Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/Y-6TV8-TxL8l1PICuU7HpgAirJA.roa
File:                     Y-6TV8-TxL8l1PICuU7HpgAirJA.roa (raw, json)
Hash identifier:          2IJuv7QSKwb+7P+kWvyvDVl/F+BmmXxqYKd3SfAmRfo=
Subject key identifier:   63:EE:93:57:CF:93:C4:BF:25:D4:F2:02:B9:4E:C7:A6:00:22:AC:90
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       06
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/Y-6TV8-TxL8l1PICuU7HpgAirJA.roa
Signing time:             Tue 03 Oct 2023 07:52:35 +0000
ROA not before:           Tue 03 Oct 2023 07:52:35 +0000
ROA not after:            Wed 18 Sep 2024 07:00:52 +0000
asID:                     24255
IP address blocks:        202.127.80.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Oct  3 07:52:35 2023 GMT
            Not After : Sep 18 07:00:52 2024 GMT
        Subject: CN=63EE9357CF93C4BF25D4F202B94EC7A60022AC90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:24:49:18:9d:bd:ea:1e:ae:72:18:c4:01:39:
                    6a:db:83:d8:3d:23:7d:f0:7a:90:9d:9b:06:ff:d4:
                    06:d9:34:86:ab:e4:11:67:41:69:e3:ec:a5:60:40:
                    74:17:97:17:6f:df:8f:40:c5:90:81:03:b3:07:22:
                    fa:30:ed:17:ff:88:db:d8:8c:44:93:e5:12:0a:be:
                    9d:25:58:fa:03:7d:31:48:27:6f:2c:de:50:1b:6e:
                    5c:04:5e:d7:a8:b7:a7:b2:17:5d:d3:ef:d0:44:7d:
                    a5:2e:55:da:c7:e2:11:b2:4d:df:6a:e1:5b:6e:a3:
                    5d:4c:f0:f1:f2:ed:a3:17:bb:d0:40:b4:72:42:5a:
                    0b:01:c2:8f:7d:38:b6:31:ec:e0:ba:6b:1f:e0:c9:
                    8b:3b:4f:47:d3:40:e8:30:4c:63:6d:74:44:07:2f:
                    c6:8c:13:d7:02:de:40:6c:ff:45:c3:20:11:22:53:
                    9a:35:b1:75:f8:97:78:bd:79:41:55:da:4b:ae:5e:
                    f3:ed:3e:40:e8:f2:f1:6e:de:78:51:d0:8e:5c:fc:
                    36:20:16:85:34:78:97:a3:35:6f:da:c8:78:f2:e4:
                    cb:6f:7b:48:34:94:24:5b:bd:09:38:b6:7e:c4:fc:
                    04:89:b4:45:14:b5:8c:31:3e:fb:a2:12:ca:1f:8a:
                    6e:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EE:93:57:CF:93:C4:BF:25:D4:F2:02:B9:4E:C7:A6:00:22:AC:90
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/Y-6TV8-TxL8l1PICuU7HpgAirJA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b0:ad:18:9f:12:53:84:c3:cc:2e:8b:8d:24:f3:24:3c:97:9e:
         49:ad:1b:9d:7b:8f:39:85:1a:ee:8b:fc:ea:6c:c4:98:e2:72:
         3c:46:96:9f:c9:b3:25:c1:37:f7:40:6d:8a:db:52:82:64:d8:
         4b:9d:cc:c8:f4:c8:63:0a:78:8e:7f:8d:01:b2:75:b9:6a:f7:
         07:19:9c:50:c5:a1:66:9a:5e:57:83:20:f3:52:af:18:05:fb:
         cc:01:21:bb:f9:bf:9e:d7:d0:91:4c:4c:75:65:95:9b:d4:ea:
         b3:77:f7:08:0c:de:77:40:8e:b6:d6:d4:ff:57:5c:21:3e:6f:
         70:c5:86:2e:6a:9b:9a:c2:82:a4:41:75:f4:70:0f:20:70:41:
         e8:7c:ad:71:4f:a8:cc:6e:d5:da:a8:ce:a6:63:b9:66:27:fe:
         60:23:41:aa:20:b3:8a:98:e9:57:a0:0e:c8:ac:dc:43:32:11:
         28:44:8d:14:cf:90:78:f0:ec:96:8c:00:86:fc:e1:2e:93:8b:
         0e:32:4c:46:eb:e9:4f:cc:df:72:69:c2:19:76:d2:aa:e9:e9:
         1b:19:57:33:b2:f3:d1:13:9e:fa:4f:5e:71:25:00:aa:38:71:
         34:41:ab:e7:1f:54:8e:84:a8:56:27:32:28:99:87:f4:05:7c:
         ac:a3:95:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org