Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/Sn36VJZ1jvc7aPxH3W8OEkURHwY.roa
File:                     Sn36VJZ1jvc7aPxH3W8OEkURHwY.roa (raw, json)
Hash identifier:          oYb0u1RlMqAWWUdZ5BtW27QHd7AHHyLVmgv2TQgpVm0=
Subject key identifier:   4A:7D:FA:54:96:75:8E:F7:3B:68:FC:47:DD:6F:0E:12:45:11:1F:06
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       33
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Sn36VJZ1jvc7aPxH3W8OEkURHwY.roa
Signing time:             Fri 01 Dec 2023 07:35:39 +0000
ROA not before:           Fri 01 Dec 2023 07:35:39 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     59125
IP address blocks:        160.237.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:50:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Dec  1 07:35:39 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=4A7DFA5496758EF73B68FC47DD6F0E1245111F06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:56:b1:d5:d7:61:a7:f1:36:5a:f2:fa:50:53:
                    a5:9c:ea:9e:9d:9f:f3:a4:3a:06:2b:c2:d1:b5:b2:
                    86:dc:d1:05:f4:2c:fe:18:64:08:0e:93:f9:5a:c2:
                    80:40:a3:b3:fd:67:1f:e3:9b:71:82:f8:1b:06:92:
                    7a:94:34:e7:6f:36:bf:8b:3e:de:bf:f0:dc:c9:72:
                    d9:60:b8:25:dd:06:71:4d:b5:32:37:75:10:a5:a5:
                    06:99:f2:89:99:62:81:5e:b2:0b:34:fb:7b:11:79:
                    e1:b1:06:05:b2:f9:b8:d6:bc:ce:31:eb:32:46:68:
                    c9:61:d3:d0:20:db:fe:97:32:63:73:24:62:ab:3c:
                    3f:80:60:fb:48:7e:37:3a:14:e2:27:38:dd:00:6b:
                    33:63:59:d1:f8:21:fe:7a:17:11:92:8c:ad:b6:e7:
                    e3:5c:e4:c4:3a:45:f8:f3:f4:40:86:43:9e:d3:8c:
                    48:fe:b6:44:e1:35:16:ea:de:e1:2e:93:86:41:9b:
                    29:d3:28:52:21:08:6d:2c:25:ef:28:d8:fc:ff:14:
                    ff:f0:e1:c4:29:1e:a5:88:8e:f1:a2:30:6f:8e:b1:
                    e8:4a:96:46:2e:fb:29:49:57:33:ba:03:64:e2:87:
                    f1:b6:d9:97:71:1c:06:1b:d5:d2:f6:b7:ec:61:09:
                    b2:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:7D:FA:54:96:75:8E:F7:3B:68:FC:47:DD:6F:0E:12:45:11:1F:06
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/Sn36VJZ1jvc7aPxH3W8OEkURHwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         bc:79:99:3b:46:a8:34:e1:fc:8b:b6:b3:b5:7f:95:74:05:43:
         76:14:55:d0:3e:60:03:1b:36:2d:a5:28:de:a6:08:40:4e:97:
         d6:97:d7:72:2b:95:b7:d6:b5:b8:bd:af:f8:9d:62:e6:e4:3e:
         52:54:57:58:8e:e3:a2:2d:a7:3c:d9:13:a1:93:f2:56:79:04:
         8d:cd:0a:c4:3f:8e:4e:13:7e:5f:9c:da:e4:f1:45:ad:b0:fb:
         c0:09:0f:81:40:7b:75:90:b7:0e:a8:09:c7:1c:3b:7c:70:12:
         48:68:59:df:c2:83:11:9c:55:a7:b5:89:fe:49:c9:24:ff:17:
         69:c3:0a:cf:f2:0d:35:07:94:18:ba:bd:38:5d:38:89:b6:5b:
         c3:2d:34:3c:98:63:91:6d:f4:6b:51:df:03:f6:0f:c8:63:b4:
         ad:be:44:e8:7f:a0:3d:e2:4b:65:f3:28:81:eb:4b:e0:40:b0:
         e2:0d:71:89:17:69:7d:a9:5e:88:47:07:2e:92:34:6a:9a:b7:
         38:25:9b:3c:be:46:df:9c:83:07:8f:0c:fb:e0:22:89:7e:34:
         51:81:a1:18:1d:15:cf:37:f4:d0:91:27:e7:97:32:07:81:ce:
         ff:93:10:f3:ed:74:bc:71:5b:cd:40:3e:af:eb:5e:28:c8:76:
         0b:06:71:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 30 15:56:16 2024 by rpki-client on console-ams.rpki-client.org