Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/WJfb1FKLH5Cfq3boPrIRZyyUVg0.roa
File:                     WJfb1FKLH5Cfq3boPrIRZyyUVg0.roa (raw, json)
Hash identifier:          eckIloGM/qK/wphN9D9t16eWwOFbS1EEb2Lcot9a/ZU=
Subject key identifier:   58:97:DB:D4:52:8B:1F:90:9F:AB:76:E8:3E:B2:11:67:2C:94:56:0D
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       13
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/WJfb1FKLH5Cfq3boPrIRZyyUVg0.roa
Signing time:             Tue 28 Nov 2023 05:07:29 +0000
ROA not before:           Tue 28 Nov 2023 05:07:29 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        106.73.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 17:53:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Nov 28 05:07:29 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=5897DBD4528B1F909FAB76E83EB211672C94560D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c2:78:c6:29:60:7d:66:8f:4b:5b:43:49:5d:
                    1a:22:e6:ec:e8:19:73:31:4a:9d:24:1e:22:b8:9b:
                    c6:b4:46:8f:78:58:f1:4b:53:53:a8:78:2d:da:79:
                    1b:7e:99:0c:71:08:81:f8:25:8c:ce:28:97:1b:53:
                    9c:05:f0:e5:f8:e3:0f:48:16:c8:a6:24:90:ce:a9:
                    79:05:52:32:62:f2:2c:6a:f7:fa:5a:91:0d:a3:04:
                    dc:ab:6f:2f:06:e7:35:0a:a1:ad:dc:b5:14:1c:5e:
                    5d:fd:3c:16:82:23:34:4c:fc:92:87:46:63:7d:22:
                    32:63:49:9b:16:f5:de:ba:06:9a:74:77:8c:25:1d:
                    d5:f7:4e:35:fb:ff:40:44:61:91:cd:d1:ba:ef:dd:
                    57:13:03:ee:e8:1e:25:86:36:a6:f8:64:79:87:aa:
                    8c:57:e7:af:c0:39:b9:2b:f4:9b:3b:87:52:9d:39:
                    a5:81:1e:7e:49:3c:f0:7b:fb:f1:54:5e:70:0d:e2:
                    ee:2e:6b:f1:a0:c6:a6:29:a2:9d:32:e2:5a:a0:0a:
                    43:1d:23:b7:e1:16:da:c8:e3:dd:ec:74:26:9e:53:
                    ab:98:62:26:c0:33:c3:c6:8f:f0:f3:ed:e2:28:a1:
                    72:71:ea:0e:ec:31:ce:67:78:2c:20:a7:63:30:f5:
                    9e:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:97:DB:D4:52:8B:1F:90:9F:AB:76:E8:3E:B2:11:67:2C:94:56:0D
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/WJfb1FKLH5Cfq3boPrIRZyyUVg0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  106.73.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         32:40:3a:a6:b8:82:07:b5:4c:1d:f8:24:e7:75:ff:79:6c:29:
         16:5d:02:5a:a2:80:21:4a:53:4b:b9:5f:8a:e7:8c:bb:08:5f:
         b1:00:07:f4:5b:c7:fc:50:c9:d2:c1:2e:d2:16:1f:bd:73:bf:
         09:81:cf:f6:bd:a0:fb:da:8e:1f:11:b4:98:33:ef:83:e4:9e:
         c1:07:85:58:30:f6:52:f8:0a:14:58:1d:27:62:ae:c5:be:84:
         f9:8f:4f:b5:3e:a6:e3:1a:c9:7e:77:cc:6d:5b:71:54:0d:41:
         d3:66:e1:c8:88:60:35:29:f2:4f:62:67:34:67:d6:f4:aa:f9:
         77:69:f9:36:43:49:7c:4e:22:86:df:05:9c:01:f5:06:f0:13:
         9f:fb:91:42:1f:9f:12:2b:96:d8:49:9f:89:e4:d3:36:ec:69:
         ab:65:1f:75:f7:e2:e4:dd:f7:8a:9c:47:c4:c7:17:e0:d9:4d:
         7e:e1:f3:52:24:12:f6:c3:68:db:ff:93:35:87:7a:14:4a:50:
         48:fe:31:2e:d2:93:70:f0:0d:55:d9:87:d1:a8:a3:38:33:ce:
         07:4f:1f:eb:6d:76:dc:b0:64:56:f7:52:86:95:1d:f8:b8:98:
         a0:3f:5e:04:08:33:ba:ab:3f:cd:bd:f3:8b:55:3f:f5:51:10:
         45:5f:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 19:06:44 2024 by rpki-client on console-ams.rpki-client.org