Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/6htCDivnh9unoR9_rH_qxOvCUVQ.roa
File:                     6htCDivnh9unoR9_rH_qxOvCUVQ.roa (raw, json)
Hash identifier:          Y8ycKhCrXSLugsfgcQomgopphx73+zsde1cW0X0czeA=
Subject key identifier:   EA:1B:42:0E:2B:E7:87:DB:A7:A1:1F:7F:AC:7F:EA:C4:EB:C2:51:54
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       077D
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6htCDivnh9unoR9_rH_qxOvCUVQ.roa
Signing time:             Tue 30 Apr 2024 02:04:39 +0000
ROA not before:           Tue 30 Apr 2024 02:04:39 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        220.210.48.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1917 (0x77d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Apr 30 02:04:39 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=EA1B420E2BE787DBA7A11F7FAC7FEAC4EBC25154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:61:55:3d:b9:6e:46:35:cb:9d:e7:ec:aa:cf:
                    a0:35:b9:fa:d7:d5:42:21:8a:b6:0d:43:3d:9f:75:
                    89:8e:37:f0:5d:d3:2a:73:5f:de:d3:55:4f:6c:6b:
                    d3:58:5d:77:24:5d:18:99:40:20:92:1e:d2:9e:35:
                    98:57:8b:1f:c5:32:0a:3f:1c:99:95:36:c0:64:86:
                    f4:20:59:f8:89:ca:fb:96:a4:fa:0a:a3:8f:7f:b9:
                    14:e0:bc:67:f1:95:f9:5e:bb:84:f8:2d:84:27:8f:
                    b8:45:3e:a1:c6:a0:9d:54:70:a2:b9:d5:38:3f:f3:
                    53:41:c1:d8:16:f6:17:93:40:4f:af:1d:14:c4:4c:
                    50:ff:00:ee:0e:6f:87:e3:82:52:bc:7d:fe:09:72:
                    0c:90:5c:70:ba:5e:ea:7f:87:bb:21:5b:56:07:78:
                    d4:c3:5b:70:21:f2:c6:5f:08:d2:0c:b8:f3:0a:eb:
                    dc:76:30:2d:49:cf:e8:25:52:fb:38:36:ac:46:f4:
                    44:d1:4e:c8:6d:71:51:7f:ff:ec:ff:c6:68:7d:dd:
                    9c:0a:65:5f:e3:57:cf:77:80:49:d5:c7:f3:ae:26:
                    fd:c3:9e:73:0e:be:f9:b1:dc:ad:a2:db:23:9c:62:
                    4a:3b:47:53:ff:41:63:e3:1d:5a:e8:40:7c:12:de:
                    fa:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:1B:42:0E:2B:E7:87:DB:A7:A1:1F:7F:AC:7F:EA:C4:EB:C2:51:54
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/6htCDivnh9unoR9_rH_qxOvCUVQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.210.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         cf:54:bd:4c:cb:15:5a:15:6a:e6:1a:1b:41:69:e4:5d:50:43:
         25:1d:b7:37:2c:5f:18:ad:a9:e2:34:6b:9b:70:b9:78:26:8a:
         30:a9:f9:b9:85:86:7e:bc:71:2c:00:ad:05:36:f3:d8:eb:08:
         09:fd:c8:5d:85:ad:0e:57:ad:07:98:69:ae:24:7b:d1:b5:cc:
         92:fa:8e:d8:89:18:04:07:0a:66:a6:5b:33:26:27:42:10:0a:
         ff:83:4d:3e:ac:1b:17:fb:4b:f5:88:e2:d1:e4:5a:aa:71:e4:
         9a:dc:c2:4d:23:e5:4b:04:0d:31:eb:0f:f3:fd:40:ae:4b:22:
         09:ac:b4:43:a2:cc:9e:1e:3b:e7:10:cb:a0:b0:45:03:bc:88:
         64:4f:8b:43:7b:12:2f:d9:9f:68:98:c5:1f:5d:28:5d:e4:b3:
         c3:7c:bc:f7:d0:b2:33:e8:01:4c:0f:7d:0e:25:5f:e4:e4:84:
         62:3d:ee:1f:4f:cb:b9:1a:a2:8d:4b:35:a8:c8:71:9c:4b:ee:
         a7:2a:84:f1:b2:14:41:fb:63:00:66:6e:3b:10:42:d9:bc:b3:
         7f:6e:96:15:e3:a7:26:c0:8d:83:a4:fd:5a:49:f0:c8:16:e5:
         47:49:3e:05:67:7e:0c:60:4e:77:38:8a:3d:66:b4:78:3c:9f:
         3d:91:47:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:29 2024 by rpki-client on console-ams.rpki-client.org