Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/-zmvRBlBFUO_oxDnfbxZrvYAZ-M.roa
File:                     -zmvRBlBFUO_oxDnfbxZrvYAZ-M.roa (raw, json)
Hash identifier:          NEL+qjbqn6USRfA7RS1nH7RUia67+XgHXKcLbGJyuUQ=
Subject key identifier:   FB:39:AF:44:19:41:15:43:BF:A3:10:E7:7D:BC:59:AE:F6:00:67:E3
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01AC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-zmvRBlBFUO_oxDnfbxZrvYAZ-M.roa
Signing time:             Sun 31 Mar 2024 01:29:06 +0000
ROA not before:           Sun 31 Mar 2024 01:29:06 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        61.208.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 428 (0x1ac)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:06 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=FB39AF4419411543BFA310E77DBC59AEF60067E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:73:10:12:c1:90:2b:79:5e:e8:54:44:3d:fb:
                    45:c6:54:ce:2c:63:bf:82:f9:cb:d2:ae:47:6e:c6:
                    52:88:db:48:a0:f0:0c:47:d5:74:10:ee:e7:2b:28:
                    92:ec:0e:cd:0d:d2:d8:d0:20:5c:d1:19:a8:20:49:
                    58:1e:b4:75:c6:50:4b:91:d4:e5:6e:60:cc:2d:26:
                    58:40:66:b8:5c:66:d8:f1:06:42:85:04:99:11:47:
                    a6:b6:75:fb:13:1d:53:8f:0e:40:3a:cc:9a:a7:a5:
                    10:5e:a5:8e:fa:78:23:aa:31:d2:c5:55:17:2f:47:
                    d9:0f:07:06:56:6d:29:65:a8:29:64:11:58:ac:9d:
                    75:d3:ac:04:54:47:db:f9:a4:5f:b0:ab:fd:32:42:
                    83:25:6a:14:76:c5:8f:32:05:a9:84:06:11:0d:41:
                    62:d8:b0:b4:21:37:4c:94:7b:d2:15:c8:44:6a:be:
                    d8:43:58:0e:da:58:9b:7a:b3:b3:2f:00:b0:b7:57:
                    62:4d:71:de:80:13:77:a7:d1:14:57:88:f5:26:f8:
                    13:a2:ae:6e:5e:d3:f0:19:11:1e:0c:08:c6:62:50:
                    a2:5c:74:a5:9f:f0:75:4b:cc:42:db:42:02:db:cb:
                    8f:88:15:be:8e:49:06:d2:2d:65:95:20:b7:1b:24:
                    50:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:39:AF:44:19:41:15:43:BF:A3:10:E7:7D:BC:59:AE:F6:00:67:E3
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/-zmvRBlBFUO_oxDnfbxZrvYAZ-M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.208.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         98:5a:f7:04:f1:ed:ef:12:87:a3:63:fd:15:a0:b1:42:e5:a4:
         e5:9a:fd:36:29:40:2c:73:d0:57:e7:30:47:ab:2d:c3:ff:55:
         65:1e:cb:c8:ec:36:21:9b:78:f9:dc:16:fa:c1:b2:9b:ff:fa:
         d3:d3:39:e2:6b:45:45:39:e9:0e:b4:f4:9b:3b:7c:62:c4:50:
         8e:ac:fc:ba:66:44:87:eb:eb:78:0d:a9:fa:0d:16:0b:2f:37:
         5b:ca:1a:f2:38:8a:f7:d9:9f:b4:ac:e8:05:87:9a:c3:68:b8:
         12:b7:dd:ca:b5:5a:b2:e8:78:bc:a8:c2:e6:40:91:fc:b4:b1:
         d3:cd:2c:1c:e3:3b:d3:a6:01:b8:b2:09:43:b1:14:b7:95:34:
         89:4c:ad:73:bb:13:7a:b2:08:71:6c:9b:3a:c0:4d:c4:15:c8:
         3e:a4:b9:49:c4:40:ab:57:9a:aa:77:ab:f2:9e:a9:a3:30:1d:
         6f:18:d1:7a:3a:cb:f9:9e:4f:6b:60:f2:45:49:c1:eb:70:5c:
         bd:d4:fe:6a:45:69:98:54:6e:5c:69:93:07:18:be:de:f0:86:
         0f:76:8f:56:1e:d3:cc:d0:1a:d8:7c:de:e2:8e:1f:d0:78:4b:
         0a:7c:db:87:57:f1:ed:f9:11:67:7c:4d:d6:d8:7a:9f:77:d2:
         da:8d:18:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org