Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7Mv6_Ga8_8pBzw1ilGMf2Nafbi8.roa
File:                     7Mv6_Ga8_8pBzw1ilGMf2Nafbi8.roa (raw, json)
Hash identifier:          ztOqk3BA6mjIY8YW8FhMHsJpOAHHulWpfUP2uhoR4Lk=
Subject key identifier:   EC:CB:FA:FC:66:BC:FF:CA:41:CF:0D:62:94:63:1F:D8:D6:9F:6E:2F
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       55
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7Mv6_Ga8_8pBzw1ilGMf2Nafbi8.roa
Signing time:             Fri 01 Sep 2023 01:28:48 +0000
ROA not before:           Fri 01 Sep 2023 01:28:48 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.8.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep  1 01:28:48 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=ECCBFAFC66BCFFCA41CF0D6294631FD8D69F6E2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:6a:27:12:41:e8:02:e1:60:cb:f2:73:34:b5:
                    df:69:cc:44:20:24:b7:64:d7:a2:1a:24:4b:c2:77:
                    5d:49:47:db:1a:8f:f0:cc:83:19:a3:88:f7:ca:16:
                    9b:fc:37:0d:1e:cf:dc:56:68:be:07:b9:c1:5b:20:
                    80:f2:43:6a:bb:75:6a:2d:b0:68:32:44:55:74:a6:
                    55:5d:3b:5b:ad:42:cb:89:b3:a8:5a:fe:a0:de:b9:
                    29:46:8b:ea:54:b2:8d:bd:4a:de:77:fa:0c:be:9a:
                    06:f6:e2:b3:15:bb:89:c4:2a:e9:4e:e2:41:b2:e9:
                    86:f2:2d:4e:47:87:6f:31:26:54:c9:5d:a9:83:a9:
                    9c:9c:00:fc:22:e5:10:08:4a:6f:8b:8a:67:de:00:
                    fc:3a:87:ef:8e:93:3e:82:3b:ca:49:c0:21:72:2e:
                    40:cd:ba:fd:2b:23:f5:3d:a3:7f:a2:ac:bc:91:50:
                    02:4a:a3:79:de:93:1e:d2:01:9a:1e:30:d3:b0:6e:
                    8c:48:81:95:14:83:40:b4:94:7c:28:69:4f:25:cd:
                    2a:e9:48:e4:5b:04:83:04:fd:a2:5a:ef:ad:a8:f2:
                    cf:d5:66:81:40:62:5c:a7:33:8c:c7:9b:62:34:4f:
                    f5:a1:e3:a2:dd:e9:95:7b:88:35:77:1f:8b:24:64:
                    d3:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:CB:FA:FC:66:BC:FF:CA:41:CF:0D:62:94:63:1F:D8:D6:9F:6E:2F
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7Mv6_Ga8_8pBzw1ilGMf2Nafbi8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         c7:56:56:27:f3:3f:62:a5:62:7a:5f:66:77:c8:a6:35:3f:10:
         d6:55:e5:68:f7:e0:bc:f6:75:7d:0f:72:0a:03:24:1b:24:b9:
         d5:f8:e5:60:02:4c:4f:68:9e:8d:bd:f8:aa:a7:b2:a5:10:99:
         78:a9:50:24:b2:b6:fc:4e:9a:f2:d1:6c:35:03:8c:19:4e:25:
         67:25:fd:39:d2:7c:5a:49:cb:75:ae:bc:8c:87:6f:c3:2c:41:
         c2:94:61:f9:e6:a8:83:c4:76:a3:42:48:6b:69:df:97:59:29:
         87:e7:f2:88:80:73:2d:c7:ea:b8:b5:e8:5b:b8:ff:ae:ed:70:
         49:77:8d:0f:f7:a9:3e:e5:2c:12:9e:12:b6:45:c0:51:52:ad:
         63:3a:1f:ec:65:46:c7:de:20:4d:76:84:6d:f1:e0:a4:32:da:
         78:0c:30:94:06:db:d8:c5:5d:0a:df:de:4a:80:91:b4:25:6c:
         fc:50:bd:14:ae:15:83:55:2a:6d:c3:fe:10:df:b2:5a:ba:eb:
         17:97:d8:8f:95:1e:a4:9f:78:27:03:b4:89:8e:f6:8e:26:fa:
         f8:b5:97:80:2e:8d:7a:90:e8:98:e6:14:f4:1c:0a:80:0f:4c:
         27:8c:da:5f:fa:a7:76:fb:e3:29:cb:4c:2b:1e:30:ea:5b:06:
         e9:c3:12:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org