Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/826/atsJTYV4EQavI0dOJ-AddvKLXwc.roa
File:                     atsJTYV4EQavI0dOJ-AddvKLXwc.roa (raw, json)
Hash identifier:          2u/RMda3oo7QISX58gH5VzIPOVkPhpWAncoWWGnEBtg=
Subject key identifier:   6A:DB:09:4D:85:78:11:06:AF:23:47:4E:27:E0:1D:76:F2:8B:5F:07
Certificate issuer:       /CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
Certificate serial:       1F
Authority key identifier: 5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/atsJTYV4EQavI0dOJ-AddvKLXwc.roa
Signing time:             Fri 01 Sep 2023 01:31:08 +0000
ROA not before:           Fri 01 Sep 2023 01:31:08 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     23618
IP address blocks:        150.9.208.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5E708E85B10AC603C06D785B42153DCFE1663AEA
        Validity
            Not Before: Sep  1 01:31:08 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=6ADB094D85781106AF23474E27E01D76F28B5F07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:6a:86:83:02:a6:22:34:3c:4b:e5:91:a0:47:
                    9a:41:81:a8:8b:a6:19:5a:36:87:4d:b5:0b:13:88:
                    d0:55:3f:90:51:71:04:22:25:b6:b4:ab:44:0a:ed:
                    b7:55:69:f2:bf:1b:f2:74:d9:af:f3:00:86:cc:92:
                    12:d8:3a:19:34:96:6f:e7:0f:d0:0a:0b:ce:fb:b4:
                    0b:d2:02:05:c2:eb:fa:ee:3d:ca:e4:1a:d7:ae:b1:
                    c4:e5:c4:c1:29:f1:01:29:da:a3:66:45:f7:08:6b:
                    dd:ab:08:74:62:89:ad:47:a4:76:29:5b:55:fd:d8:
                    a5:45:f5:2f:9d:fc:7a:02:95:b8:d1:0c:fa:57:9a:
                    27:fe:4d:c0:49:29:4d:a5:3f:a9:89:24:a6:1a:6f:
                    fd:f6:af:68:dc:c5:e2:0f:b3:36:59:fc:dc:13:c1:
                    54:16:ef:b2:5f:04:8f:bb:08:33:e9:19:62:88:9b:
                    c6:17:c5:47:8e:0c:1b:d0:a2:a5:32:48:20:2f:f2:
                    0a:5e:d5:5e:b5:eb:3a:d2:30:d3:ad:26:6d:da:9f:
                    20:55:6d:dc:1a:f7:01:f5:84:c2:f2:d7:a0:21:77:
                    20:3d:91:60:25:52:04:87:5f:5b:3c:4f:66:aa:3f:
                    11:57:3d:8f:00:58:4f:21:9e:c6:54:b9:5a:d8:57:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:DB:09:4D:85:78:11:06:AF:23:47:4E:27:E0:1D:76:F2:8B:5F:07
            X509v3 Authority Key Identifier:
                keyid:5E:70:8E:85:B1:0A:C6:03:C0:6D:78:5B:42:15:3D:CF:E1:66:3A:EA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/XnCOhbEKxgPAbXhbQhU9z-FmOuo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XnCOhbEKxgPAbXhbQhU9z-FmOuo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/826/atsJTYV4EQavI0dOJ-AddvKLXwc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.9.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c0:f3:40:eb:80:af:13:ec:a8:04:d5:30:e7:b0:4f:33:dc:3a:
         7c:80:52:2f:01:89:9a:2c:02:e8:01:63:f2:d4:7a:fa:86:18:
         22:02:98:35:2b:bb:17:73:5a:4c:0b:34:57:ae:51:54:2c:39:
         e4:57:f4:70:81:5b:21:a0:97:e9:50:21:34:a2:d5:56:00:07:
         ef:09:4a:6c:8a:e6:78:00:b6:0d:05:c3:48:c9:4a:09:6e:cf:
         b4:ab:20:18:20:40:5c:4e:44:96:7c:79:86:fe:2a:8b:f7:40:
         82:6e:79:78:ad:4e:a5:e3:37:04:99:7b:72:32:ac:65:fa:c5:
         ff:a7:1e:3e:7a:8a:e2:ae:6b:40:3d:56:24:d6:8e:ae:92:ee:
         61:6e:d8:f7:f7:bb:b9:9a:0a:a7:8c:54:3a:f0:f2:ca:a5:5a:
         c2:d8:fc:4b:7c:4d:70:14:35:be:2b:6a:4b:2e:70:ec:fb:3b:
         4d:b7:3b:ed:c5:d8:96:10:10:9e:15:96:21:86:bf:64:33:74:
         66:8f:a0:ac:a2:29:0c:ac:1d:98:19:d6:56:70:e0:62:7f:f5:
         87:7b:98:94:5c:3d:09:1d:70:f3:41:80:4f:e7:e4:04:33:36:
         54:5e:20:33:56:d0:81:52:71:02:e5:68:f2:6b:77:ed:1e:ee:
         5b:3d:20:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org