Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6AgBZHB-FdVHM5HaMUm3qLY0NlA.roa
File:                     6AgBZHB-FdVHM5HaMUm3qLY0NlA.roa (raw, json)
Hash identifier:          uhW8OcSUli2p2hNa8sm8mQZx2Ba95tHFDDzdroArPxM=
Subject key identifier:   E8:08:01:64:70:7E:15:D5:47:33:91:DA:31:49:B7:A8:B6:34:36:50
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       AA
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6AgBZHB-FdVHM5HaMUm3qLY0NlA.roa
Signing time:             Thu 29 Feb 2024 01:30:14 +0000
ROA not before:           Thu 29 Feb 2024 01:30:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        14.132.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 170 (0xaa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 29 01:30:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E8080164707E15D5473391DA3149B7A8B6343650
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:4d:c4:aa:ae:68:47:b4:d9:0c:95:50:11:6d:
                    5a:21:bc:de:76:49:8d:c4:cb:4f:e4:a7:77:43:9a:
                    de:9d:b8:5b:ce:b4:fa:0d:5c:4d:ab:22:f5:67:cc:
                    53:99:62:47:f6:63:92:de:5e:73:0e:57:40:11:57:
                    ab:de:8a:37:94:54:2f:5d:13:e8:41:fd:07:9f:5d:
                    74:3c:7c:20:b5:86:a4:75:a9:ef:7d:b2:ef:aa:60:
                    4f:2c:0b:01:86:62:86:a3:71:14:b1:79:14:6a:a9:
                    0b:c3:5e:55:f3:32:5f:bb:56:5a:f4:59:5e:cf:17:
                    d5:21:eb:a5:fe:5d:66:39:7a:87:a2:19:eb:51:51:
                    cd:5c:11:80:50:22:65:0b:b9:b8:fa:39:eb:89:77:
                    93:9d:91:7e:d5:93:a9:fe:b9:9b:d1:c4:72:10:a3:
                    dd:7f:8b:3d:d2:6b:24:58:1d:04:59:b2:0c:a9:d6:
                    5f:90:a9:8e:2d:86:5b:4f:c8:60:c5:8d:f4:c0:38:
                    4d:f0:a4:9f:9d:92:70:79:fe:84:5e:fc:3a:08:1d:
                    e0:5d:57:91:95:01:5d:28:b5:64:39:87:22:d6:62:
                    b2:58:00:72:2d:91:54:31:cb:ee:d2:e1:68:64:38:
                    67:c0:c7:9b:0e:b7:5b:7f:8f:31:d2:00:4a:28:d3:
                    b1:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:08:01:64:70:7E:15:D5:47:33:91:DA:31:49:B7:A8:B6:34:36:50
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/6AgBZHB-FdVHM5HaMUm3qLY0NlA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.132.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         88:7f:ac:21:0d:28:ec:01:fc:65:a5:91:92:61:00:4b:05:92:
         e8:72:e7:cd:e9:a6:5a:5c:54:6b:cc:c8:80:24:d9:c5:7a:9c:
         d5:6e:7a:95:9b:e9:c6:fc:6b:53:40:e0:a2:1c:57:c8:b5:84:
         c8:c6:a8:4d:2c:da:7e:db:5a:39:65:78:8f:af:ae:34:a1:22:
         df:15:30:41:42:f7:a6:d7:6e:25:d9:09:bc:02:8f:8d:31:fe:
         3b:8f:6c:27:28:82:ef:b6:83:e0:0b:c8:6f:45:2b:74:e1:a8:
         01:58:fc:f8:42:f9:b7:61:ac:83:ef:c6:f4:91:2c:f6:c2:e3:
         94:82:89:50:e6:25:72:68:3a:f2:73:f0:60:19:12:ce:9a:d7:
         f1:29:91:09:cc:3a:2e:f5:c8:74:fe:15:1c:3b:36:86:e1:17:
         0e:59:e3:82:00:96:c5:08:30:d3:fc:5e:8c:e3:e0:e6:11:01:
         3e:91:05:95:97:a7:d6:43:56:f6:c0:b6:ac:c1:0e:b8:06:89:
         0a:00:84:55:ce:09:66:ee:db:42:3a:44:17:ce:2b:db:40:ce:
         34:27:57:3d:09:46:a0:95:9e:b1:7c:2b:8b:d2:4c:ad:b0:8a:
         45:10:d5:c5:7b:b3:2a:46:ca:c2:a4:a3:5a:5a:10:87:e3:b2:
         d3:54:19:da
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org