Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_svpWtj6SZ9Si11mZ2a1nKsV5Hg.roa
File:                     _svpWtj6SZ9Si11mZ2a1nKsV5Hg.roa (raw, json)
Hash identifier:          m35jPXxJ3UzcS4Jx9QgbJ14dJnEzP6ePfANmsR74vD8=
Subject key identifier:   FE:CB:E9:5A:D8:FA:49:9F:52:8B:5D:66:67:66:B5:9C:AB:15:E4:78
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       4F
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_svpWtj6SZ9Si11mZ2a1nKsV5Hg.roa
Signing time:             Mon 01 Jan 2024 01:30:39 +0000
ROA not before:           Mon 01 Jan 2024 01:30:39 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     6220
IP address blocks:        61.200.83.64/28 maxlen: 28

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 24 May 2024 08:22:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jan  1 01:30:39 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=FECBE95AD8FA499F528B5D666766B59CAB15E478
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:8b:b9:b3:af:a9:70:40:be:75:a3:b0:3b:c9:
                    26:78:3d:25:49:4f:5d:04:9f:3a:4d:19:ad:dc:8e:
                    c3:5b:94:da:66:63:f8:aa:b9:d4:3e:cc:b4:a0:05:
                    4a:b5:17:78:d9:89:b1:dc:26:3a:b4:ca:f8:db:fe:
                    39:6c:69:7f:8a:f3:28:46:d7:35:02:95:b9:b1:05:
                    18:97:1c:0e:a3:8c:35:8f:e6:b5:fe:99:85:05:1d:
                    18:2d:25:ce:38:d1:eb:7b:ee:15:ac:6b:30:8b:f9:
                    c3:2b:f8:bb:47:7d:1e:47:05:1a:a9:78:e8:d5:b3:
                    16:10:95:14:72:b4:fd:87:60:d9:27:d8:3c:6f:e6:
                    29:d6:8c:9e:3a:ae:58:7d:78:46:47:94:2f:a0:d8:
                    2c:e0:c4:2a:c2:ae:2c:86:36:86:75:ac:c9:fe:61:
                    86:f5:66:24:c3:54:9a:35:b4:40:d0:c1:98:f7:a3:
                    37:e6:c8:11:db:db:26:b8:79:e0:b2:fb:1d:2d:05:
                    6a:5c:a7:d6:24:f1:2a:32:1f:a6:93:7c:13:83:05:
                    9a:fb:5a:4b:16:04:46:8e:2b:ba:df:ba:b7:7d:2b:
                    e8:cf:7a:eb:c8:5c:55:e2:17:b5:96:84:82:4f:61:
                    2f:7f:71:63:23:af:c1:14:06:1a:7f:5c:c1:44:91:
                    b1:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:CB:E9:5A:D8:FA:49:9F:52:8B:5D:66:67:66:B5:9C:AB:15:E4:78
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/_svpWtj6SZ9Si11mZ2a1nKsV5Hg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.64/28

    Signature Algorithm: sha256WithRSAEncryption
         02:48:d4:e2:49:20:43:d6:26:3c:8c:70:34:a0:8e:33:03:ee:
         1b:3e:af:e9:11:0d:4a:49:9f:30:07:88:e1:7d:a4:a4:56:2c:
         62:35:22:a6:28:de:0f:5e:b8:d3:7c:58:f3:39:fa:01:c7:8e:
         5b:19:a1:77:0f:b9:9d:7f:a2:d9:e8:14:87:50:b0:cc:ef:fd:
         d1:10:13:54:81:a1:64:17:73:e6:90:9d:14:68:8c:23:06:c5:
         f6:42:5c:b1:b6:55:59:7e:72:98:96:9d:91:6a:a7:b9:ae:7b:
         20:8b:74:c1:55:13:42:67:f0:7c:6f:a2:f5:78:7b:e3:df:c7:
         10:30:cb:ea:3d:53:ba:39:04:ec:b7:f3:b7:67:32:4e:9e:71:
         e5:e3:82:b7:b6:67:67:76:f2:c3:6c:57:eb:81:28:92:85:8c:
         e4:dd:9c:72:e4:f4:cf:2a:d8:95:b6:45:ae:1c:ff:e0:de:32:
         a5:80:5f:08:b3:a0:2e:76:1f:d4:aa:6a:c3:0c:a1:5c:e7:8e:
         26:72:49:87:ad:9d:86:2a:3b:77:cc:81:f8:ac:0d:e4:a8:5e:
         9a:81:1d:22:f1:24:ff:d3:89:99:7b:83:1d:11:df:26:1e:20:
         10:71:39:06:0f:93:f0:e8:8e:bb:7f:5d:f1:4c:4e:e5:a3:c0:
         c8:af:8a:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 17 12:06:16 2024 by rpki-client on console-fra.rpki-client.org