Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/CinuWuOHUMcE0NRx0-KSEzYKFjQ.roa
File:                     CinuWuOHUMcE0NRx0-KSEzYKFjQ.roa (raw, json)
Hash identifier:          VgyNYFVk+wvZSwd/JGJ5jIlUXAkFOOTatYSNyjw70i0=
Subject key identifier:   0A:29:EE:5A:E3:87:50:C7:04:D0:D4:71:D3:E2:92:13:36:0A:16:34
Certificate issuer:       /CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
Certificate serial:       24
Authority key identifier: 37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/CinuWuOHUMcE0NRx0-KSEzYKFjQ.roa
Signing time:             Wed 31 Jul 2024 01:29:51 +0000
ROA not before:           Wed 31 Jul 2024 01:29:51 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     45677
IP address blocks:        180.148.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37D74CF78B0031D2AA5C9AED388E7C0438C61692
        Validity
            Not Before: Jul 31 01:29:51 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=0A29EE5AE38750C704D0D471D3E29213360A1634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:cd:5b:80:47:5b:81:54:40:84:7c:48:65:6c:
                    f9:06:07:e3:1a:e1:f6:a2:d7:c4:32:06:06:cf:5a:
                    f4:16:72:ec:c7:a3:f2:68:33:fe:10:29:a1:28:34:
                    76:16:f7:d0:04:13:e8:64:f8:ca:50:ec:ae:1c:53:
                    5a:1f:90:da:89:2b:b0:97:fc:0f:b2:bd:d7:03:39:
                    8f:02:e3:e8:89:e8:b1:7c:62:46:b1:c1:00:e6:03:
                    5f:6a:35:88:75:74:2c:ae:87:dc:14:32:63:77:df:
                    41:3c:98:68:ed:4c:1c:33:fb:e7:c9:8d:62:a7:06:
                    c6:80:ac:81:0a:66:6f:7c:fa:ee:da:dd:df:ea:66:
                    ee:45:67:4f:db:54:8c:25:97:12:fa:a7:50:6f:9b:
                    4a:ed:a4:23:8e:2a:77:8a:2a:97:4d:13:35:99:94:
                    91:5e:05:37:50:e4:bd:67:d6:30:4e:51:e8:04:b7:
                    bf:2f:f1:1a:d4:10:05:58:a5:d0:ea:26:b6:e1:77:
                    56:2b:b2:12:9f:02:a2:be:d7:55:7e:1c:94:b4:7b:
                    e9:c3:13:83:b7:1c:04:79:57:d8:6f:6d:ab:10:f8:
                    cf:70:61:e1:a1:cb:db:2b:e9:a8:aa:bb:71:03:7a:
                    a7:89:71:86:21:c9:a9:1e:e6:bc:6d:4a:fb:a9:5e:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:29:EE:5A:E3:87:50:C7:04:D0:D4:71:D3:E2:92:13:36:0A:16:34
            X509v3 Authority Key Identifier:
                keyid:37:D7:4C:F7:8B:00:31:D2:AA:5C:9A:ED:38:8E:7C:04:38:C6:16:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/N9dM94sAMdKqXJrtOI58BDjGFpI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/N9dM94sAMdKqXJrtOI58BDjGFpI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/CinuWuOHUMcE0NRx0-KSEzYKFjQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0c:75:fc:e9:82:1b:a1:0c:16:ba:80:a9:d2:13:0e:48:0f:7b:
         2a:05:cd:4b:ad:aa:11:34:c5:0d:fc:f3:07:65:56:76:a5:87:
         64:b6:fd:96:a7:bd:18:17:c3:14:cc:e2:57:34:35:65:b1:7f:
         84:5d:2f:16:ec:26:eb:9f:43:73:f4:86:bb:b2:ca:5a:ee:0a:
         f4:b8:4c:16:c7:ae:d3:af:76:cc:03:39:e8:6c:43:b3:7c:5b:
         3b:12:2a:03:ab:94:43:8e:0c:2c:d3:ac:88:b3:48:f5:cc:39:
         e6:43:fc:f8:46:3b:e7:52:44:bd:fe:fb:57:cc:a8:01:a2:f5:
         67:0f:21:3a:c9:f2:af:0a:8b:29:5e:0a:3e:9c:f2:2e:c5:dd:
         d4:43:0a:96:45:24:7b:a7:c4:d8:0a:fc:f5:3f:00:70:30:e4:
         7d:ed:a5:d9:f7:e9:83:fd:ec:b4:f7:96:3e:85:a4:9c:25:be:
         4a:ca:bc:53:2d:14:81:2f:b4:66:c8:f9:80:52:08:ad:b2:f5:
         49:08:ed:63:15:13:4e:fc:2b:30:05:f1:91:7f:10:2e:19:cf:
         e1:c9:f3:76:02:51:19:34:c9:15:59:20:fe:57:84:1c:1a:f7:
         1a:06:24:f8:e4:01:1d:a9:e9:6d:1c:19:4a:79:f1:7b:20:ef:
         60:51:82:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:26 2024 by rpki-client on console-fra.rpki-client.org