Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa
File:                     6PnOE3rhmtBdg4sNDS8rpFg5guw.roa (raw, json)
Hash identifier:          GJ7bbGtjASLCfdP1Gh3kuWO+rv9q68o5MgkEKo4sbXg=
Subject key identifier:   E8:F9:CE:13:7A:E1:9A:D0:5D:83:8B:0D:0D:2F:2B:A4:58:39:82:EC
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01AD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa
Signing time:             Sun 31 Mar 2024 01:29:06 +0000
ROA not before:           Sun 31 Mar 2024 01:29:06 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        61.214.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 429 (0x1ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:06 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E8F9CE137AE19AD05D838B0D0D2F2BA4583982EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:04:60:d5:57:4e:7f:c2:a6:f1:57:c4:ec:5f:
                    2d:70:90:20:63:78:f0:18:3e:24:90:d6:49:b9:de:
                    4f:5a:ea:14:b3:15:01:83:b4:13:ac:ee:0e:26:e9:
                    79:e8:54:09:ca:8b:75:81:fe:1b:2d:3e:ae:95:48:
                    41:04:a8:f4:a9:e8:85:ce:5c:8b:c2:c5:01:2a:e2:
                    8a:73:1f:ff:ce:ee:73:56:01:63:d1:37:a2:62:44:
                    de:3a:15:d8:56:7a:b7:3d:6a:5a:7c:16:4d:61:54:
                    1e:fa:5b:c8:02:41:e2:1a:d8:1c:5e:38:54:52:72:
                    86:ae:30:d2:1d:22:cc:ca:fa:a2:df:6d:46:67:d6:
                    cd:34:b7:36:49:5f:61:fa:9e:97:0c:3e:58:7c:54:
                    ff:da:4d:5a:a6:e3:f3:41:cb:9d:7a:de:33:5e:24:
                    e3:27:18:cd:5a:f8:8f:92:eb:b1:51:ba:1f:be:1b:
                    fc:ed:1b:43:7d:5f:c6:8e:21:15:f0:76:6b:f7:0d:
                    b7:41:76:bf:a4:af:7f:6d:f0:0b:30:fc:ae:d9:ab:
                    24:ec:25:cb:3d:bd:5f:01:e9:1a:a4:93:01:a9:aa:
                    b4:42:3f:59:10:16:9f:77:8e:be:02:41:6e:ce:67:
                    d1:db:34:1b:43:b9:3e:9d:c4:c4:6e:b2:d2:8a:c2:
                    38:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:F9:CE:13:7A:E1:9A:D0:5D:83:8B:0D:0D:2F:2B:A4:58:39:82:EC
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6PnOE3rhmtBdg4sNDS8rpFg5guw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b2:90:50:2c:74:f9:9e:a5:6c:16:47:9d:35:57:78:1a:a1:51:
         29:a6:31:ad:95:dd:53:c5:a4:ff:a5:38:b7:e6:5d:83:c3:e2:
         a6:4f:81:b9:16:f5:31:a8:1c:30:1d:ef:3c:5a:e3:70:a5:02:
         3c:b7:24:f7:14:19:c6:90:e7:f6:5d:31:d7:e4:40:db:b7:00:
         11:37:0e:8a:cb:f6:bc:42:2e:b5:23:28:c1:4d:1e:38:a7:de:
         f2:f4:6b:68:e3:d3:9e:8c:dd:fc:3e:fa:86:bd:21:bf:b2:6a:
         c7:6e:58:ba:f7:56:2b:3a:f1:58:b8:22:1f:4e:9b:d6:e4:eb:
         ef:cb:ce:af:44:bc:72:81:68:72:e7:e7:e2:e3:00:98:87:da:
         9e:a4:d7:83:e5:f9:e7:a5:55:15:84:a7:1f:be:d6:0d:3a:b1:
         07:89:b1:59:e7:cd:6b:b6:9f:aa:06:9a:38:97:bc:66:80:ba:
         06:80:83:d7:7b:53:4b:70:e0:4d:7d:be:98:5b:a6:7f:59:ca:
         4b:fe:c4:76:26:69:a8:75:b4:5a:d9:35:8e:b2:7c:d7:82:ac:
         b3:e4:3d:91:66:f3:9d:5d:59:2c:60:53:07:13:83:d6:30:a9:
         ec:09:16:6d:ee:6b:e2:54:7a:0d:25:69:1e:86:95:f9:d4:da:
         0b:38:13:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org