Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/6gGArX6n4LoE6rJDXzF-5iorjZU.roa
File:                     6gGArX6n4LoE6rJDXzF-5iorjZU.roa (raw, json)
Hash identifier:          x0FMi+aFxgYgV49XiAfo8v6qQHG7vldFmHMxoZYiknk=
Subject key identifier:   EA:01:80:AD:7E:A7:E0:BA:04:EA:B2:43:5F:31:7E:E6:2A:2B:8D:95
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       36
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6gGArX6n4LoE6rJDXzF-5iorjZU.roa
Signing time:             Thu 28 Mar 2024 08:33:49 +0000
ROA not before:           Thu 28 Mar 2024 08:33:49 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23818
IP address blocks:        113.212.106.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:33:49 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=EA0180AD7EA7E0BA04EAB2435F317EE62A2B8D95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:8c:84:6c:8c:5d:43:da:83:35:6f:b6:ce:d1:
                    48:bb:5f:25:b8:96:a7:ac:6a:97:9d:6f:a6:e3:03:
                    9f:f5:e6:4f:86:c5:e8:99:ee:5f:89:c7:a8:89:f3:
                    7c:c5:23:96:7e:95:5b:e0:55:91:5a:8c:6c:bb:e8:
                    12:da:78:f8:67:57:8d:d8:e9:5c:22:66:39:9f:2c:
                    50:38:bc:6c:24:9d:f8:0a:67:ba:67:b8:48:e6:bb:
                    2a:60:c2:10:4e:fb:a7:77:4a:89:37:c1:a7:44:05:
                    23:88:94:92:18:09:6e:08:f2:04:ad:2c:54:a0:b3:
                    e9:38:2a:92:db:42:30:ee:25:a2:f5:b6:24:06:aa:
                    f1:5f:4f:26:08:f6:bb:8d:d0:44:82:7f:1c:8b:0f:
                    07:1a:0b:7f:ff:33:09:f2:46:58:ed:1d:91:76:f8:
                    4b:31:39:f9:5f:01:46:ca:01:b5:4a:d2:16:dc:d1:
                    2a:e9:0d:86:60:00:ab:f8:f4:93:4f:a8:17:c8:ce:
                    22:47:5a:a7:bf:61:85:35:1d:6d:a5:1d:3e:78:cb:
                    4d:d2:2a:7a:b4:80:24:61:e6:ff:42:3f:48:8a:de:
                    b3:6f:b6:0a:39:db:51:14:4f:f2:bd:20:d7:0d:7d:
                    78:47:f4:06:77:36:61:36:8c:45:6e:e3:02:86:7e:
                    a4:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:01:80:AD:7E:A7:E0:BA:04:EA:B2:43:5F:31:7E:E6:2A:2B:8D:95
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/6gGArX6n4LoE6rJDXzF-5iorjZU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.106.0/24

    Signature Algorithm: sha256WithRSAEncryption
         48:41:57:b5:ce:d3:a9:b2:6b:ff:9e:80:73:cf:2e:1e:44:9d:
         a4:8d:f8:e7:12:17:fc:e9:39:da:ee:60:fc:fa:a0:fd:fe:37:
         68:1d:55:60:bf:26:4b:c4:33:75:28:d0:db:27:56:30:da:82:
         75:2e:12:1d:d1:36:21:68:fe:29:ca:db:c4:b0:05:2d:45:12:
         a6:0a:96:b1:5d:4e:71:3a:45:33:f9:ca:4f:c0:06:66:98:f8:
         4a:d4:72:45:ee:98:dd:cd:70:c5:4a:eb:3f:db:55:4b:f8:91:
         16:2e:93:98:ea:30:5b:a2:aa:c1:7f:63:f5:a0:27:49:73:23:
         3e:f5:ae:6e:30:7c:3c:8b:47:50:1f:62:89:ab:dd:b4:85:6e:
         67:c9:81:dd:22:bb:02:3f:3a:59:8b:92:88:63:e4:86:49:f0:
         88:2d:e0:ff:3e:9e:dd:bb:0f:71:9c:5c:01:79:52:cf:6a:26:
         e0:7e:09:19:db:eb:ca:96:56:d2:91:14:0e:df:20:32:a6:1d:
         c4:40:fb:3c:10:cc:05:18:bf:92:03:c6:a3:a8:f1:ca:45:89:
         66:e7:58:f3:24:b4:ad:51:41:4c:6b:16:a3:7b:34:2e:4d:1b:
         06:d2:65:f9:56:7a:c5:fc:c6:f4:c7:ce:61:47:34:b4:45:19:
         b5:1b:30:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org