Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TQXWJ7SDmO2zHHUjJSW96rHwJc0.roa
File:                     TQXWJ7SDmO2zHHUjJSW96rHwJc0.roa (raw, json)
Hash identifier:          mcCYGgJw59jt3LY3yy5AIqx9Gg7WrhF7QrLIhkai20M=
Subject key identifier:   4D:05:D6:27:B4:83:98:ED:B3:1C:75:23:25:25:BD:EA:B1:F0:25:CD
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       4A
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TQXWJ7SDmO2zHHUjJSW96rHwJc0.roa
Signing time:             Thu 31 Oct 2024 01:30:13 +0000
ROA not before:           Thu 31 Oct 2024 01:30:13 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131971
IP address blocks:        202.1.208.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Oct 31 01:30:13 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=4D05D627B48398EDB31C75232525BDEAB1F025CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:43:20:b8:16:d4:68:30:25:57:b8:7e:17:d9:
                    de:5b:d7:4b:89:2a:12:67:38:54:91:77:ca:c1:48:
                    52:18:36:a1:33:15:99:d6:05:fd:32:7c:8a:ee:ac:
                    51:e6:7a:e9:8e:9c:e8:eb:11:49:b3:cb:37:79:1d:
                    c3:b8:ff:22:a6:75:48:68:ca:a5:27:45:88:d8:e8:
                    bb:1a:ed:67:34:cf:a7:2e:a7:ba:3f:34:ba:cd:80:
                    e8:2f:84:36:d5:24:48:dd:6c:85:54:8b:53:3d:df:
                    49:ef:fc:0e:6c:0e:55:f1:7b:7e:47:18:85:7b:e4:
                    7b:eb:f8:57:7d:55:e5:62:78:15:3a:b4:32:6e:b2:
                    33:cd:5a:ff:54:3a:0c:8d:9a:35:4f:e2:93:e7:1d:
                    8b:09:b3:03:aa:ba:32:7b:7e:7b:32:d4:90:1b:46:
                    ee:07:d7:f8:9d:58:eb:cb:e5:07:c5:1a:de:24:73:
                    bc:49:d2:e7:ff:2d:50:7e:77:d9:b9:97:13:95:ac:
                    43:29:17:06:f2:56:2c:db:f5:f2:c2:a3:93:4a:b9:
                    4d:2b:22:fd:0c:e1:53:90:cd:99:91:e6:80:7a:b1:
                    d7:80:d1:33:0e:bb:c0:1b:54:60:08:89:57:d6:40:
                    87:76:22:8e:9f:e0:1f:74:98:39:97:d7:1d:b5:b5:
                    f1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:05:D6:27:B4:83:98:ED:B3:1C:75:23:25:25:BD:EA:B1:F0:25:CD
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/TQXWJ7SDmO2zHHUjJSW96rHwJc0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.1.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b6:b9:8a:0e:5f:2d:75:52:b4:a2:c6:91:4f:5d:a2:5b:2e:b0:
         37:90:49:6a:7b:37:37:4f:1d:92:bb:13:ba:61:48:c6:b3:88:
         8d:14:7b:d8:aa:ea:ba:83:00:c7:8d:81:52:8d:44:9d:5c:6f:
         86:e8:cc:65:4a:b7:69:58:9f:3d:71:e9:3e:5e:84:58:f3:fd:
         e0:20:7e:96:4b:5b:69:8d:fe:e3:e0:d1:5f:6d:cd:10:0c:b4:
         b3:ff:6a:33:a2:6b:0a:60:3d:07:a8:82:67:98:a0:49:d5:5a:
         21:19:ca:e4:6c:f9:5f:ee:6f:12:e8:f8:c3:52:a6:3f:fb:47:
         2e:6b:6f:95:35:e4:f3:f8:d3:f8:e0:be:46:3e:7f:8e:d5:18:
         43:0d:e1:c2:78:6f:4e:eb:c5:8d:08:a8:e6:e1:71:1e:40:03:
         92:cf:dd:9d:92:d8:76:21:c9:6f:bf:c4:99:38:f3:a1:95:52:
         9b:0c:ab:68:8e:93:a1:be:9c:70:a7:24:a7:97:e0:64:f4:5d:
         e7:21:57:4b:ca:05:ab:1b:eb:76:0f:10:79:65:3f:64:2f:e5:
         c6:d3:0f:5c:1b:d4:72:67:80:48:53:db:f0:d3:4e:10:91:a4:
         de:cd:d4:75:d8:5c:bb:69:f7:a0:ef:dc:9a:c4:fa:4b:dd:20:
         31:53:98:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org