Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/lytj-cT3uMktX0WNG8BIEswxeFY.roa
File:                     lytj-cT3uMktX0WNG8BIEswxeFY.roa (raw, json)
Hash identifier:          D1CqPyNP4wMFlHWyusGOE00j+BAmDWfr4FQPfz58GZY=
Subject key identifier:   97:2B:63:F9:C4:F7:B8:C9:2D:5F:45:8D:1B:C0:48:12:CC:31:78:56
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       60
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/lytj-cT3uMktX0WNG8BIEswxeFY.roa
Signing time:             Fri 31 May 2024 01:28:12 +0000
ROA not before:           Fri 31 May 2024 01:28:12 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     17675
IP address blocks:        203.169.8.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 96 (0x60)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May 31 01:28:12 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=972B63F9C4F7B8C92D5F458D1BC04812CC317856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:7d:7b:53:80:ae:62:5d:0e:b7:52:af:f2:f4:
                    56:2d:b8:f3:83:fe:7e:73:9a:78:35:93:5c:33:0e:
                    ef:c2:de:9d:aa:f8:a2:73:1a:26:21:44:43:a6:df:
                    bf:a3:bb:9e:23:04:00:75:1d:a7:c4:36:ac:18:70:
                    b6:9b:8f:73:13:32:b7:30:1d:a2:aa:c8:74:6b:12:
                    a5:ec:07:df:0c:06:11:69:7d:05:48:1a:26:ca:e8:
                    39:1a:50:d3:23:2c:15:e0:09:a4:f9:1c:ed:cc:16:
                    bf:b2:67:11:08:47:fb:b6:d9:e2:23:96:eb:1e:25:
                    bb:77:59:33:1e:58:bb:09:0b:07:3f:a8:25:da:98:
                    74:b2:26:0e:82:07:df:5f:a9:1e:af:a3:31:3f:86:
                    0b:65:43:88:56:bc:1f:e0:fc:52:17:a5:61:75:3a:
                    a0:6b:e1:ee:fe:2f:31:3f:4a:07:b9:e3:d6:36:42:
                    5f:15:39:88:ad:2d:d2:08:77:23:ed:20:87:29:ce:
                    81:1b:a0:d3:db:03:76:a6:5e:64:74:1a:18:15:7f:
                    67:70:43:f3:58:97:23:56:2f:b6:70:11:ae:00:2b:
                    88:72:22:96:56:19:09:93:e4:75:91:35:7f:ec:b2:
                    73:9b:53:9a:13:3d:7f:1e:dd:08:40:9d:f2:3b:43:
                    99:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:2B:63:F9:C4:F7:B8:C9:2D:5F:45:8D:1B:C0:48:12:CC:31:78:56
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/lytj-cT3uMktX0WNG8BIEswxeFY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         37:7b:fc:1c:7a:56:0b:54:3e:bf:c1:9f:17:65:f7:f2:fc:05:
         4b:fd:cc:a6:14:01:1e:89:2d:2e:b7:e2:0f:54:27:e9:14:23:
         9b:79:cc:19:ba:32:1d:68:df:40:20:1f:4c:c5:7d:06:a0:24:
         34:e1:43:fc:f4:14:db:75:99:f6:96:0a:52:22:b4:0f:4e:00:
         7b:5d:d9:23:3b:f4:fb:09:e9:55:2c:b3:ec:63:36:2f:2f:cb:
         f6:f6:d0:fc:73:6e:0b:ca:32:68:0c:a1:9e:bd:cf:1b:32:2c:
         a4:f2:ad:13:4b:2d:4e:bc:66:9f:2f:e6:a4:49:e1:f4:c3:6a:
         03:8d:8a:96:14:ed:28:52:4e:09:b7:c1:dc:b2:28:2b:18:df:
         28:7c:1c:f7:78:26:23:8a:62:29:12:1a:0c:7a:dc:ad:0f:66:
         29:8e:58:50:4f:90:c4:30:27:44:9d:90:58:9b:c7:70:66:c4:
         e1:68:6b:51:76:f4:a0:66:a6:0b:28:e2:ac:e8:18:a8:4f:11:
         bb:56:ff:76:d0:8a:c5:a1:45:06:cf:7b:d5:f6:d2:33:bc:0e:
         42:b2:6b:71:47:4e:62:95:87:99:fa:13:68:dd:1e:32:35:84:
         28:05:2a:95:8d:02:41:dd:7c:40:46:58:f1:61:35:e3:a5:d8:
         67:74:2b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org