:
         92:11:56:c5:60:eb:b1:96:a0:46:01:24:56:85:37:ff:6f:9b:
         c0:4e:00:b2:d1:e2:b0:51:e6:4a:34:e0:c1:0f:59:43:05:4c:
         e2:bc:41:91:17:c4:5a:86:55:df:49:99:a0:a6:17:0e:1b:07:
         be:b9:91:9b:6b:e2:71:3a:db:79:21:ba:1f:6f:29:7c:1b:ed:
         3d:f1:24:3a:34:39:9d:1e:da:46:60:ec:e8:34:2c:4a:09:35:
         02:be:d9:c4:60:f2:48:8d:e0:68:e7:07:80:80:c6:f1:15:96:
         63:e7:50:51:de:82:aa:09:20:8c:62:e8:96:94:c7:61:b8:25:
         f5:97:26:99:0a:47:3f:81:88:36:ca:de:a6:85:00:91:c1:8b:
         b0:a4:86:99:01:8f:83:28:97:cd:e7:5f:fa:46:b5:e7:75:80:
         36:e3:b9:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:49 2024 by rpki-client on console-fra.rpki-client.org