Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/SNYB-elMH6TqgVW_Hr3P43T_0Dw.roa
File:                     SNYB-elMH6TqgVW_Hr3P43T_0Dw.roa (raw, json)
Hash identifier:          gbg8xlWoO83PA5UOTUQcg2a3V0e5oza7HEm3E9yB17I=
Subject key identifier:   48:D6:01:F9:E9:4C:1F:A4:EA:81:55:BF:1E:BD:CF:E3:74:FF:D0:3C
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       12
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/SNYB-elMH6TqgVW_Hr3P43T_0Dw.roa
Signing time:             Sun 08 Oct 2023 23:30:53 +0000
ROA not before:           Sun 08 Oct 2023 23:30:53 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        61.44.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  8 23:30:53 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=48D601F9E94C1FA4EA8155BF1EBDCFE374FFD03C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:76:dc:9c:ee:0b:3e:71:6b:e4:14:6c:b2:de:
                    96:6a:75:a1:c8:44:d6:1c:e3:bd:c1:cc:e8:50:a0:
                    96:1e:29:10:ec:51:4c:30:4d:76:46:21:af:fd:2f:
                    62:c4:2a:bb:7a:fd:92:fc:8d:50:45:9a:42:74:75:
                    f1:d4:09:e7:af:68:08:56:2f:79:11:96:25:c9:42:
                    3b:b1:c0:7e:0d:2b:71:23:c7:f5:da:15:93:16:f6:
                    08:19:f3:bf:67:16:84:bf:89:d3:53:44:d9:1b:ef:
                    b5:ce:bf:2a:03:10:a0:79:85:d7:a6:d8:f8:55:6f:
                    40:2e:06:26:cd:e4:59:18:0a:b4:35:6d:50:8e:c3:
                    62:8e:20:a5:b9:34:13:01:b5:73:6c:d5:15:1f:aa:
                    43:2d:9a:d8:41:5a:bb:d4:15:9c:e4:10:00:34:1d:
                    59:47:0b:f0:bf:52:99:e6:8f:6f:65:59:8d:f9:77:
                    73:6f:36:08:63:d6:11:8f:5c:90:90:0a:0a:36:84:
                    b1:93:98:8d:e4:47:51:4f:25:f9:a4:cc:0d:fb:28:
                    93:7f:bf:7f:f3:1b:e2:66:6f:cb:7a:5e:87:1b:f9:
                    8c:9b:30:ae:fa:dd:ad:cf:ee:aa:b1:f1:cc:15:56:
                    e6:20:25:49:b8:e0:b6:de:99:8e:ae:18:cc:8f:bd:
                    fe:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:D6:01:F9:E9:4C:1F:A4:EA:81:55:BF:1E:BD:CF:E3:74:FF:D0:3C
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/SNYB-elMH6TqgVW_Hr3P43T_0Dw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:f8:52:c5:96:cc:09:a1:1a:9f:5d:f3:63:bf:48:a4:48:2d:
         c1:1a:b6:e4:14:ab:a2:13:4f:87:13:8b:2b:99:a4:25:17:0d:
         8f:9f:3e:d5:37:eb:8c:b6:93:8b:39:8a:8c:14:4a:bd:93:a4:
         8a:0a:e6:8a:1d:01:90:80:46:94:e5:b9:61:bd:5b:a7:46:69:
         3f:41:c4:2e:e0:41:55:75:e7:11:97:dc:2a:3b:4f:f3:e8:81:
         35:83:0d:25:d7:28:6f:b1:20:fb:cd:7b:af:73:84:c0:ab:de:
         c8:0c:62:7b:82:49:b1:06:ac:4c:f3:0e:0c:29:52:f9:82:57:
         83:1b:6f:de:fd:dd:b2:9d:02:11:e1:cc:6c:00:37:07:93:02:
         cd:4a:55:cb:ab:c1:33:c6:87:b6:ea:34:74:3f:4a:b8:9b:75:
         f1:ac:c1:1e:a1:33:6f:dc:06:a9:90:ff:01:90:3a:78:3f:eb:
         c8:ee:bb:9d:32:51:57:b5:f0:ca:f0:e1:87:f3:23:b7:d6:2a:
         47:be:e7:be:47:da:86:52:ca:a4:3f:4e:29:d4:54:c1:41:47:
         68:f5:95:eb:d1:a0:28:87:12:9a:88:bd:a6:87:91:82:a5:ce:
         c0:39:d3:4b:41:e2:a7:f8:bc:18:ff:49:94:41:d1:8f:2b:fd:
         db:b4:5d:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org