Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/u5mJXlHcSzmQmgAx4Xg5xVMZUNI.roa
File:                     u5mJXlHcSzmQmgAx4Xg5xVMZUNI.roa (raw, json)
Hash identifier:          cj4igDaF/mcHKp2muJ8vXqDkhGZUjABhqtrCWXbimtk=
Subject key identifier:   BB:99:89:5E:51:DC:4B:39:90:9A:00:31:E1:78:39:C5:53:19:50:D2
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       17
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/u5mJXlHcSzmQmgAx4Xg5xVMZUNI.roa
Signing time:             Wed 06 Dec 2023 01:40:35 +0000
ROA not before:           Wed 06 Dec 2023 01:40:35 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        61.197.0.0/16 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  6 01:40:35 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=BB99895E51DC4B39909A0031E17839C5531950D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:06:49:76:45:8a:39:08:73:15:3f:5b:52:12:
                    1e:57:41:c4:d7:d5:e4:4d:d6:28:7c:dc:b6:56:3d:
                    73:8d:b3:df:de:58:d2:c2:19:45:d5:d8:88:d5:49:
                    98:16:53:ab:90:e9:e1:66:dc:ee:e6:8b:d6:e1:ff:
                    fe:0c:33:56:b2:62:dd:7a:42:38:28:b4:a0:0a:6e:
                    5a:d9:bc:ac:a5:fb:94:37:03:6e:b0:94:5c:2d:90:
                    36:11:b7:70:0a:3d:1e:77:2e:16:09:26:f1:b7:95:
                    1b:64:48:12:1e:31:35:88:62:be:a7:5a:37:3e:01:
                    2f:29:6e:15:eb:b3:68:1f:1b:c4:9f:b0:68:7e:9f:
                    1b:d4:a1:67:e1:15:b6:49:97:46:eb:b4:73:b6:55:
                    19:83:ce:6e:a8:a4:46:53:89:46:de:14:61:84:35:
                    73:79:8b:bf:69:d1:1b:a6:f3:c0:ef:1d:e0:e1:26:
                    7e:4c:31:06:1f:ad:a6:3c:e5:0f:a5:4b:85:da:0e:
                    a5:06:d3:df:05:6b:f8:a0:50:34:29:c5:90:0d:32:
                    86:e7:0f:3b:8e:0b:75:36:97:02:d5:a8:77:f2:70:
                    01:f3:8b:04:13:55:da:09:bb:7a:7e:82:6b:d0:ab:
                    4e:82:59:bf:cc:4f:50:56:34:7b:14:e3:de:98:b5:
                    9d:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:99:89:5E:51:DC:4B:39:90:9A:00:31:E1:78:39:C5:53:19:50:D2
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/u5mJXlHcSzmQmgAx4Xg5xVMZUNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.197.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         10:06:e7:21:d6:34:69:81:10:25:73:ba:2b:f6:d0:db:6c:5e:
         d4:c1:66:c0:05:ad:ac:2b:69:ba:1a:6a:b5:27:3e:1e:68:a9:
         aa:c1:77:8f:61:74:41:ba:d5:0c:da:47:d9:48:59:f5:ef:9c:
         96:06:5d:17:fc:ac:dc:8a:f2:4a:2e:28:30:e2:cd:d0:bb:19:
         ed:3d:03:94:35:0c:a5:d1:e8:3e:5b:36:f7:d2:71:73:59:0c:
         63:3a:96:34:30:0a:3d:f4:a0:57:b8:ce:4d:50:2d:a4:e0:f1:
         09:4f:b8:16:2f:41:57:0b:5c:bb:ff:2f:bd:c8:6b:c8:cb:f0:
         aa:38:59:48:45:01:10:bc:3b:cd:14:72:ee:e8:7c:40:af:23:
         11:80:04:38:12:0b:55:8e:ff:54:80:d5:a7:fb:af:1b:fb:79:
         29:06:11:5a:59:c1:59:4b:e8:2a:b1:0d:62:1f:88:d5:3e:8f:
         68:7d:b0:5a:a9:a0:c0:ba:66:21:e6:03:6b:8e:1e:7e:08:54:
         9c:c7:ed:0e:c7:50:4f:44:12:c7:11:fe:92:6d:a5:27:bc:7e:
         0e:71:8c:86:8c:33:f9:6e:0b:ff:e1:a5:15:21:21:e6:22:46:
         4d:8d:5d:b2:be:b7:d7:e3:2d:95:1d:1d:fb:d7:51:46:90:3c:
         d0:e4:dd:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:44 2024 by rpki-client on console-ams.rpki-client.org