Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4duQKIYLZhQSMf-utjrp6Z2eBWY.roa
File:                     4duQKIYLZhQSMf-utjrp6Z2eBWY.roa (raw, json)
Hash identifier:          9/aZNSTCHW+O5WNFdknM+KVzJZ2qohWV6+boz+urrm4=
Subject key identifier:   E1:DB:90:28:86:0B:66:14:12:31:FF:AE:B6:3A:E9:E9:9D:9E:05:66
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       59
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4duQKIYLZhQSMf-utjrp6Z2eBWY.roa
Signing time:             Fri 01 Dec 2023 01:30:22 +0000
ROA not before:           Fri 01 Dec 2023 01:30:22 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7514
IP address blocks:        210.155.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:30:22 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E1DB9028860B66141231FFAEB63AE9E99D9E0566
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:51:ec:51:84:6f:78:7e:a3:27:bc:6b:10:51:
                    33:e2:03:d5:3a:ad:a2:25:61:f2:ff:85:93:0b:01:
                    6c:f9:54:ab:5b:6a:d6:7c:4f:90:51:1d:a7:80:af:
                    bd:05:97:f8:6a:a4:e4:cb:70:df:04:ec:97:9d:8d:
                    21:8e:de:f2:d6:d6:c5:ee:e6:19:63:58:50:ff:fd:
                    b9:1f:bb:fd:3e:f5:4e:79:75:42:8f:fb:9c:ea:8e:
                    cb:6a:f4:5e:29:df:72:e6:35:1c:0f:b1:ca:3b:93:
                    59:b0:e3:9e:9a:bc:55:52:74:e9:2b:02:89:5e:eb:
                    59:5c:fd:e4:7d:06:55:14:53:ac:93:9e:2c:a6:4b:
                    1a:86:9c:3c:4e:ad:f9:08:9f:75:ce:e3:b7:4c:8a:
                    2c:85:d9:5f:5c:12:95:35:9f:0c:ac:ae:16:29:df:
                    98:f5:9e:58:9a:b4:63:ae:a9:48:7d:77:92:9c:01:
                    6c:37:5d:29:4d:b3:7d:68:d2:9f:03:ea:8e:68:35:
                    a6:ae:42:ce:2e:7b:d2:6a:57:fb:8e:a7:dc:99:cd:
                    26:d6:b1:eb:62:38:8f:03:89:cd:e3:cf:e7:3f:76:
                    58:63:ad:cf:d6:e4:13:97:37:8a:f4:31:8b:22:7c:
                    89:69:b7:d9:44:97:4b:e6:e2:54:11:53:fc:7b:80:
                    46:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:DB:90:28:86:0B:66:14:12:31:FF:AE:B6:3A:E9:E9:9D:9E:05:66
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/4duQKIYLZhQSMf-utjrp6Z2eBWY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.155.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         62:37:66:11:61:bb:96:cf:e5:c7:ae:8c:37:67:bd:73:3d:20:
         dc:e6:54:f8:8b:6f:a3:5b:f3:fb:90:35:ca:c9:8e:1e:02:3c:
         9e:87:9a:c6:38:ec:1a:00:24:50:c1:42:f5:7f:6e:8d:3f:a5:
         13:9a:cb:4c:8d:87:81:ec:7d:b1:f3:74:b0:f6:1e:c8:bb:8f:
         9a:56:ce:dd:ac:c7:53:cd:b8:f3:70:4c:8c:7d:a2:5b:cd:f0:
         6e:b4:c1:d5:c6:6f:28:a8:56:46:55:f7:ba:5a:03:0a:d2:61:
         6d:cb:2d:12:c5:b8:0a:f4:64:48:c8:74:27:9f:c0:1d:12:2a:
         c6:1f:03:e4:e2:74:c4:0b:35:27:73:b9:61:9a:6f:89:f3:05:
         a7:79:ff:dc:c9:65:5d:50:4b:d3:ef:8a:1a:45:3c:28:f8:3a:
         c2:b3:8e:1d:b0:ba:c5:1e:a9:5e:f6:f0:22:94:a7:28:0c:d3:
         6c:b8:b4:7b:a7:3e:1a:53:1a:17:b8:d6:55:e1:f6:7d:8b:ee:
         57:0d:10:52:bc:ad:b1:02:7d:5e:33:23:c8:3a:2b:ce:02:14:
         43:0f:cb:a7:b7:c3:58:d2:a7:1b:f2:c8:8c:91:5f:bc:11:5f:
         7b:fb:8c:65:61:b8:0a:7a:e0:08:f7:e6:a0:f9:04:cd:bf:3e:
         ad:db:f7:4a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:06 2024 by rpki-client on console-fra.rpki-client.org