Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/M3smmKEnalLBSPueVbATiU7UNW0.roa
File:                     M3smmKEnalLBSPueVbATiU7UNW0.roa (raw, json)
Hash identifier:          8X+9YO1a2w+mRoSLpoa/dgFSKXGKPHJCz0QLT5inW4Q=
Subject key identifier:   33:7B:26:98:A1:27:6A:52:C1:48:FB:9E:55:B0:13:89:4E:D4:35:6D
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       32
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/M3smmKEnalLBSPueVbATiU7UNW0.roa
Signing time:             Sat 01 Jun 2024 06:45:19 +0000
ROA not before:           Sat 01 Jun 2024 06:45:19 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        210.157.78.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:19 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=337B2698A1276A52C148FB9E55B013894ED4356D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:41:2e:9f:48:43:6c:72:b5:5b:1e:66:7f:e9:
                    b0:7d:be:04:41:8a:e3:a4:1d:89:1a:57:eb:f0:bc:
                    5b:08:0e:c2:b1:72:d4:bd:86:21:a6:23:4b:22:75:
                    1c:bf:9d:13:41:40:61:9c:e5:2e:98:18:f8:a5:c3:
                    26:89:68:ba:fb:ff:59:29:a7:7e:62:72:c0:76:61:
                    dc:79:ad:d5:8f:37:d3:da:db:9b:49:4a:1c:9a:22:
                    03:a3:88:ac:e1:47:d7:43:b0:10:dc:4e:e7:1e:f8:
                    9e:c5:7e:de:6a:a2:da:86:0f:4d:1d:c0:59:18:bf:
                    eb:6b:55:97:d8:aa:88:ab:71:e1:90:db:11:d8:ba:
                    88:65:46:b2:04:06:72:85:2f:99:6b:09:55:7b:a8:
                    1c:95:8c:a3:0a:b9:d1:32:c3:eb:32:77:f6:06:09:
                    77:ad:bc:89:c1:20:2b:17:d6:6d:95:13:63:b8:87:
                    2a:b3:4f:b0:d9:bc:27:35:10:9b:18:e7:8b:ae:38:
                    5a:43:7e:33:4b:06:fb:9e:df:c1:a6:e7:72:c6:65:
                    8b:ab:ec:dc:9b:25:49:6c:4e:d1:9b:35:3e:d0:b5:
                    58:46:ea:55:72:98:36:dd:27:03:50:f6:37:06:3d:
                    0a:c7:ff:ed:ac:30:26:5d:e2:9f:f3:1b:d2:6a:da:
                    74:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:26:98:A1:27:6A:52:C1:48:FB:9E:55:B0:13:89:4E:D4:35:6D
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/M3smmKEnalLBSPueVbATiU7UNW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.157.78.0/23

    Signature Algorithm: sha256WithRSAEncryption
         86:a0:3b:1d:d4:2b:b2:0d:c9:08:3c:68:0e:25:f9:13:ab:ea:
         7d:fb:fd:2a:18:e1:64:d1:a1:5c:5a:dd:59:4f:19:4e:15:b7:
         b6:60:91:a6:4d:8d:70:19:69:e4:f1:d2:b5:d2:53:9e:a2:56:
         4a:80:46:c8:ab:f1:25:53:cb:b9:45:a5:75:84:f3:3b:01:f6:
         66:5b:54:03:e9:81:7d:67:82:2b:88:2f:92:02:9b:72:20:ba:
         44:fb:57:45:65:49:6f:40:51:25:0c:08:d0:a5:82:f5:73:0d:
         b8:78:5e:c0:98:81:a8:aa:27:73:71:15:4e:7f:a8:3d:8f:41:
         c1:0e:1d:d7:ab:d5:56:c3:bf:29:94:17:ef:30:68:77:40:de:
         6a:0e:77:86:f5:e4:55:ff:89:d4:d0:28:32:57:fc:71:d3:34:
         a5:42:1d:6a:36:80:c4:14:b5:a4:54:b0:e4:3a:45:cf:70:1d:
         6f:b3:4d:8e:40:25:9b:d1:1b:80:b5:5c:ed:97:b6:39:14:27:
         15:8e:75:16:f7:b8:a5:86:4e:6a:8c:6c:b2:17:37:58:f7:6d:
         34:8a:3a:14:b7:75:13:60:13:c0:8b:e3:0c:4d:6c:73:26:46:
         7e:30:d6:ca:23:98:42:b7:cd:fa:01:b3:ca:a2:9f:e0:7f:f0:
         ea:b0:ea:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:18 2024 by rpki-client on console-fra.rpki-client.org