Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/Zkkk8wlIGOJQI2D06TStoE91a9Y.roa
File:                     Zkkk8wlIGOJQI2D06TStoE91a9Y.roa (raw, json)
Hash identifier:          zQCyCXbvUtEcrmuHbB0uP8x6GxWiulhJSO3dnYYPZoc=
Subject key identifier:   66:49:24:F3:09:48:18:E2:50:23:60:F4:E9:34:AD:A0:4F:75:6B:D6
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       0A
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Zkkk8wlIGOJQI2D06TStoE91a9Y.roa
Signing time:             Thu 16 Nov 2023 02:44:44 +0000
ROA not before:           Thu 16 Nov 2023 02:44:44 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     23783
IP address blocks:        203.179.244.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10 (0xa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov 16 02:44:44 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=664924F3094818E2502360F4E934ADA04F756BD6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:a6:a9:1a:1a:72:bb:f8:a2:f0:3c:71:c1:fb:
                    7e:f0:50:a3:aa:53:97:0e:86:17:d4:77:3f:6a:4e:
                    61:1e:04:51:2a:e3:9d:8c:aa:81:4e:e9:ea:c7:fa:
                    64:d2:df:1d:c9:75:51:58:35:ec:b5:c5:df:4e:01:
                    e1:99:5b:fa:f4:b5:5b:84:0d:2f:66:2e:10:f0:f3:
                    52:90:7b:fb:65:6a:ef:0c:6a:08:f7:3d:fd:29:f6:
                    09:11:51:b3:0c:97:ff:11:ba:c5:c8:de:71:3e:89:
                    82:e9:ab:e9:a0:fd:8f:c9:7a:ea:13:57:09:43:24:
                    f7:20:f7:cf:a2:59:ce:f2:e7:db:d6:03:30:9e:15:
                    33:83:2b:09:d1:c3:9d:7a:ed:ed:30:13:9f:fa:1b:
                    a7:0b:cc:89:e7:84:0a:a8:9f:96:8a:12:d8:e0:b5:
                    5e:42:0d:46:d4:cf:43:ed:75:24:3f:e2:a9:d1:90:
                    8d:dd:62:3d:93:ed:1a:dc:c4:36:89:2e:c4:e3:ee:
                    6a:66:6d:3a:3f:cc:48:e8:f2:73:c6:d3:9c:f8:29:
                    30:31:fe:fe:0c:31:12:2a:88:2a:0b:95:8f:d8:57:
                    93:be:5b:c7:1d:d1:4e:5f:be:3b:a6:f3:bb:5b:15:
                    37:7a:11:1b:85:b7:36:52:90:b3:35:48:9d:2f:ba:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:49:24:F3:09:48:18:E2:50:23:60:F4:E9:34:AD:A0:4F:75:6B:D6
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/Zkkk8wlIGOJQI2D06TStoE91a9Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.244.0/23

    Signature Algorithm: sha256WithRSAEncryption
         06:c1:aa:a3:83:31:51:be:a0:96:47:5e:1d:77:98:d6:e3:2e:
         11:e6:cf:e6:b8:40:5b:d4:1b:6d:6c:8c:aa:26:36:4e:84:73:
         4a:5d:f0:c6:c6:5d:9b:84:26:c4:33:fa:5d:a5:fa:88:1c:0e:
         d6:4b:58:44:df:3d:e4:ab:de:90:02:27:6b:d8:cb:6a:a8:ca:
         b7:30:7b:9c:b0:eb:5b:c4:c8:84:82:8c:38:73:34:da:a3:fe:
         1d:9a:26:4e:31:6e:37:0b:3e:05:63:2d:ea:e3:bb:6e:0b:84:
         99:79:8b:3c:81:ee:79:fb:29:15:0d:dd:0c:7d:cd:af:5c:8a:
         8b:2e:9f:96:ff:4b:25:1c:c7:4e:17:18:57:6b:5d:aa:04:18:
         44:9a:37:2b:01:de:4b:c3:c0:a2:8a:a7:82:b8:d4:52:9f:7b:
         f3:6f:bf:fa:7f:23:2e:7a:c8:27:63:19:48:76:91:f7:1a:89:
         a9:df:15:51:82:c7:a4:79:c1:3a:5e:59:6d:ff:95:af:2c:cb:
         a9:cb:9f:d9:ad:de:26:a0:5f:3d:49:20:49:32:7c:38:d9:31:
         c9:85:56:86:77:8a:2f:60:79:e8:d3:36:ac:df:60:a8:95:b0:
         41:84:6d:73:ed:df:90:cc:3d:28:80:dc:85:53:ac:29:16:64:
         7c:52:3c:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org