Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/ublJxeD7k3_U3Rwu4MwqSxHRmMo.roa
File:                     ublJxeD7k3_U3Rwu4MwqSxHRmMo.roa (raw, json)
Hash identifier:          rFwD+Vo0AWwtyTRd1qFCNWHUA3co5AC2/6Avw3WiV50=
Subject key identifier:   B9:B9:49:C5:E0:FB:93:7F:D4:DD:1C:2E:E0:CC:2A:4B:11:D1:98:CA
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       09
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/ublJxeD7k3_U3Rwu4MwqSxHRmMo.roa
Signing time:             Mon 11 Sep 2023 00:05:48 +0000
ROA not before:           Mon 11 Sep 2023 00:05:48 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        61.213.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Sep 11 00:05:48 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=B9B949C5E0FB937FD4DD1C2EE0CC2A4B11D198CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:44:9c:fa:1e:ae:e2:9c:0a:71:52:ea:dc:d2:
                    92:dc:89:4f:c3:cc:95:e6:fc:9c:44:a4:a4:26:0a:
                    df:66:86:b4:f1:5d:2e:7e:e6:a5:e7:82:a5:52:9b:
                    9d:21:5b:ee:f8:2c:bd:63:ca:c7:4e:15:92:3a:5d:
                    4d:14:4d:7d:a3:e1:a7:74:d7:b6:09:a2:96:9b:8c:
                    51:f5:9a:bd:9d:16:5e:52:40:d3:34:ac:f7:ed:ab:
                    0a:da:ee:b3:98:03:b8:69:d5:26:b7:0d:76:94:d8:
                    7d:aa:9e:23:d3:e5:21:67:c7:a2:f9:72:48:b3:f6:
                    90:c3:32:98:23:4a:cb:ef:08:50:59:72:2e:f5:0b:
                    04:e2:9e:8a:48:ff:16:09:00:8a:3c:4a:9a:7d:7f:
                    f0:3f:e3:84:0d:92:45:38:44:21:9e:b7:60:e9:17:
                    d8:2d:a6:bb:d5:ec:be:4b:76:0a:50:36:c9:6f:c3:
                    98:0a:25:a7:c9:65:df:f7:d0:12:6c:1c:4c:36:36:
                    38:92:ee:62:0c:14:2f:8f:be:a5:68:da:ff:c0:2a:
                    15:6c:09:3c:0c:c6:67:f0:3f:35:53:b3:f1:8b:0d:
                    6a:24:61:bd:a7:14:f6:de:b2:82:5c:af:28:33:8a:
                    ed:b3:96:29:98:c4:4d:f9:ca:f0:8f:91:49:6f:a5:
                    40:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:B9:49:C5:E0:FB:93:7F:D4:DD:1C:2E:E0:CC:2A:4B:11:D1:98:CA
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/ublJxeD7k3_U3Rwu4MwqSxHRmMo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.213.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:bd:82:ec:c6:4c:cc:05:71:83:54:79:cb:f4:ae:4a:00:da:
         4e:b4:17:e6:26:db:b5:17:07:93:fb:82:1a:ec:7a:45:3c:e9:
         87:63:2b:1d:d9:cf:b9:81:d4:fc:5c:11:ce:ad:b5:91:c7:f1:
         c1:fb:e9:67:6d:6f:53:bd:05:c8:d7:e2:ae:3e:60:45:52:ed:
         cd:a1:f7:1e:fe:61:08:0b:71:c5:d0:f2:77:58:ed:9a:dc:d2:
         91:3c:6e:ac:0d:0f:7b:ca:30:3f:d6:db:da:76:0d:8f:28:75:
         b9:44:05:24:02:b2:0e:b8:b5:1f:ae:03:dc:50:83:9d:46:06:
         a4:70:3a:71:0b:49:dd:c2:5b:26:b0:04:2d:49:b8:a8:51:f1:
         56:bf:d0:68:b5:25:a7:fc:fc:fa:b0:21:8e:55:30:02:68:20:
         42:78:d3:de:f7:18:0e:ac:82:ad:6c:ba:94:19:33:6b:46:93:
         82:29:4e:a2:3c:17:db:81:b8:6a:c1:7f:9a:8a:72:83:98:da:
         b3:b0:64:a3:89:fb:68:7a:15:85:58:0a:cd:8e:29:6a:b0:f2:
         7c:cc:18:5d:db:c2:0f:ed:a1:e7:d6:03:bc:71:8b:d6:d1:55:
         02:7c:e4:8b:4a:b7:ce:a4:27:79:c6:d6:9b:87:45:14:9c:67:
         f0:44:d4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org