Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/30319/u0GXN68ktnrIAPj14o0jAn95vUU.roa
File:                     u0GXN68ktnrIAPj14o0jAn95vUU.roa (raw, json)
Hash identifier:          7krw+3jY/5WvcxBVa6COxsxVh7stpvd7+9ZxLzsuKto=
Subject key identifier:   BB:41:97:37:AF:24:B6:7A:C8:00:F8:F5:E2:8D:23:02:7F:79:BD:45
Certificate issuer:       /CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
Certificate serial:       0F
Authority key identifier: AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/u0GXN68ktnrIAPj14o0jAn95vUU.roa
Signing time:             Sat 16 Sep 2023 02:15:26 +0000
ROA not before:           Sat 16 Sep 2023 02:15:26 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131161
IP address blocks:        2400:53e0::/32 maxlen: 128

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AFF61F445B6F8E921C7D767B3B676BF669816F6C
        Validity
            Not Before: Sep 16 02:15:26 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=BB419737AF24B67AC800F8F5E28D23027F79BD45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:ad:47:d6:f4:1e:f7:2d:b9:ef:ec:66:f8:
                    20:69:b7:c7:a8:45:36:d8:16:9c:cd:fc:15:2b:a2:
                    b7:8d:de:c8:f1:dc:46:91:ca:0b:d7:42:34:16:ce:
                    4f:03:ca:d9:19:b9:7b:5f:7d:a4:4d:d4:59:b6:0f:
                    37:e7:4b:5e:60:57:f1:0b:04:b8:0d:df:7b:5b:9e:
                    30:78:56:1f:30:d3:ef:43:da:0e:8d:a8:c7:96:3b:
                    5f:ce:33:55:2c:1c:51:be:ec:36:9e:c6:8d:98:53:
                    4a:b2:18:54:46:9a:70:f8:8f:48:58:4c:09:c9:c4:
                    0a:60:19:d9:34:b8:08:a7:7c:f7:4d:9f:a8:3d:d9:
                    ea:0b:9c:bd:3c:4a:d5:b7:f3:7b:c4:40:6a:a5:15:
                    56:40:6d:64:06:20:2e:4e:84:03:51:0e:f4:23:10:
                    19:68:c2:22:1c:4f:a7:56:5a:cc:f7:82:03:ea:e3:
                    20:ee:25:97:04:c1:46:d6:fc:97:bf:ef:40:f1:22:
                    c0:df:e0:0f:3a:42:b0:50:79:e2:c1:72:1c:ca:c4:
                    7e:d1:7a:c7:ff:3f:66:89:08:e0:49:45:42:95:c6:
                    f3:fe:f7:a9:4c:fc:00:49:99:2a:15:23:16:56:3d:
                    68:18:ed:a0:36:6a:dd:1c:2a:11:4f:e5:af:11:4f:
                    2c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:41:97:37:AF:24:B6:7A:C8:00:F8:F5:E2:8D:23:02:7F:79:BD:45
            X509v3 Authority Key Identifier:
                keyid:AF:F6:1F:44:5B:6F:8E:92:1C:7D:76:7B:3B:67:6B:F6:69:81:6F:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/r_YfRFtvjpIcfXZ7O2dr9mmBb2w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/30319/u0GXN68ktnrIAPj14o0jAn95vUU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv6:
                  2400:53e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:b4:0a:1d:69:6c:f4:5e:fe:f6:b5:f4:d2:57:92:52:84:19:
         d7:60:44:bc:6f:b9:d8:06:d5:75:cd:69:40:af:eb:45:23:bf:
         aa:58:d3:24:fb:1a:11:e3:53:73:c1:dd:63:2b:dd:33:42:66:
         5c:6e:ff:ab:05:fb:94:41:37:5b:5f:b1:cd:24:02:de:1d:37:
         a9:df:50:1f:92:5d:bc:be:7a:55:40:46:31:5a:05:0a:79:6c:
         b9:1b:10:ef:e2:0a:a0:9c:0b:c0:23:b9:5e:46:6b:6a:9d:ad:
         e7:e2:71:b9:f4:02:93:bc:78:25:d5:00:86:60:f5:2b:fb:21:
         2c:1a:20:85:20:4c:d6:6e:cb:af:8c:af:96:da:a6:d1:c4:30:
         37:c3:59:df:2d:3d:4c:f9:47:48:80:f6:6e:c7:17:11:12:c5:
         15:86:db:4e:a0:1c:c1:f2:01:1c:0a:8d:dc:2b:0f:24:ec:16:
         ea:6b:d8:36:01:4b:2e:77:34:1e:40:ab:f6:e7:bc:d5:a1:65:
         06:20:c1:ad:fa:87:ee:15:4e:0c:1d:42:68:1d:af:fa:2f:8d:
         c2:9b:94:cf:d0:e2:97:52:62:02:09:9d:8d:57:0c:c1:3d:e9:
         f8:10:84:e7:39:bc:cc:66:01:10:96:10:b7:65:89:60:24:25:
         3d:1c:af:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:28 2024 by rpki-client on console-ams.rpki-client.org