Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/aNX8BzYwJFrZ17FptRacpv_3e0g.roa
File:                     aNX8BzYwJFrZ17FptRacpv_3e0g.roa (raw, json)
Hash identifier:          w8IWfeXKBgq7DiTERnyJkEvnW/4Vehef1nR7kO/7PlI=
Subject key identifier:   68:D5:FC:07:36:30:24:5A:D9:D7:B1:69:B5:16:9C:A6:FF:F7:7B:48
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       76
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aNX8BzYwJFrZ17FptRacpv_3e0g.roa
Signing time:             Fri 01 Dec 2023 01:31:58 +0000
ROA not before:           Fri 01 Dec 2023 01:31:58 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        131.213.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 118 (0x76)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Dec  1 01:31:58 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=68D5FC073630245AD9D7B169B5169CA6FFF77B48
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:5b:de:41:a8:1a:bd:d8:30:58:ae:0b:33:eb:
                    54:87:52:34:33:88:a1:65:4b:72:c1:79:c3:49:1c:
                    4c:58:df:a4:5a:73:1d:14:ee:29:ea:2f:7a:63:f9:
                    c7:49:58:2a:ab:83:b8:ad:2f:50:01:f6:c6:b4:0e:
                    6e:75:50:71:71:15:a0:df:d8:ad:ff:a6:1b:36:a0:
                    62:cd:7e:f4:a0:4b:29:4f:00:13:27:d8:89:62:05:
                    df:01:a3:9d:22:56:6a:3f:9f:85:b2:ed:d5:bb:7f:
                    87:d5:9e:9e:86:2e:0d:53:f2:cd:cb:5d:8a:17:e2:
                    9e:12:94:57:98:2c:4a:de:89:85:01:85:e1:e6:1b:
                    58:5e:ca:ec:7d:4c:9e:ff:b3:1a:8d:09:6c:1c:f8:
                    8b:f2:e8:7a:bc:cc:36:6a:60:35:df:c9:e5:c7:05:
                    e5:88:2f:ef:73:cc:1b:aa:f5:44:2c:2d:38:5d:3b:
                    60:8b:6e:66:6b:07:79:44:ba:8c:cb:80:eb:17:4e:
                    53:2a:6a:3e:41:b8:64:3c:30:f8:62:6a:e6:f8:82:
                    02:8a:b3:ab:6d:d3:f9:42:cf:01:49:7e:81:61:d1:
                    38:e2:78:5f:2f:4f:a0:b7:b6:a4:46:a8:fe:39:d3:
                    9e:3a:d5:b6:69:7a:01:05:70:9c:dd:d7:fc:b3:09:
                    56:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:D5:FC:07:36:30:24:5A:D9:D7:B1:69:B5:16:9C:A6:FF:F7:7B:48
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/aNX8BzYwJFrZ17FptRacpv_3e0g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.213.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:86:13:a9:2b:17:1c:40:0a:67:34:7d:29:77:7a:4d:d1:d8:
         38:d8:89:2b:08:f1:f4:31:0f:ea:b4:a4:5f:9f:c2:d6:01:bf:
         e8:56:04:05:45:8a:99:c7:60:8c:2d:a6:1f:75:3d:1b:14:21:
         fe:97:49:32:fd:ba:08:23:b3:9f:45:70:69:b2:96:4c:2e:92:
         15:4f:56:6a:d7:e2:13:b5:31:61:5c:5f:34:fe:4f:db:01:93:
         79:a3:4f:a1:84:ff:a7:72:dd:7a:10:6c:32:51:10:60:fe:2c:
         8d:75:67:6e:ec:65:08:72:47:e3:ca:10:54:3a:2a:24:d8:67:
         d4:96:0e:9e:dc:37:81:ef:98:45:dc:d1:17:93:c8:d2:06:52:
         06:e6:85:f9:2b:f4:80:e0:3a:be:4b:9b:4e:c9:31:a2:81:b0:
         50:7e:df:3e:64:e9:73:83:3e:ee:f0:f8:ab:03:f1:a0:2c:4d:
         cf:f3:ff:dd:fe:3e:03:9c:ef:e0:4b:ac:10:b2:86:f6:c5:da:
         19:9d:36:56:44:b6:52:73:7b:5a:30:2f:14:a8:c4:41:a4:df:
         60:26:cf:5f:69:e7:38:d0:2f:f2:04:9b:a7:ae:8d:ac:df:4a:
         4c:bc:f6:87:eb:37:62:eb:44:ba:51:24:34:2e:b5:12:c3:1d:
         70:8a:16:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org