Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/iizKwRb5_uVhzGmnZF3WRht4k5Y.roa
File:                     iizKwRb5_uVhzGmnZF3WRht4k5Y.roa (raw, json)
Hash identifier:          UZY+7rFZiwY0WyXf++Fzo6P037uWDRNJVpv8Vkuj0UA=
Subject key identifier:   8A:2C:CA:C1:16:F9:FE:E5:61:CC:69:A7:64:5D:D6:46:1B:78:93:96
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       58
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/iizKwRb5_uVhzGmnZF3WRht4k5Y.roa
Signing time:             Fri 01 Dec 2023 01:30:21 +0000
ROA not before:           Fri 01 Dec 2023 01:30:21 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:30:21 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=8A2CCAC116F9FEE561CC69A7645DD6461B789396
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:6e:12:66:c0:ee:55:e0:01:6d:58:5c:14:cb:
                    35:22:b5:17:ac:b4:a6:d3:2f:39:2f:ad:68:76:97:
                    f6:d7:64:79:fd:43:50:f0:ec:4a:e8:85:a3:31:61:
                    b4:7b:4b:03:6f:d6:7e:b0:1a:68:2a:6e:47:17:c5:
                    e8:01:a6:d8:d8:d3:4b:55:0c:3c:9d:7f:d2:3c:32:
                    31:93:bb:61:1d:eb:55:bd:93:1d:51:d3:f0:df:79:
                    fe:d1:a7:56:40:05:1e:27:0c:a4:2e:b1:e2:c0:5b:
                    d8:31:f8:0d:d1:50:6c:8b:be:da:95:a4:2b:fe:1a:
                    ee:25:e4:d8:b1:b8:2b:b9:9e:c7:7e:b2:e3:13:79:
                    1c:ab:ca:10:46:26:19:e9:71:fd:c7:50:b5:33:b3:
                    a1:3b:5e:e0:14:0b:37:7d:19:70:10:1d:e6:2b:a3:
                    93:7b:32:3b:4d:ed:a7:43:f9:27:fa:2e:fa:54:fc:
                    6c:7a:cf:17:e1:e1:2a:c7:cd:97:45:4d:94:52:1a:
                    ee:87:52:83:0a:59:c7:33:2e:91:d2:52:2b:60:a7:
                    98:d9:41:6b:50:27:9d:23:5a:46:70:df:d7:6c:0f:
                    37:7d:a5:fc:b2:1f:ab:d9:8a:da:01:82:1d:5c:11:
                    79:58:fa:8a:29:c2:32:00:8a:72:7f:be:fe:a8:73:
                    41:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:2C:CA:C1:16:F9:FE:E5:61:CC:69:A7:64:5D:D6:46:1B:78:93:96
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/iizKwRb5_uVhzGmnZF3WRht4k5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:12:ee:ee:fc:41:23:cd:c8:cc:27:62:fe:68:43:01:a6:cc:
         22:eb:1a:37:e6:3f:9c:76:41:f3:21:d2:9d:8d:8f:e6:25:28:
         cf:0c:11:e1:73:68:de:8f:45:c8:ab:c6:32:ac:ab:bc:cc:ac:
         dd:87:32:13:73:7a:ad:75:73:7b:79:ad:6c:93:76:2e:02:5b:
         af:48:a5:5b:31:ec:82:d8:1a:93:bd:6b:6f:42:8a:fa:ef:0a:
         e8:f2:40:7a:7a:16:54:34:bc:f6:9b:f5:08:94:65:44:11:e2:
         22:23:03:ea:24:47:e7:8e:2d:1d:98:78:60:3d:97:b6:09:1b:
         d4:6d:b8:7a:0d:c4:a8:b6:db:44:d9:b1:be:9f:c8:6a:56:26:
         39:b8:5a:c8:2a:fc:2d:94:eb:5b:14:fc:26:e7:82:6b:33:ce:
         21:7c:ab:68:d3:2e:5b:92:60:0f:d9:a3:d5:ed:55:22:08:f9:
         6a:b0:59:c0:93:e4:ad:b7:26:4e:69:71:f2:40:5f:21:28:6c:
         f7:a8:6e:92:ea:a9:46:a9:73:cd:56:66:aa:36:52:c7:f7:9c:
         82:57:9f:55:e3:2d:24:c9:41:4b:7a:98:65:40:ac:fd:7d:48:
         c2:79:fd:a8:d6:0e:be:d3:07:9d:0e:cd:53:d8:44:cc:54:0c:
         fb:9e:7d:74
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org