Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ssafyCKJvjnWFuTClEdItsza-Xg.roa
File:                     ssafyCKJvjnWFuTClEdItsza-Xg.roa (raw, json)
Hash identifier:          6xhT8tOR2CP+tAXN4P3FOttS/iFEht6SAwRcEMmNn8s=
Subject key identifier:   B2:C6:9F:C8:22:89:BE:39:D6:16:E4:C2:94:47:48:B6:CC:DA:F9:78
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01CC
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ssafyCKJvjnWFuTClEdItsza-Xg.roa
Signing time:             Fri 31 May 2024 01:30:49 +0000
ROA not before:           Fri 31 May 2024 01:30:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.160.0.0/14 maxlen: 14

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 460 (0x1cc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B2C69FC82289BE39D616E4C2944748B6CCDAF978
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:35:0a:67:a7:4e:e1:55:41:33:2c:c3:bd:ac:
                    9f:df:7d:1c:47:f8:7c:d5:4d:33:ec:c2:46:39:be:
                    ac:1e:3f:f4:cc:c3:82:f1:de:27:a7:d6:62:c6:55:
                    12:c6:3a:3e:d3:5b:bf:91:86:df:a5:c7:00:f8:c2:
                    b2:29:26:52:23:30:b9:1b:65:ab:ae:5f:99:cb:20:
                    dd:4c:ea:56:d9:a0:e7:a8:4f:f7:9b:c1:15:f5:e7:
                    59:9a:0a:b5:68:e6:b0:35:60:c8:9f:9c:0c:e8:c6:
                    84:8e:60:ec:ad:63:e9:d6:4c:71:6a:6d:9e:5f:37:
                    90:78:fb:0f:6a:9b:d2:c9:a7:46:cd:e6:e8:a3:15:
                    4e:76:e7:2e:bb:59:a4:d1:0a:f6:aa:36:48:11:f1:
                    38:8b:6e:0a:2c:67:05:18:a4:e7:53:12:69:c1:02:
                    b2:79:12:7a:34:58:2e:5e:10:a1:12:fd:5b:9b:20:
                    d9:e9:de:9e:53:24:54:19:67:2f:c4:13:23:3f:b5:
                    5e:c4:68:a5:6b:5b:e0:fc:31:69:f9:47:c1:2f:c1:
                    66:de:2c:99:6c:97:7e:a5:cc:3b:64:be:01:3b:80:
                    a6:62:1e:86:3f:96:cb:87:e2:a4:13:4b:20:1a:72:
                    4d:bc:8f:32:9e:10:3e:89:bf:df:3a:db:2e:b3:e0:
                    96:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:C6:9F:C8:22:89:BE:39:D6:16:E4:C2:94:47:48:B6:CC:DA:F9:78
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ssafyCKJvjnWFuTClEdItsza-Xg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.160.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         d2:24:b3:43:c8:bd:35:be:ca:c1:f8:b8:0a:6a:30:59:ab:30:
         e5:ce:7b:cf:90:66:e5:d4:77:43:a2:44:7f:db:4c:6f:de:d1:
         e0:07:40:3c:b4:22:e5:5e:41:2b:ae:2b:be:33:b6:67:11:f9:
         89:80:e1:4e:82:ed:e2:8b:d1:27:59:c6:91:32:47:3e:75:a1:
         4b:45:0d:b1:4c:92:84:9c:c1:70:df:24:90:0d:5a:2a:81:f2:
         ce:73:f1:39:ee:30:aa:0a:af:24:5d:da:2b:71:b7:e5:0b:b6:
         60:11:bc:96:62:6d:33:cb:d3:26:49:84:00:77:39:4c:09:79:
         f7:63:9b:de:27:94:24:62:ef:e5:ee:df:76:c5:ed:de:53:92:
         f8:92:62:9e:e6:1e:35:ab:0d:b8:9f:5a:84:57:c9:b4:84:6a:
         6d:02:43:98:86:e2:f2:7f:92:82:c8:7a:e4:e8:06:62:c9:61:
         c1:ef:98:49:3a:44:38:26:d0:d7:24:2d:05:f9:b8:f3:2b:08:
         75:43:0c:0f:26:11:67:52:bb:bf:b4:94:4f:d5:39:8f:9d:88:
         45:2b:7d:9e:d7:07:4e:ce:4e:d1:33:7b:d1:a9:8b:5b:d9:91:
         f2:2c:f1:68:53:eb:e3:2f:64:c3:8d:e3:bf:90:9d:01:0e:6c:
         a9:ca:41:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org