Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/Ldb6KBI_BPhT0bSWNd79koVC2KY.roa
File:                     Ldb6KBI_BPhT0bSWNd79koVC2KY.roa (raw, json)
Hash identifier:          ZmX/YQNFqCfC8Ytv0rS47BnFFcx90r9dipvRjEf/6g0=
Subject key identifier:   2D:D6:FA:28:12:3F:04:F8:53:D1:B4:96:35:DE:FD:92:85:42:D8:A6
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       10
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/Ldb6KBI_BPhT0bSWNd79koVC2KY.roa
Signing time:             Mon 20 Nov 2023 03:46:23 +0000
ROA not before:           Mon 20 Nov 2023 03:46:23 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        124.146.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:46:23 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=2DD6FA28123F04F853D1B49635DEFD928542D8A6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:d9:98:6d:bf:c7:db:9c:a1:18:6e:79:37:3f:
                    34:4a:79:e6:2c:16:04:ba:44:f1:5b:fe:f2:c8:da:
                    49:a7:5b:8b:b1:03:5c:31:f4:a3:cd:01:0b:bc:9c:
                    4a:17:6a:03:22:27:be:c0:17:bf:c2:88:36:7c:33:
                    88:08:49:67:38:b8:b5:a6:e8:91:8a:35:02:4a:04:
                    b7:0c:53:76:ef:19:e7:26:30:74:b4:b7:df:80:ac:
                    06:7e:85:1c:31:0f:d5:67:7b:48:2a:3e:47:f9:03:
                    ff:18:bc:e0:f2:3a:d7:66:0f:54:b4:5d:45:92:84:
                    5a:38:a6:cb:92:f6:bc:cf:10:a9:23:d1:a3:63:ce:
                    e5:fb:56:4b:8d:ba:39:47:d1:c1:1f:71:94:27:de:
                    bf:9a:00:37:a9:53:8c:03:d6:a3:bb:f9:ff:20:57:
                    4c:99:fb:6c:fe:b3:93:f8:b1:4a:74:d9:0b:0a:5f:
                    3b:e8:2f:c1:0b:3d:af:c5:75:20:e3:d8:42:86:da:
                    c3:c4:02:f2:83:55:35:d1:2a:44:15:24:a7:c2:a5:
                    bc:cf:26:e4:8f:a4:ee:2d:a5:f4:a4:cb:eb:69:2d:
                    d1:31:7c:14:eb:24:fb:de:e1:54:a4:30:aa:d2:a8:
                    f3:f6:dd:79:ed:69:35:04:43:d1:87:26:a2:5c:3f:
                    e2:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:D6:FA:28:12:3F:04:F8:53:D1:B4:96:35:DE:FD:92:85:42:D8:A6
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/Ldb6KBI_BPhT0bSWNd79koVC2KY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:fa:ad:e8:0d:e8:4b:84:98:40:4b:e1:a4:2d:c1:8b:74:4a:
         a0:0e:55:12:a8:c6:9b:8e:c4:c7:3b:92:b2:4b:53:e6:f0:46:
         e7:6b:76:7b:0b:88:d3:92:f8:87:a0:f0:0f:e1:3b:3c:fd:48:
         e1:f6:f8:a6:f2:62:6f:38:92:7b:f2:d2:0c:f9:67:96:c4:de:
         39:66:ee:47:fd:54:bf:c5:76:56:96:c4:82:04:90:f1:58:1c:
         b2:8e:6d:3d:fb:53:c5:f3:fe:de:78:67:a7:80:ea:12:77:f3:
         97:48:64:e3:54:e5:07:e8:9f:8a:74:9e:7b:f8:3c:24:ae:9e:
         d3:e9:ba:e5:20:9b:82:57:98:b5:09:13:a6:d7:82:95:0b:e7:
         6d:27:1b:3f:67:77:55:20:94:4f:87:7f:4a:eb:94:53:3f:92:
         6a:d6:42:be:de:9f:29:f0:4b:0b:4e:61:86:d6:99:9d:fa:62:
         06:ac:f5:12:35:64:d1:09:c4:40:96:ee:7c:d6:7b:f4:d6:2a:
         a6:f3:73:d5:6e:85:40:c8:1c:d3:1c:c6:d2:6e:44:96:df:c2:
         59:6c:04:00:e0:79:9b:77:fc:07:6f:9f:e3:b6:58:42:84:93:
         f6:42:81:89:7d:9b:c2:4a:c0:64:4f:09:e8:f7:a5:7f:72:1b:
         c5:0f:37:93
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:17 2024 by rpki-client on console-ams.rpki-client.org