Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/4D-3hpcPooV4vuHqNjo_18KgdoM.roa
File:                     4D-3hpcPooV4vuHqNjo_18KgdoM.roa (raw, json)
Hash identifier:          eFWKuMGHs41l+AeRuBK7jzSXl7Kc5I1hrjKkfNtJCY8=
Subject key identifier:   E0:3F:B7:86:97:0F:A2:85:78:BE:E1:EA:36:3A:3F:D7:C2:A0:76:83
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       05
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/4D-3hpcPooV4vuHqNjo_18KgdoM.roa
Signing time:             Tue 22 Aug 2023 00:40:02 +0000
ROA not before:           Tue 22 Aug 2023 00:40:02 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        61.206.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 00:40:02 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=E03FB786970FA28578BEE1EA363A3FD7C2A07683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:80:67:f0:03:4a:1e:e1:9d:04:db:68:59:3e:
                    da:d4:b3:ea:f8:0b:e0:a2:85:cf:18:57:e7:89:77:
                    a4:b3:01:7b:78:81:77:d5:a2:c8:d9:10:30:26:70:
                    b8:87:80:a8:fc:57:08:8d:fd:5a:0a:6f:92:74:ef:
                    93:bf:9c:ec:e2:e0:54:6b:0f:84:e5:b8:b5:63:e1:
                    18:18:c2:67:3e:4a:97:8d:ed:20:04:7c:5e:72:fc:
                    31:88:56:8b:92:71:03:b4:6b:e8:10:46:dd:6d:60:
                    38:d3:a2:cd:ea:d9:e6:8c:a8:12:08:34:52:f9:9c:
                    0c:21:85:49:c6:10:64:04:45:90:96:01:20:f7:18:
                    76:6d:3b:12:02:24:1e:ad:11:5d:26:c9:6a:7a:95:
                    ec:dc:b5:69:32:76:ee:3b:b3:4b:22:86:2c:04:4f:
                    f4:d1:9b:a5:f0:f2:9c:2d:82:6b:71:b0:fe:70:63:
                    00:a7:dc:db:29:70:e2:59:fe:46:62:0a:32:94:0a:
                    d0:9f:34:7b:0c:e7:9d:65:62:84:84:3b:ed:4c:4a:
                    4b:52:cf:44:16:0d:54:f2:93:6e:7a:54:00:ec:0c:
                    bb:43:1c:a3:e4:c9:3a:dd:46:c5:76:7a:9a:d1:15:
                    67:4d:94:79:23:56:44:63:5a:2b:6d:36:9f:21:47:
                    3c:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3F:B7:86:97:0F:A2:85:78:BE:E1:EA:36:3A:3F:D7:C2:A0:76:83
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/4D-3hpcPooV4vuHqNjo_18KgdoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:07:0b:32:c9:8e:29:74:49:f4:6e:a5:6c:2f:a2:d5:92:d5:
         34:0a:41:a7:6e:24:96:00:f6:b6:9a:4d:1f:3e:7c:36:40:ac:
         18:ba:b0:58:e3:aa:df:49:ce:97:72:d9:92:1a:fa:1e:34:36:
         e8:1d:91:58:0c:09:a1:d6:0f:49:3e:51:87:c6:69:01:61:0f:
         9f:34:cc:23:92:4f:49:03:8e:d5:cb:5f:c2:7a:56:5a:f3:da:
         63:c9:3e:1f:9d:fc:20:f3:fd:25:ec:13:e2:3d:18:c3:e6:74:
         d3:55:73:d8:cc:ec:63:e3:b9:c8:fa:ab:9c:6c:b6:5e:aa:22:
         1c:07:83:0e:cc:e7:90:46:12:d9:4d:86:69:b3:f5:54:17:29:
         10:87:50:22:04:5f:22:eb:a1:7d:5f:17:ec:4e:d2:48:97:c4:
         b5:4a:17:45:22:95:00:fa:27:b6:59:00:30:5d:ed:82:f5:c5:
         33:ca:d1:cf:06:5e:ce:53:c0:9d:bd:55:13:3d:d0:92:50:c6:
         12:39:e1:20:44:54:e9:21:08:b7:8d:3a:28:fe:11:2e:62:1f:
         76:16:f9:67:99:26:0e:3b:b6:8b:d0:7d:fa:33:50:b9:da:ac:
         fb:fd:fa:0a:24:63:86:7d:6b:90:57:ba:9e:dd:4d:45:16:c9:
         ad:f0:76:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:40 2024 by rpki-client on console-ams.rpki-client.org