Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/py6aHeDg66qHMdrhNRwEwtJ9K9E.roa
File:                     py6aHeDg66qHMdrhNRwEwtJ9K9E.roa (raw, json)
Hash identifier:          lNcRDpZ3s3XVMG+PD12V/UbSb3PQNF9rhGv1/IFAb7c=
Subject key identifier:   A7:2E:9A:1D:E0:E0:EB:AA:87:31:DA:E1:35:1C:04:C2:D2:7D:2B:D1
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       10
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/py6aHeDg66qHMdrhNRwEwtJ9K9E.roa
Signing time:             Sun 08 Oct 2023 23:27:03 +0000
ROA not before:           Sun 08 Oct 2023 23:27:03 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        116.199.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16 (0x10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  8 23:27:03 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A72E9A1DE0E0EBAA8731DAE1351C04C2D27D2BD1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9f:4a:c0:28:2b:0b:f3:d0:ff:9c:07:aa:55:
                    45:7f:fa:46:24:8c:f3:1f:c3:a2:69:ce:be:ba:b1:
                    80:d9:52:ae:b3:dd:6d:d8:76:6c:40:3f:de:77:2a:
                    24:49:8a:99:6c:f0:86:1d:55:40:36:5c:b4:e9:ef:
                    fc:79:88:1a:73:00:91:9a:a1:5c:8f:61:6e:4a:86:
                    83:55:85:40:c0:9c:c4:26:8d:65:21:6d:fb:40:b2:
                    ec:e3:f6:7a:22:fc:ca:b8:c2:d7:b8:63:8d:9b:6e:
                    c5:dc:6b:87:71:b8:26:25:f6:2b:1b:8b:c3:86:9c:
                    66:41:51:9a:91:03:cc:b9:2c:53:2f:8d:48:55:0e:
                    a6:cb:0b:83:ed:14:e4:e7:ac:23:cc:04:7b:e2:0c:
                    f6:69:61:87:cc:26:50:bb:6e:97:cb:30:bc:7a:d4:
                    06:89:5c:d9:3d:99:c9:50:3d:21:4c:80:99:74:e0:
                    80:49:93:29:15:9f:54:2e:51:ad:a2:df:21:98:28:
                    db:e9:1d:94:56:c7:31:1e:c6:63:f5:81:c5:52:f5:
                    a2:32:1c:a8:a9:1c:6b:89:5f:f2:f4:4b:7e:34:5c:
                    c5:fd:05:d5:c0:8b:d1:10:0f:cb:3b:1d:ab:ca:af:
                    dd:c6:3f:e0:32:f4:cd:8e:61:52:12:39:0e:5d:4e:
                    77:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:2E:9A:1D:E0:E0:EB:AA:87:31:DA:E1:35:1C:04:C2:D2:7D:2B:D1
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/py6aHeDg66qHMdrhNRwEwtJ9K9E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.199.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         58:01:5c:26:0e:07:93:cf:53:74:31:65:31:4f:ad:2e:a8:45:
         7b:ff:3a:ce:9e:f3:c6:6b:62:86:d5:a3:ec:f3:75:cb:c0:6f:
         14:ef:81:cc:e5:3b:6c:4f:3e:93:f1:ef:07:0d:89:40:a6:e7:
         22:a4:ab:54:82:81:fe:8c:4d:cf:68:cf:7e:df:f4:1b:6e:4e:
         13:30:9f:23:aa:82:c3:fb:24:fa:3e:7d:64:e5:92:6f:72:97:
         4e:d2:f9:c6:46:0b:10:f4:72:57:ec:ec:56:65:de:a1:d4:c3:
         18:b7:4e:02:3e:20:f2:e9:8a:8c:eb:b0:73:a2:9e:a2:eb:96:
         f6:8c:e6:a6:fd:81:66:f3:85:ae:2c:7c:5c:c4:ee:ae:49:3d:
         06:01:6a:cb:e4:5a:ba:61:2d:1f:13:78:b0:f9:a9:a7:9a:a1:
         c0:bf:c0:70:a8:3a:56:8f:90:41:c9:a3:5d:ec:6b:0d:fc:e4:
         78:49:6a:64:bf:a1:76:fc:c3:8d:e5:cb:17:83:76:23:87:ba:
         c7:14:72:c5:ab:4a:c1:a8:a0:38:17:75:d1:6f:d8:81:96:fd:
         31:41:ac:4d:13:02:6c:79:60:f8:e7:7a:dc:df:c7:f0:3b:c7:
         19:f6:a1:1d:68:90:48:10:74:db:43:79:24:88:41:ec:59:fc:
         67:26:fa:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:03 2024 by rpki-client on console-ams.rpki-client.org