Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/B0EPza3ZQnE2-jRXxYw7bdcqzBY.roa
File:                     B0EPza3ZQnE2-jRXxYw7bdcqzBY.roa (raw, json)
Hash identifier:          dHevsgxYRiY8nWcu7GbrW91qbxBR8ZSeINhND+Pagos=
Subject key identifier:   07:41:0F:CD:AD:D9:42:71:36:FA:34:57:C5:8C:3B:6D:D7:2A:CC:16
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       04
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/B0EPza3ZQnE2-jRXxYw7bdcqzBY.roa
Signing time:             Tue 22 Aug 2023 00:36:07 +0000
ROA not before:           Tue 22 Aug 2023 00:36:07 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        61.120.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 00:36:07 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=07410FCDADD9427136FA3457C58C3B6DD72ACC16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:48:aa:ce:cf:96:a4:ba:54:dc:e9:84:a9:c5:
                    3c:c8:8b:99:89:5a:e2:91:1e:88:41:02:23:a8:c3:
                    ff:39:f6:d9:0a:61:8a:87:80:e8:47:9d:e7:d1:8b:
                    01:0f:f9:8b:de:f1:dd:99:01:8a:00:51:93:a3:4f:
                    af:db:8e:40:c3:0a:0a:4f:e4:2d:ec:6b:64:98:c5:
                    28:98:91:e3:fd:36:3f:72:0e:e3:43:f1:2c:66:0c:
                    4f:8d:6a:a3:d2:c6:e1:a3:27:77:64:8c:9a:66:10:
                    b1:17:35:83:9b:f4:74:ea:e4:4b:cc:14:e0:48:9c:
                    f8:f1:14:25:a6:82:96:12:fc:06:0e:99:0f:69:3d:
                    0d:c4:f3:4e:99:37:d0:e6:7e:0c:12:d5:9a:31:b2:
                    7e:f9:c3:3d:e7:c0:07:92:fc:6e:b1:92:59:0d:6b:
                    f0:c2:85:54:55:ae:01:51:da:67:03:2f:4e:f1:8a:
                    24:db:35:0b:4e:09:8b:cf:3c:b8:a2:4b:f2:2f:6e:
                    c2:e5:49:c6:74:b6:db:93:c9:21:d6:e0:88:34:85:
                    e0:b9:e7:e2:45:51:61:e5:05:56:ad:93:2f:71:4b:
                    55:cb:96:b5:a7:69:0c:66:ca:8c:04:d1:d8:2d:45:
                    3a:24:c6:89:3a:fc:4b:74:73:9c:f4:88:f4:45:b4:
                    eb:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:41:0F:CD:AD:D9:42:71:36:FA:34:57:C5:8C:3B:6D:D7:2A:CC:16
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/B0EPza3ZQnE2-jRXxYw7bdcqzBY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.120.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6a:9d:e7:ce:a3:fd:2c:0a:72:13:1e:3d:6f:9a:cd:56:1d:30:
         63:10:c6:5f:c7:45:ac:83:97:ed:c7:cb:61:26:3b:c6:46:fe:
         98:41:8a:e0:53:92:68:a8:48:20:ca:78:80:6c:a0:74:f8:5f:
         ab:0a:f1:95:93:a1:5c:45:e3:f3:75:ad:5d:91:c9:7f:01:65:
         78:14:4b:fc:91:0e:52:8f:3a:2d:51:ae:c6:87:3c:a7:d3:d5:
         4c:8b:36:82:a6:86:87:29:01:d2:c8:2c:8c:59:83:e0:bd:c0:
         71:17:e5:9d:32:8e:ec:ba:80:13:7e:93:f1:f6:29:f5:4b:54:
         76:a7:a4:ca:5a:8d:7e:51:1d:a9:24:7a:89:a5:dd:c0:9d:6c:
         7b:2f:fd:a3:c3:3d:b7:82:11:c8:d3:bb:c2:b8:69:c5:76:0b:
         02:20:af:a4:42:49:a4:80:b7:12:f6:c5:6a:ca:c3:2b:51:d8:
         25:37:fd:ea:82:04:95:18:12:6b:e3:dd:7a:d3:81:a1:13:b3:
         7f:4d:f7:c6:56:08:2b:64:54:66:5f:d9:1e:4d:2a:66:64:9a:
         cc:64:cc:43:30:0c:0d:63:8e:6c:31:84:71:2e:24:5f:b1:b1:
         44:99:9d:9f:26:77:74:fe:92:cb:cb:fd:d0:bc:2f:fb:9b:25:
         f4:c8:b7:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:40 2024 by rpki-client on console-ams.rpki-client.org