Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/O6kJapsEaLdynNyRJFztLxo_AEM.roa
File:                     O6kJapsEaLdynNyRJFztLxo_AEM.roa (raw, json)
Hash identifier:          4K16Re8K705+5vS8bdTLiFsLkuB0GXkUgAqesfkF0KY=
Subject key identifier:   3B:A9:09:6A:9B:04:68:B7:72:9C:DC:91:24:5C:ED:2F:1A:3F:00:43
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       02
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/O6kJapsEaLdynNyRJFztLxo_AEM.roa
Signing time:             Fri 25 Aug 2023 02:17:15 +0000
ROA not before:           Fri 25 Aug 2023 02:17:15 +0000
ROA not after:            Wed 21 Aug 2024 06:10:04 +0000
asID:                     17685
IP address blocks:        61.195.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Aug 25 02:17:15 2023 GMT
            Not After : Aug 21 06:10:04 2024 GMT
        Subject: CN=3BA9096A9B0468B7729CDC91245CED2F1A3F0043
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:69:0b:46:bf:57:9e:a9:e4:71:e9:0f:8b:9f:
                    47:3f:89:6b:70:3a:f6:7c:7e:34:dc:02:0f:0d:5f:
                    73:d0:99:04:77:75:b3:25:33:ad:cb:b5:d0:7d:fd:
                    2e:cf:12:13:9b:28:00:90:e7:50:a2:26:19:35:88:
                    00:8d:32:0c:0d:c5:75:61:24:07:6d:92:59:03:c6:
                    66:45:a7:0f:08:ca:47:e5:fd:bb:82:4f:91:30:3b:
                    ef:94:72:01:4c:0f:7a:df:ae:8d:a8:2d:72:ec:f6:
                    ca:78:09:8a:ef:68:72:69:da:7a:67:6a:85:22:c9:
                    cd:88:64:94:e0:49:10:38:6b:5e:b3:89:ce:80:0b:
                    33:c1:9c:c3:ef:04:8a:cc:f2:fd:ee:67:17:46:03:
                    6f:9c:db:14:ce:39:d9:28:07:fa:b3:69:1a:f9:75:
                    2c:6a:ba:52:d1:91:9a:3b:22:0b:15:19:ca:72:ec:
                    04:be:42:66:c2:00:a1:ec:03:50:42:96:48:a2:14:
                    b4:de:eb:d8:5e:93:19:28:d9:02:e5:69:8a:02:44:
                    bc:d8:65:42:5c:5e:c3:20:a9:0e:ed:36:eb:8a:8d:
                    44:b2:54:9d:93:1e:43:8d:9d:2a:fa:63:59:cc:81:
                    11:9e:75:72:23:92:60:99:4b:63:3c:9b:50:03:44:
                    f5:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:A9:09:6A:9B:04:68:B7:72:9C:DC:91:24:5C:ED:2F:1A:3F:00:43
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/O6kJapsEaLdynNyRJFztLxo_AEM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:dc:5b:ef:38:7e:09:c8:d9:47:b4:37:dc:b9:8b:8b:9e:e1:
         ff:61:b1:a7:df:4d:7d:97:4f:81:c0:ab:eb:31:ca:82:b3:42:
         0c:6b:b7:32:30:d9:96:6f:07:ed:96:ae:1b:1a:51:e7:45:0f:
         05:7c:7e:70:59:d3:40:59:15:0d:7d:16:d7:37:e5:94:86:0a:
         33:ef:82:29:20:50:08:2b:4b:84:be:c7:b8:09:98:de:00:2f:
         50:4d:ee:41:ee:d0:10:6c:c7:fd:40:44:4c:32:82:01:5a:d6:
         d3:c2:ed:4e:c3:ad:4f:54:ab:e6:db:03:12:bd:5e:42:1a:e9:
         0f:aa:52:fb:62:87:cb:d8:8c:dc:3b:d3:28:4a:ef:f3:b1:7b:
         ef:b6:09:ce:b6:90:45:fd:50:0b:9b:f9:c3:5f:be:44:59:3a:
         e1:d2:f4:cd:84:67:b3:ab:84:65:76:98:46:cd:22:c6:53:be:
         e1:3a:0b:a0:33:25:7b:5e:fc:e3:2f:cd:89:c6:47:0e:ba:1c:
         00:65:05:50:47:a3:39:d2:e9:ce:e3:8e:7b:3b:8b:e8:be:1d:
         b0:f1:12:4b:93:11:a6:3a:7e:28:2c:72:ba:11:80:4b:62:4f:
         90:1a:f8:83:a0:35:c3:47:e7:9a:e2:13:16:07:0d:61:2e:cb:
         37:dd:80:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org