Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/QB0Df8mo1rHILO68-p66Bghoh6I.roa
File:                     QB0Df8mo1rHILO68-p66Bghoh6I.roa (raw, json)
Hash identifier:          dCt6GK40HNYRQmh8tynR2BXmR8rDMaxfjIPPHO2S6DI=
Subject key identifier:   40:1D:03:7F:C9:A8:D6:B1:C8:2C:EE:BC:FA:9E:BA:06:08:68:87:A2
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       5C
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/QB0Df8mo1rHILO68-p66Bghoh6I.roa
Signing time:             Thu 29 Feb 2024 01:29:20 +0000
ROA not before:           Thu 29 Feb 2024 01:29:20 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55391
IP address blocks:        217.178.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Feb 29 01:29:20 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=401D037FC9A8D6B1C82CEEBCFA9EBA06086887A2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:21:70:a2:af:ae:6e:7d:19:5b:98:ce:5e:eb:
                    22:6d:4b:4a:e9:24:66:69:ec:6c:06:06:bf:43:fb:
                    86:a6:fe:58:4b:7b:f9:b5:61:2b:e5:5e:3d:78:30:
                    4f:4f:b9:51:ed:60:cf:ad:8e:fe:87:02:05:f2:7d:
                    91:ce:41:4f:4d:53:0a:ce:64:06:99:94:97:48:61:
                    9e:ce:25:77:e5:56:62:e7:3f:60:1e:a1:77:da:b2:
                    ca:4c:72:92:dc:5a:c9:fa:ff:b2:4c:4a:86:d1:1d:
                    b6:07:ce:88:76:51:4c:e1:32:bd:8b:27:de:22:06:
                    67:ad:ce:9e:f2:e3:98:10:68:96:17:4f:70:35:fe:
                    0b:89:08:58:cb:23:28:92:64:db:cb:9b:26:73:01:
                    f7:51:04:b7:25:78:37:27:f2:fb:52:cf:4b:12:8f:
                    40:d6:d4:13:0c:df:12:38:d8:f9:fa:74:a3:9d:e6:
                    5e:65:3f:b4:9e:ec:c6:23:40:65:9b:d6:62:93:52:
                    d5:e2:c3:5c:b8:c2:ad:41:1f:62:45:d1:45:a9:75:
                    4a:a8:03:26:60:6e:75:22:ac:5e:3c:54:cd:ea:60:
                    02:2d:94:af:6b:cb:42:0c:37:54:73:eb:bf:56:7a:
                    d0:a3:20:12:38:dc:39:47:d4:51:0c:be:d1:cc:8d:
                    89:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:1D:03:7F:C9:A8:D6:B1:C8:2C:EE:BC:FA:9E:BA:06:08:68:87:A2
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/QB0Df8mo1rHILO68-p66Bghoh6I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         7f:f2:d4:3e:b6:41:f4:79:78:75:a7:8a:81:55:79:d2:00:28:
         ef:5a:7f:b0:6a:1c:76:09:17:e2:4c:6e:5d:a6:41:06:6d:4c:
         7b:d0:1f:3b:7e:ac:e7:31:74:66:76:54:f3:6c:71:61:6c:a5:
         36:88:34:e1:11:e8:15:bb:d5:70:78:86:31:ae:3d:75:ba:13:
         90:1a:7e:41:df:1d:45:49:64:69:39:99:b1:e5:50:19:1c:07:
         96:8c:dc:c8:55:ee:af:0d:21:62:d3:53:97:bf:e0:53:4e:2c:
         10:89:cd:ed:69:99:ca:ff:86:82:92:3d:e6:3d:1e:db:8b:b6:
         47:9d:93:5e:3c:9d:eb:c4:91:c2:e8:2e:ef:0e:2c:02:06:d4:
         65:92:a7:9f:2f:b1:b7:d9:ba:48:28:f8:34:36:81:73:7b:05:
         58:33:84:c9:69:91:52:68:10:47:5d:4d:91:2e:2f:74:9f:f9:
         24:47:69:63:48:eb:18:5f:42:64:9f:27:ee:3f:b6:00:4a:a3:
         33:93:3a:f0:ca:d4:8e:f8:79:bf:8b:18:c9:47:c2:69:a3:a4:
         9a:c1:0b:c6:86:a1:4f:08:6d:40:48:40:55:91:3d:e2:28:8b:
         76:34:f6:b9:cc:f7:47:58:bd:7e:e4:bd:22:b1:a8:52:ac:a6:
         c9:7a:93:b4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:44 2024 by rpki-client on console-ams.rpki-client.org