Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/a_EDNZTeRPpY4YVtX5W6JULtf1M.roa
File:                     a_EDNZTeRPpY4YVtX5W6JULtf1M.roa (raw, json)
Hash identifier:          U6l3w/dsr99RpBJPR0DtMvZyS/zVIbYk9oqtrrXVdbE=
Subject key identifier:   6B:F1:03:35:94:DE:44:FA:58:E1:85:6D:5F:95:BA:25:42:ED:7F:53
Certificate issuer:       /CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
Certificate serial:       50
Authority key identifier: D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/a_EDNZTeRPpY4YVtX5W6JULtf1M.roa
Signing time:             Thu 31 Oct 2024 01:30:35 +0000
ROA not before:           Thu 31 Oct 2024 01:30:35 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     9621
IP address blocks:        157.120.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6900F1E3126E609EF4F1A0FB855EB4DE4E3A18A
        Validity
            Not Before: Oct 31 01:30:35 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=6BF1033594DE44FA58E1856D5F95BA2542ED7F53
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:4d:89:a9:8b:5d:4c:bc:70:fa:c2:28:0f:
                    5c:3a:5e:8c:d5:f1:dd:c4:bf:74:24:2b:9e:83:64:
                    6a:26:24:d2:07:72:2d:87:97:95:13:d8:35:7a:78:
                    af:31:4b:98:95:8f:28:d9:28:a8:cb:5b:e8:9c:82:
                    de:3d:a6:d1:78:63:2b:ca:74:41:9d:90:df:7e:b5:
                    eb:f9:1a:94:78:f2:9b:89:43:75:44:3b:9b:80:4d:
                    6f:e8:42:36:8e:eb:a5:70:5a:dd:0b:19:bb:ab:a8:
                    47:21:56:e0:01:e7:d0:16:76:ad:b6:5f:23:9e:60:
                    98:fd:00:dc:8c:f8:d9:d7:05:d4:09:bb:83:33:55:
                    c1:2e:fb:07:17:88:a3:b1:0b:0f:2b:06:e9:b0:aa:
                    a7:74:b9:12:2e:e3:4f:68:23:0c:88:3d:26:31:52:
                    c1:c2:6f:0b:eb:f6:fc:df:61:bd:d6:1d:28:4a:55:
                    51:35:26:fc:c5:d8:6c:f6:94:ba:47:de:21:33:b3:
                    33:0f:69:35:0e:26:3b:3f:f2:45:dc:56:1c:84:18:
                    72:6a:ea:a5:13:89:e7:98:f2:4c:2d:fc:9e:19:d8:
                    38:b0:0d:94:cc:1e:28:a7:1c:72:05:0f:14:e8:e4:
                    63:ff:94:c3:35:dc:f5:b4:31:b5:80:15:94:2b:6f:
                    57:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:F1:03:35:94:DE:44:FA:58:E1:85:6D:5F:95:BA:25:42:ED:7F:53
            X509v3 Authority Key Identifier:
                keyid:D6:90:0F:1E:31:26:E6:09:EF:4F:1A:0F:B8:55:EB:4D:E4:E3:A1:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/1pAPHjEm5gnvTxoPuFXrTeTjoYo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1pAPHjEm5gnvTxoPuFXrTeTjoYo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/a_EDNZTeRPpY4YVtX5W6JULtf1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         73:23:33:a7:1d:69:01:35:b8:d5:35:1f:d3:50:51:58:2d:71:
         4b:9f:02:6c:63:b9:2e:68:c5:29:62:ed:fb:30:45:ad:48:ff:
         f3:27:27:63:11:b3:25:7b:82:c1:61:c0:0a:c9:80:c9:15:79:
         14:fa:4c:3e:53:5f:a7:a4:97:b4:f1:fb:24:9b:e4:26:f1:ef:
         a8:51:31:cf:6a:96:5f:4d:57:95:c7:1d:5d:c6:55:fc:7e:37:
         54:86:15:f9:b0:9e:1a:0d:be:8c:d8:a9:8e:a4:52:bc:f6:47:
         97:c8:13:98:b5:d5:6b:b0:ba:3c:a1:22:d9:8b:b1:ae:68:db:
         29:b0:24:68:ba:7e:2e:55:c0:5c:c0:ca:0b:60:1c:3b:7a:da:
         d3:4e:0d:5a:29:bf:3e:a2:0d:0a:43:59:e7:ab:93:e3:b2:8d:
         1f:1f:57:dd:93:92:17:fd:a8:fa:8c:f6:17:29:32:93:25:45:
         90:5c:dd:77:f2:07:7b:c0:0c:3d:3b:fb:30:ba:b3:24:72:67:
         57:4b:56:0e:b3:15:ae:84:80:86:a3:9b:d6:2a:dd:cd:5b:eb:
         93:d2:a7:bc:63:d0:f3:b6:3a:89:ab:69:0e:ff:7e:8e:64:29:
         94:f1:0a:1e:1f:ff:fc:61:9d:f4:f1:2c:5d:bc:78:9c:ae:9d:
         00:e4:9e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:18 2024 by rpki-client on console-fra.rpki-client.org