Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/gDanPCG3CI4RUhk1JxZhKyHswTk.roa
File:                     gDanPCG3CI4RUhk1JxZhKyHswTk.roa (raw, json)
Hash identifier:          sfORHEg3RhGMP32stxCAezrG7HskELmsfLJVu/Por9s=
Subject key identifier:   80:36:A7:3C:21:B7:08:8E:11:52:19:35:27:16:61:2B:21:EC:C1:39
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01CD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gDanPCG3CI4RUhk1JxZhKyHswTk.roa
Signing time:             Fri 31 May 2024 01:30:50 +0000
ROA not before:           Fri 31 May 2024 01:30:50 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        210.164.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 461 (0x1cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:50 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=8036A73C21B7088E115219352716612B21ECC139
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:c6:f3:08:a7:53:65:99:51:59:dc:bd:5a:65:
                    17:24:93:ba:c3:b6:34:74:49:be:2b:5f:f8:cb:00:
                    78:30:a0:8a:64:65:7f:78:69:42:e6:8d:e6:a3:33:
                    57:a3:9e:f8:ff:28:ac:b8:fc:87:b4:96:f0:c4:fe:
                    9a:a1:ce:57:25:c1:64:c3:05:a3:21:43:31:2d:30:
                    2b:19:fe:65:ce:a8:d6:ac:8c:9c:fe:d4:2f:be:38:
                    60:ee:84:48:d7:01:cb:0f:ee:1a:41:96:62:fc:51:
                    da:2f:bb:c5:29:48:1e:f3:0b:69:ca:97:44:51:56:
                    6a:2f:55:cc:27:46:aa:5c:a5:80:62:05:79:35:25:
                    94:e0:41:11:2f:71:e4:c7:2c:ab:75:54:ca:cf:80:
                    92:11:21:31:59:5b:de:cf:f1:45:2a:f4:4c:6a:bf:
                    a6:be:3e:31:b0:df:62:bb:8c:00:8a:bc:23:95:05:
                    8b:2a:55:e2:45:ae:7c:fa:35:f0:42:b5:14:fd:5c:
                    e5:d0:c2:17:b9:ab:97:db:b3:48:ab:9c:a8:47:f3:
                    ff:c1:17:6c:07:dc:a9:ea:f5:4f:8e:f1:c9:7f:cf:
                    be:f3:d3:e8:a0:68:0d:49:44:2d:05:93:82:de:83:
                    9b:81:5a:fd:95:5d:c7:6a:0c:b6:fc:47:d2:5d:af:
                    56:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:36:A7:3C:21:B7:08:8E:11:52:19:35:27:16:61:2B:21:EC:C1:39
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/gDanPCG3CI4RUhk1JxZhKyHswTk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.164.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         cc:73:d5:63:cd:1a:83:b5:4d:20:88:5e:03:04:6b:03:0a:d1:
         f5:db:d6:e9:6d:cf:19:f8:4e:6a:f8:a3:05:75:09:d3:e6:aa:
         4e:78:ed:38:af:0b:03:36:63:34:00:fb:93:d6:37:8a:6b:1e:
         dd:13:31:4d:9f:41:0b:0e:11:1e:13:fd:eb:31:6f:38:1d:10:
         d5:d7:06:e6:ee:03:a0:93:ad:93:6f:11:aa:71:74:dd:ac:06:
         06:7a:50:03:38:a5:6b:48:f9:6e:1e:ed:16:f8:6c:54:91:12:
         4e:39:cc:b0:c6:7e:e6:eb:a0:46:5b:69:70:c1:a6:5d:4a:d8:
         8f:fc:bd:f5:d6:a0:f4:53:14:8b:cd:57:77:21:73:13:32:05:
         a3:52:b0:4a:53:be:79:04:18:f2:3b:f0:47:bd:6e:34:b7:34:
         06:0d:28:ab:7d:da:d6:10:4b:46:f6:d0:b8:bf:d3:cf:92:4c:
         9c:5e:20:e9:d0:a2:a3:b3:fb:c9:ca:16:ab:42:e8:fb:41:78:
         e2:52:f9:c0:0a:49:a5:a4:fc:e5:43:ab:ef:bb:5c:f5:b5:09:
         7b:70:c5:06:4e:c8:77:0e:1a:4f:01:e3:cd:f2:de:cd:26:7d:
         3f:a0:d2:fb:6d:b7:b4:1f:90:6f:d8:8f:7a:69:bd:2a:29:c6:
         14:a9:bb:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org