Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/v51Bzad1X2l7Ycj0IBTNsxicpcI.roa
File:                     v51Bzad1X2l7Ycj0IBTNsxicpcI.roa (raw, json)
Hash identifier:          KfzcTQnKhlpsmojvk8n2na0ialNIdcIRWUjRdwk8CrI=
Subject key identifier:   BF:9D:41:CD:A7:75:5F:69:7B:61:C8:F4:20:14:CD:B3:18:9C:A5:C2
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01D2
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/v51Bzad1X2l7Ycj0IBTNsxicpcI.roa
Signing time:             Fri 31 May 2024 01:30:52 +0000
ROA not before:           Fri 31 May 2024 01:30:52 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.232.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 466 (0x1d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:52 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=BF9D41CDA7755F697B61C8F42014CDB3189CA5C2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:af:1c:04:3f:89:f4:5a:b8:e1:db:b0:41:6c:
                    36:bf:07:b6:97:a7:28:a6:10:67:17:50:13:5e:84:
                    a6:65:c6:b3:13:c8:f5:a3:52:2f:2b:7b:75:e4:5e:
                    5f:37:ff:d3:1e:93:77:89:37:8c:59:bc:aa:8c:4a:
                    53:b8:9b:5a:8a:b7:ea:7a:c0:e2:22:67:99:cc:37:
                    35:39:d6:76:2d:04:4b:da:1b:30:28:bb:00:8f:c0:
                    9c:56:78:de:94:70:97:9d:15:41:5c:a1:e0:d0:cb:
                    bf:a6:9b:d9:d9:c6:4e:14:4d:29:e0:f9:db:3d:39:
                    a5:f9:a8:78:45:80:20:c0:2c:c0:8e:eb:80:44:37:
                    0c:98:b0:9e:69:e7:bc:c9:6d:10:7f:7d:24:19:ec:
                    12:77:0c:96:6d:14:6f:10:fa:ea:35:b9:ed:56:20:
                    a9:04:4b:2e:15:8b:7f:17:49:88:f8:a8:84:19:dd:
                    06:b6:25:2c:d0:e7:b5:3d:3c:8c:8d:b3:46:8d:47:
                    95:05:8b:b2:69:0c:16:9d:f0:2c:81:54:d5:0a:59:
                    da:f6:3f:a8:02:c1:24:04:79:78:12:7b:e7:67:77:
                    f0:50:cc:3e:e7:db:ec:03:43:55:39:b8:2f:54:38:
                    37:b2:39:6c:33:92:56:e4:50:f2:8b:d0:f7:61:ba:
                    50:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:9D:41:CD:A7:75:5F:69:7B:61:C8:F4:20:14:CD:B3:18:9C:A5:C2
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/v51Bzad1X2l7Ycj0IBTNsxicpcI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.232.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:a1:57:a2:22:8e:54:2c:4a:41:3f:7f:e5:a5:c9:18:65:7a:
         c1:69:68:26:c1:17:e0:e7:61:4a:1a:bd:02:07:f2:ff:96:43:
         0e:8a:20:82:32:ae:67:2e:18:e8:61:13:78:58:99:cc:9b:30:
         15:8d:79:9b:70:79:ac:cf:84:7a:31:b6:24:30:bf:1b:44:e6:
         62:21:ae:58:d0:cf:1d:48:f4:3e:c4:60:08:89:3a:10:75:67:
         24:fd:55:e8:73:0b:fc:32:54:b2:b4:54:04:8d:2e:26:f8:ed:
         b8:bc:21:65:40:54:38:7d:a8:51:01:ee:a8:cd:cf:1a:72:0b:
         66:1a:4a:a5:82:68:31:9a:d7:d5:a6:90:2d:b7:d9:e6:24:8c:
         dd:bb:ad:e6:eb:11:64:c5:f1:da:83:5d:46:bd:ab:bb:dd:71:
         72:67:22:c4:84:d3:64:8a:3b:2f:4d:ad:6f:0e:45:25:49:77:
         0a:91:a4:06:e1:ec:7b:c8:b1:e2:e4:4f:3f:ed:2f:20:b9:78:
         80:ba:eb:5c:6d:99:d8:6e:c1:2a:e6:16:dd:3f:70:30:dd:23:
         5c:76:49:85:e7:25:53:8e:4c:f5:91:f8:0d:2d:a7:c4:db:7f:
         ac:86:8b:f8:93:ef:b4:a6:b2:31:4f:ef:74:b2:37:a9:24:14:
         f9:85:e1:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org