Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2490/YOLyGxYOIJVf9gkmIcpVjdeeL_U.roa
File:                     YOLyGxYOIJVf9gkmIcpVjdeeL_U.roa (raw, json)
Hash identifier:          NO/DiXIAGW+9r1M5LHSnzqgvbU5SWASZFTetyhV94U4=
Subject key identifier:   60:E2:F2:1B:16:0E:20:95:5F:F6:09:26:21:CA:55:8D:D7:9E:2F:F5
Certificate issuer:       /CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
Certificate serial:       48
Authority key identifier: B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/YOLyGxYOIJVf9gkmIcpVjdeeL_U.roa
Signing time:             Tue 14 May 2024 10:12:37 +0000
ROA not before:           Tue 14 May 2024 10:12:37 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7687
IP address blocks:        160.246.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8E53C5244B7F9A76D5F9DF9FBAF61E57B2EA93B
        Validity
            Not Before: May 14 10:12:37 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=60E2F21B160E20955FF6092621CA558DD79E2FF5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:fb:60:25:29:b0:c1:1f:74:ce:1f:76:24:6a:
                    f8:60:51:20:9b:be:fd:0c:7e:34:52:f5:1c:b1:40:
                    d8:2f:a5:a9:5b:9f:4c:0e:65:c8:19:b1:13:bc:7f:
                    ce:d5:70:8f:16:e7:d6:40:d9:51:19:3d:96:5d:b7:
                    33:42:cf:b3:b4:71:2a:1e:b8:d8:6a:c7:e7:c9:18:
                    9f:f2:e8:69:05:99:a4:e3:41:ed:be:76:af:5c:e8:
                    e2:a3:ba:f6:dd:29:dc:69:24:d7:35:00:25:0a:ab:
                    7b:89:43:d6:09:6d:37:71:2a:b8:9e:b9:03:33:fb:
                    27:05:39:8e:53:70:f4:72:fb:7b:f3:b6:82:54:79:
                    01:7e:10:50:2f:15:33:65:0d:a4:52:f8:33:5c:88:
                    ff:51:6f:80:cd:46:8d:1c:c9:ed:d2:a5:4f:2a:ed:
                    e8:70:55:58:69:d0:a9:b9:ee:3d:44:0b:bc:eb:70:
                    f7:93:69:e2:cb:67:71:4f:3c:0d:b2:47:0b:e4:bf:
                    86:c6:a8:66:55:a6:20:da:d0:46:ee:e2:16:f1:27:
                    84:96:4d:49:d6:bb:aa:d2:03:b8:66:f5:67:64:89:
                    db:82:2d:2e:33:3f:4a:17:84:0e:76:9f:47:cf:a2:
                    ca:1c:cf:f5:1a:ee:ba:e8:fd:9e:92:15:8f:21:88:
                    d1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E2:F2:1B:16:0E:20:95:5F:F6:09:26:21:CA:55:8D:D7:9E:2F:F5
            X509v3 Authority Key Identifier:
                keyid:B8:E5:3C:52:44:B7:F9:A7:6D:5F:9D:F9:FB:AF:61:E5:7B:2E:A9:3B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/uOU8UkS3-adtX535-69h5XsuqTs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uOU8UkS3-adtX535-69h5XsuqTs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2490/YOLyGxYOIJVf9gkmIcpVjdeeL_U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.246.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8d:a3:99:74:e2:02:d1:78:ee:ae:17:ac:0c:cd:e0:2d:4e:f4:
         1c:39:3a:0a:d9:86:58:99:4a:df:97:d2:6a:e2:aa:5c:d6:8f:
         44:c0:ad:dd:f5:e8:64:64:fe:ee:a6:48:3b:b6:e1:2a:0a:a0:
         eb:0b:60:88:02:31:9d:e1:36:07:7a:57:fb:e5:02:48:e9:75:
         39:29:e8:8a:a5:97:04:36:8b:85:85:31:8b:7e:38:3d:92:a3:
         7a:6d:35:66:76:fa:74:63:f7:4c:66:3e:cf:69:77:da:12:73:
         16:5d:0c:f7:3b:aa:71:65:c1:52:ad:50:9a:a4:c0:fa:aa:b0:
         8f:73:f7:3c:30:42:15:18:a7:bf:35:3c:22:13:d2:b4:02:84:
         08:fe:e0:6e:77:9f:a6:fc:cb:7e:c9:5d:26:b5:14:79:bd:28:
         5a:af:16:3b:98:46:6a:67:c3:5c:fa:cf:20:60:2f:42:d5:c0:
         84:f5:32:32:05:65:71:05:46:08:4c:eb:1d:25:4d:15:37:0d:
         18:f7:90:ac:4d:ee:1b:99:cb:b5:63:0a:27:5e:a9:04:2b:65:
         17:32:11:d3:d8:54:f8:c9:c3:8b:ef:51:d8:67:ef:61:db:49:
         5f:4e:5b:e6:1f:fb:bc:d3:6b:30:16:25:3f:ab:c7:62:60:f7:
         b5:c5:5a:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org