Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/671/J0TBqrzjrZOUQG8dPqkXUlt6ZXA.roa
File:                     J0TBqrzjrZOUQG8dPqkXUlt6ZXA.roa (raw, json)
Hash identifier:          hrCVMKK3qx95GDwuVKgYbkF6mnw4GLbs5p0jqQfZ1n4=
Subject key identifier:   27:44:C1:AA:BC:E3:AD:93:94:40:6F:1D:3E:A9:17:52:5B:7A:65:70
Certificate issuer:       /CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
Certificate serial:       0139
Authority key identifier: FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J0TBqrzjrZOUQG8dPqkXUlt6ZXA.roa
Signing time:             Sun 01 Oct 2023 01:30:15 +0000
ROA not before:           Sun 01 Oct 2023 01:30:15 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9824
IP address blocks:        61.215.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 313 (0x139)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB06B2E4A9D567EB7D80FF59A755FD283BFB13AB
        Validity
            Not Before: Oct  1 01:30:15 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=2744C1AABCE3AD9394406F1D3EA917525B7A6570
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:e3:0f:8c:f2:52:e8:2c:8a:4a:09:ca:c3:02:
                    09:ca:56:97:1c:b1:06:b5:a5:d4:d2:c7:3d:98:ec:
                    35:33:c9:ac:bb:88:90:d5:31:4e:81:9a:25:5b:a2:
                    fc:0f:6a:74:68:a5:44:af:5c:45:c2:c7:be:cd:9a:
                    6a:68:3e:2a:57:80:19:88:54:ed:61:84:b2:ad:6a:
                    9b:98:82:6a:c9:07:4b:8a:b0:68:7c:cc:65:9c:c2:
                    d3:b9:e6:35:0a:0a:f8:ae:37:b6:5b:88:9a:8a:9d:
                    84:27:4c:b4:dc:12:c7:bf:ef:bf:f8:d1:ac:a8:6a:
                    77:7d:3d:9f:68:5a:67:be:6f:96:ad:db:bb:38:a8:
                    7a:2e:3b:62:1e:e6:42:d5:2d:9a:63:48:b7:49:1f:
                    2f:3c:57:d9:82:eb:f1:66:47:f4:ac:ee:fb:6e:07:
                    c1:24:eb:47:8e:bc:09:bb:f9:0e:7e:1f:94:13:97:
                    56:56:76:f2:62:1f:06:b1:e0:69:e6:22:31:fa:81:
                    a9:bd:11:7e:c5:43:ec:45:c7:9c:60:c2:d5:3a:13:
                    2f:d0:91:d6:ec:ff:14:50:fa:90:7d:6e:07:77:a3:
                    e1:26:03:ee:8c:24:cb:82:0c:e4:0f:38:5b:a3:a6:
                    fd:63:d4:44:a6:34:aa:b6:1e:55:27:91:df:51:63:
                    ca:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:44:C1:AA:BC:E3:AD:93:94:40:6F:1D:3E:A9:17:52:5B:7A:65:70
            X509v3 Authority Key Identifier:
                keyid:FB:06:B2:E4:A9:D5:67:EB:7D:80:FF:59:A7:55:FD:28:3B:FB:13:AB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/-way5KnVZ-t9gP9Zp1X9KDv7E6s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-way5KnVZ-t9gP9Zp1X9KDv7E6s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/671/J0TBqrzjrZOUQG8dPqkXUlt6ZXA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         df:15:30:f9:95:6a:2c:10:d4:a4:de:fc:61:78:95:76:cf:e3:
         15:41:63:1d:fc:2d:e8:02:0c:0c:b6:84:14:77:b9:8f:62:ba:
         7f:6d:99:c3:be:7d:b7:4d:93:55:69:71:66:c9:9b:68:36:4c:
         2d:97:da:48:7b:6e:54:53:e9:9d:de:80:74:c4:fe:06:2e:c9:
         d3:26:5f:8a:dc:fb:ba:0a:d8:49:b9:10:af:1f:e4:1d:88:bd:
         8f:fc:61:37:a0:f2:63:8e:23:2c:83:7f:81:1b:77:20:96:36:
         11:8c:69:df:a6:49:cd:8d:5a:9c:78:ab:7b:9d:a7:8f:0f:9b:
         81:49:66:00:a8:91:9d:bc:cc:de:2c:db:d6:5d:ef:d5:18:c2:
         d3:31:77:19:10:3a:21:79:be:6d:f0:d5:d9:6f:51:b9:39:9e:
         01:bc:1e:e7:5b:c3:e5:6e:5b:ea:69:8f:45:6b:e0:3d:1e:49:
         ea:72:a5:1f:c5:ad:d9:ae:76:9e:13:fe:6a:1c:c4:1b:9c:87:
         93:6a:3d:6a:85:83:8f:a2:47:5f:23:a2:4c:05:c3:e3:b6:54:
         fe:35:ae:95:34:4f:56:1b:9d:7f:46:a3:a5:64:16:5f:06:bd:
         d5:35:77:fe:64:71:81:f1:72:ad:d2:37:2a:a7:e9:06:29:61:
         d1:77:10:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:52 2024 by rpki-client on console-ams.rpki-client.org