Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/v4mr1fGBWavx3qd2qJy4rcd80Cs.roa
File:                     v4mr1fGBWavx3qd2qJy4rcd80Cs.roa (raw, json)
Hash identifier:          wifoaEfMV4oCjmdMp1YAZhx1cVXRhkb2ayUFrvG222c=
Subject key identifier:   BF:89:AB:D5:F1:81:59:AB:F1:DE:A7:76:A8:9C:B8:AD:C7:7C:D0:2B
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       6E
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v4mr1fGBWavx3qd2qJy4rcd80Cs.roa
Signing time:             Fri 01 Dec 2023 01:30:02 +0000
ROA not before:           Fri 01 Dec 2023 01:30:02 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        160.86.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Dec  1 01:30:02 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=BF89ABD5F18159ABF1DEA776A89CB8ADC77CD02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7b:44:c2:fb:30:bf:20:eb:8d:37:c0:94:b9:
                    31:e4:f5:5f:db:f6:c8:47:cd:ea:4a:18:ad:c3:e0:
                    1b:24:35:f2:f9:7c:8f:57:6a:7b:b9:e6:e9:42:3a:
                    04:01:08:22:60:91:d2:b3:de:6b:dc:eb:44:2d:53:
                    63:aa:b2:76:e2:d2:da:ce:c9:d4:c5:c2:f1:fc:7c:
                    89:a7:83:e9:a5:35:9b:cf:67:96:31:71:46:18:36:
                    0c:7a:d6:fa:b3:33:05:dd:d2:2f:ad:ba:d5:62:7a:
                    3e:13:86:8f:12:f4:61:1c:c3:d3:0b:f1:33:bf:5e:
                    a0:61:d0:6e:73:4a:7d:99:22:43:ac:37:fb:d5:74:
                    f1:f3:5d:6b:97:b8:7a:c1:28:db:ab:9e:4a:8e:ce:
                    cf:49:b5:99:d0:d5:ee:d5:06:ba:be:26:03:b7:05:
                    82:96:9a:41:a7:c1:18:76:ff:f8:fa:74:8e:27:8d:
                    2a:91:70:cf:2e:fb:b1:28:d4:af:9a:1a:14:a1:2a:
                    59:4e:7e:47:3b:0d:e1:20:e3:72:8b:c4:5f:60:22:
                    89:cc:09:d6:f7:89:ba:ea:0e:e4:81:e0:f9:94:e0:
                    ef:df:33:2f:c1:6f:22:5a:ab:f3:fb:d7:a9:8c:1a:
                    2f:4a:eb:c0:0d:c8:89:d5:78:01:4a:4b:89:7b:4a:
                    c9:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:89:AB:D5:F1:81:59:AB:F1:DE:A7:76:A8:9C:B8:AD:C7:7C:D0:2B
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/v4mr1fGBWavx3qd2qJy4rcd80Cs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.86.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         97:c8:80:be:3a:11:c9:aa:82:e0:f7:7a:c2:9d:6d:a0:c3:56:
         26:50:11:f1:0a:e6:4c:cd:76:5a:e3:82:0c:21:4d:21:04:85:
         7b:d9:b1:e9:53:a4:44:7b:e2:d8:19:0d:38:54:a7:33:14:4f:
         24:c8:bc:f7:6a:a5:eb:0c:6a:f1:2f:b5:c1:82:f5:e5:35:f1:
         e1:23:f8:84:8c:fe:f9:16:ed:43:6a:8b:9b:63:f7:ad:ad:76:
         18:f5:d6:7e:90:de:1e:b1:5a:7c:cc:03:d4:41:ff:21:89:83:
         4d:f3:cb:a3:f4:f8:cd:9b:79:7a:c7:b0:96:b6:71:2b:33:cd:
         f3:d1:54:e9:31:da:c0:50:8a:b2:cc:90:eb:ec:e3:f1:25:a6:
         f0:d6:71:d5:85:05:7a:de:f1:cb:4e:7a:71:db:a0:e1:63:9d:
         4f:ef:82:c5:83:61:33:64:4a:72:01:68:65:b1:16:8f:0d:11:
         87:54:0e:51:f2:5b:f4:ce:47:30:da:d8:25:fa:b9:9c:52:8a:
         f8:65:02:9b:f9:6a:51:f0:e8:f9:6b:db:4f:cb:18:82:7d:f4:
         64:34:9f:e1:21:ed:b0:c2:fb:36:e2:19:31:42:b4:14:f6:23:
         69:ac:44:31:ed:6d:ff:bf:0f:0e:c1:1d:d5:3d:a8:ea:67:8a:
         f5:a6:f5:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org