Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/B8ppGxvXBIRxF5qWgM_VzQdowk8.roa
File:                     B8ppGxvXBIRxF5qWgM_VzQdowk8.roa (raw, json)
Hash identifier:          woapJ4jLlOYh0p5T4Z3FrN5zL8aPRx8PaAKjbYpoWDE=
Subject key identifier:   07:CA:69:1B:1B:D7:04:84:71:17:9A:96:80:CF:D5:CD:07:68:C2:4F
Certificate issuer:       /CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Certificate serial:       0F
Authority key identifier: 0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/B8ppGxvXBIRxF5qWgM_VzQdowk8.roa
Signing time:             Sun 01 Oct 2023 01:31:16 +0000
ROA not before:           Sun 01 Oct 2023 01:31:16 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     0
IP address blocks:        160.195.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 10 May 2024 01:42:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81D1E559B0F1955274E1E362C50C70362F461
        Validity
            Not Before: Oct  1 01:31:16 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=07CA691B1BD7048471179A9680CFD5CD0768C24F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:de:68:0a:a8:c7:9e:4c:d0:09:03:c1:13:a5:
                    be:0d:4c:11:95:4a:9d:ff:c7:26:f6:f1:a7:76:40:
                    cb:e4:50:7f:d5:f8:cf:61:96:fd:6d:60:e7:63:f7:
                    9f:3c:35:21:02:53:80:97:0c:ee:9d:c1:b5:a6:01:
                    fe:7d:cc:b7:b2:ca:20:4a:14:50:5f:0d:50:aa:a7:
                    81:11:14:32:a1:e2:c3:a7:82:c9:8f:98:10:f2:30:
                    c5:f8:48:ab:28:b4:8f:d7:4a:54:ef:d5:19:d5:25:
                    fa:e1:7b:db:6c:70:36:e2:9c:c3:f0:b1:c4:7e:14:
                    0d:3e:16:df:87:53:d4:64:15:c7:d8:4e:d6:a3:46:
                    f6:dd:54:f6:bc:a5:28:0a:c6:70:f3:b3:9c:f3:04:
                    11:6d:20:c6:83:56:b2:d0:b0:5c:9c:67:7a:30:da:
                    de:11:8f:ef:a4:3e:f0:fd:21:a5:18:c2:db:b3:cf:
                    86:a7:d8:75:5c:f9:d3:1d:e4:77:ac:ab:52:c0:7e:
                    43:67:3d:fd:61:79:46:bb:f2:cf:6a:ed:d1:f7:1c:
                    bc:d2:6f:3e:24:80:20:b1:c5:77:e3:4d:e8:a7:3f:
                    c7:20:94:86:97:48:45:f6:a6:4a:2d:e2:f6:ca:8c:
                    e3:d9:40:7c:a3:b3:98:04:be:e1:d0:07:5d:6b:1d:
                    ff:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:CA:69:1B:1B:D7:04:84:71:17:9A:96:80:CF:D5:CD:07:68:C2:4F
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/B8ppGxvXBIRxF5qWgM_VzQdowk8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         86:61:8d:56:21:5b:fa:39:83:6b:3a:8c:45:52:8e:f6:ae:87:
         7a:2f:d4:1f:b2:06:b7:dd:b8:34:4a:07:c4:51:9f:4a:73:04:
         fa:56:43:0c:61:a6:30:fc:21:91:31:a7:ea:c0:06:5b:1c:25:
         83:b4:27:e0:68:5b:49:dc:6e:ad:8b:c2:3d:5e:78:5d:a2:11:
         59:f8:28:37:5e:10:9f:0f:b9:70:71:67:ef:0d:63:a0:b9:f3:
         fb:3b:cb:31:32:40:b6:16:3b:eb:c7:87:bc:42:86:52:bb:d5:
         2f:8c:4d:cd:01:85:5f:10:0c:27:27:01:b6:bc:f8:44:40:67:
         f7:aa:35:12:bb:8b:e7:ff:7e:a0:bd:38:f4:2e:ff:40:3e:de:
         63:3a:85:70:49:a3:00:e2:06:d5:e6:12:71:18:06:f3:7b:d9:
         c4:be:b6:48:ba:59:7d:0a:d8:ea:c2:59:7f:f1:35:8a:8e:e1:
         ce:94:47:27:e8:05:ac:df:0b:15:96:a5:c3:78:f9:0c:3f:02:
         32:ad:4b:b7:24:30:53:55:2f:35:20:66:b3:ea:9c:1b:c3:3d:
         71:29:54:3c:ff:f8:8e:c6:5e:07:7a:13:3a:80:10:1e:64:11:
         c1:d4:08:2d:85:4e:87:6e:a8:d7:dc:1f:9e:85:b4:a4:ed:6b:
         26:26:a8:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 3 11:55:36 2024 by rpki-client on console-fra.rpki-client.org