Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/akRREFzaqQJijKuTXbnwueIZpjc.roa
File:                     akRREFzaqQJijKuTXbnwueIZpjc.roa (raw, json)
Hash identifier:          py9K+TV0IqW/XXw8aKu/FoFvHMXmUmqR9KcfdmuLLAU=
Subject key identifier:   6A:44:51:10:5C:DA:A9:02:62:8C:AB:93:5D:B9:F0:B9:E2:19:A6:37
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       13
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/akRREFzaqQJijKuTXbnwueIZpjc.roa
Signing time:             Sun 08 Oct 2023 23:30:54 +0000
ROA not before:           Sun 08 Oct 2023 23:30:54 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        61.44.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  8 23:30:54 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6A4451105CDAA902628CAB935DB9F0B9E219A637
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:7f:2f:f7:e1:a0:ac:b2:e9:c8:cc:72:ef:dd:
                    6b:3d:21:01:31:da:38:a3:f6:22:7d:97:d2:65:c1:
                    c3:54:70:be:df:ae:a1:1f:94:d8:76:23:10:5b:05:
                    ea:c7:85:25:7f:bd:26:e6:43:9f:db:17:ca:ba:1d:
                    74:ad:e1:02:38:77:55:68:fc:30:22:29:e0:f9:e0:
                    bb:13:0c:b1:ac:2b:d5:78:ee:45:87:27:a4:a2:4f:
                    72:ef:4c:f2:b2:af:99:2d:15:7f:49:2a:ff:c3:bd:
                    07:cc:da:55:86:13:cf:6d:90:58:23:b4:20:9d:04:
                    eb:4f:8f:ee:bf:bd:d0:f6:0d:46:b5:ad:be:44:f9:
                    0d:a2:48:53:79:3b:00:70:49:cf:40:2b:09:ba:0a:
                    a9:f1:22:eb:46:2e:aa:13:e4:b6:91:39:6f:ef:70:
                    40:2f:77:99:73:56:73:b7:67:35:5c:df:98:22:ae:
                    8e:20:ec:d1:c0:f0:72:4b:67:be:05:3a:0f:ae:a9:
                    c1:48:a8:97:58:9c:1b:85:69:f0:2c:6b:50:d1:81:
                    16:85:f6:5d:2c:bd:13:aa:74:a1:d1:bf:f5:ac:08:
                    ed:67:5f:dc:09:5e:4f:67:2a:80:73:52:09:4c:5d:
                    41:15:cb:90:06:c2:c9:49:fd:d6:b1:b1:71:be:38:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:44:51:10:5C:DA:A9:02:62:8C:AB:93:5D:B9:F0:B9:E2:19:A6:37
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/akRREFzaqQJijKuTXbnwueIZpjc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.44.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         14:85:d3:d0:9b:84:19:ed:56:14:42:db:64:ec:a5:60:c9:5d:
         60:18:f5:ce:1a:37:d5:96:6b:b5:3b:3d:36:c5:99:3a:0c:50:
         59:5b:9d:3f:9d:ce:86:8d:0d:5f:ec:7f:2a:41:1d:e1:76:4e:
         11:d9:eb:f0:70:47:5a:fe:df:4d:0c:f8:f6:95:a6:1c:99:5b:
         56:8f:9d:de:c3:e6:04:fd:08:95:ff:42:d3:58:2c:78:03:a2:
         74:ed:97:d8:4b:16:99:33:86:ef:41:77:36:b0:46:cf:0b:3f:
         1d:73:b1:5b:28:ac:ec:9f:d6:39:83:8c:aa:43:ef:c2:0e:4d:
         61:13:1c:c9:fb:19:28:4f:db:50:9d:b1:91:1d:df:7a:b7:dd:
         7d:42:82:f6:1a:8a:da:e4:33:a5:b2:96:67:9b:60:47:f3:5a:
         b5:c5:5d:f0:ba:5d:ea:c6:8d:88:7f:23:25:a2:fd:48:81:35:
         e4:0d:48:70:37:d7:13:f6:ee:80:7f:87:c6:2b:da:e9:f6:d8:
         71:54:4f:b2:d4:85:8c:58:29:dc:bd:ec:6f:ea:96:b7:ca:e1:
         45:5a:c9:53:ce:c9:f3:bb:1c:90:2c:ea:23:48:e9:5a:2a:51:
         ed:c3:cf:61:71:7f:70:be:8a:6d:5e:5d:5a:a6:c8:10:69:1e:
         d1:6e:ba:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org