Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
File:                     tDSGD95DoCWo3W2qa6WuwoCL2xA.roa (raw, json)
Hash identifier:          FZNjcNk3jEFWIo1tm8/oLEYm7EPSfbeoyPukzm4N8tg=
Subject key identifier:   B4:34:86:0F:DE:43:A0:25:A8:DD:6D:AA:6B:A5:AE:C2:80:8B:DB:10
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       05
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
Signing time:             Mon 06 Nov 2023 07:22:57 +0000
ROA not before:           Mon 06 Nov 2023 07:22:57 +0000
ROA not after:            Fri 01 Nov 2024 08:11:41 +0000
asID:                     23783
IP address blocks:        61.11.160.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov  6 07:22:57 2023 GMT
            Not After : Nov  1 08:11:41 2024 GMT
        Subject: CN=B434860FDE43A025A8DD6DAA6BA5AEC2808BDB10
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ad:a0:8a:a9:51:43:37:c1:de:b4:f9:94:8f:
                    32:9f:31:37:33:6f:ac:0d:9a:53:84:64:b9:64:08:
                    9b:dc:c9:94:1a:54:f6:76:01:1e:3a:32:e8:7b:29:
                    a7:21:05:60:23:3d:04:6b:e3:79:a2:e9:42:bf:1d:
                    86:64:5b:67:58:19:39:b4:7e:0f:06:ba:9b:83:69:
                    8e:a9:e2:50:58:60:54:42:75:16:66:d3:62:1d:2b:
                    91:b0:14:51:16:18:be:7c:b1:e8:da:31:4a:96:f5:
                    57:8f:86:e9:ce:70:7b:ec:12:d6:cf:5d:c9:4b:0e:
                    0d:15:aa:28:f6:f1:0d:f4:0e:d8:e2:54:a8:a4:35:
                    18:3b:3d:0b:a7:97:40:09:df:9c:49:07:d6:12:ba:
                    bd:8b:e9:c7:a7:ee:88:39:3e:67:a2:76:8b:76:ed:
                    19:e6:11:46:20:16:98:4a:ed:b1:89:2c:3e:e9:2c:
                    ff:a9:6f:5c:83:71:2c:65:08:1b:11:a1:be:eb:47:
                    77:2d:3e:96:57:88:95:27:94:77:f8:f1:b0:c7:88:
                    8f:27:08:6d:7c:54:95:b8:9c:a8:6f:64:d3:7a:33:
                    9e:51:a2:05:6e:26:87:52:43:d5:5c:eb:4e:8a:c2:
                    81:71:50:47:b2:2c:e4:94:f7:5d:88:31:0d:35:60:
                    60:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:34:86:0F:DE:43:A0:25:A8:DD:6D:AA:6B:A5:AE:C2:80:8B:DB:10
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/tDSGD95DoCWo3W2qa6WuwoCL2xA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.11.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:39:cd:43:d7:43:da:48:14:3e:9b:e2:cc:3f:f1:6b:ee:3b:
         cf:8c:87:30:0d:2d:d8:26:23:68:c3:d3:04:1e:6f:65:8e:9a:
         57:16:c4:f9:98:ed:45:02:85:84:e2:0d:18:5d:f6:6e:07:13:
         c3:61:04:04:77:2e:f5:71:3d:ad:03:62:42:7c:1f:ed:09:bb:
         dd:bc:59:bc:2e:df:8c:24:25:6f:f2:eb:3b:de:e6:65:f2:84:
         f5:2c:81:e1:6c:78:f0:61:f6:e1:63:71:4b:ed:4d:0e:35:6d:
         71:47:42:58:ce:94:93:39:d8:03:fc:2a:61:56:4b:25:52:7b:
         19:8b:d1:6b:d8:5f:33:dc:6e:a1:6c:5f:f7:0f:50:86:f1:27:
         56:24:9e:c2:9b:2e:f2:52:fb:92:55:e9:12:f6:88:37:97:58:
         2c:50:19:c5:30:0e:cd:56:a4:10:d3:7c:df:ff:e9:e7:3d:66:
         55:5b:28:d5:20:f5:4b:8a:c5:d1:08:3d:47:45:cf:35:ee:4d:
         d7:21:ff:e0:1a:4c:c9:15:7d:b3:d8:d3:4a:b5:d2:61:83:84:
         40:a5:3c:00:10:c7:66:c7:4b:65:e3:a3:35:72:9c:93:63:21:
         ec:8e:64:87:68:c5:0c:d8:0a:40:ed:a1:98:6c:a4:03:e4:8b:
         4c:40:91:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org