Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
File:                     CUmTcgLyph0lRStsptCTODWpSLA.roa (raw, json)
Hash identifier:          6QnR3IaxMiiIJkNVvOOzG9nuvPWwIfG/Tgme77VW0gw=
Subject key identifier:   09:49:93:72:02:F2:A6:1D:25:45:2B:6C:A6:D0:93:38:35:A9:48:B0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0112
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
Signing time:             Fri 01 Sep 2023 01:31:35 +0000
ROA not before:           Fri 01 Sep 2023 01:31:35 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        211.14.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 274 (0x112)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:35 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=0949937202F2A61D25452B6CA6D0933835A948B0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:f4:c3:aa:96:42:2c:92:ec:27:df:05:22:a1:
                    0e:a0:fc:0e:c0:bf:ff:89:80:34:22:e9:ed:45:02:
                    48:60:d8:00:45:e3:bc:ab:25:89:c4:ef:22:be:11:
                    0e:41:cc:cb:e6:72:4f:b2:5f:14:cf:bf:bc:66:4e:
                    85:e1:15:6a:7a:a7:31:ff:75:75:ef:6a:e3:c6:a4:
                    ad:ea:3e:c2:9a:5b:ea:66:ca:38:7d:fa:67:e2:f9:
                    2b:4f:eb:2d:8c:4a:51:89:16:b2:10:09:c9:81:43:
                    be:68:05:b2:82:a7:9a:0b:4b:11:3b:d5:ae:77:4d:
                    3e:81:1e:67:4e:f7:d7:51:b4:cd:c5:d1:e7:8e:d9:
                    4c:b4:63:74:96:3b:75:c5:1f:0e:44:55:63:b8:51:
                    d2:3e:80:de:ab:56:99:45:cb:53:63:a3:9a:f4:1d:
                    ba:5c:81:d1:9a:74:09:fb:83:55:c5:7e:48:ad:59:
                    39:45:c5:aa:dd:95:88:22:33:3b:d6:f0:35:b9:56:
                    67:f4:64:0a:db:23:28:f6:60:8d:1d:06:8a:2e:d8:
                    eb:86:e0:1f:43:27:12:76:83:8f:9d:96:f2:7f:18:
                    f2:5b:2d:15:6c:63:53:19:ca:c8:00:ff:29:6e:46:
                    88:6d:0d:f0:31:a2:f9:5c:a6:43:a5:6b:ba:05:13:
                    56:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:49:93:72:02:F2:A6:1D:25:45:2B:6C:A6:D0:93:38:35:A9:48:B0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/CUmTcgLyph0lRStsptCTODWpSLA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9c:ee:32:8d:44:90:04:5d:48:e1:ee:b2:36:41:10:c2:eb:41:
         7e:b3:19:22:3e:d5:bd:09:4c:3a:43:a2:e0:e9:5c:bd:a2:27:
         25:35:fa:a3:09:39:94:c5:f6:ab:fd:8f:d6:da:95:f8:a5:af:
         7f:11:be:13:65:58:a0:89:6a:db:b6:da:d9:f3:cd:f3:e3:8b:
         29:e8:7c:be:56:a4:16:71:8d:e2:9f:73:c4:c9:63:4b:cb:4e:
         19:0a:32:c1:99:a2:12:91:f3:82:38:4e:02:d6:82:ce:89:6b:
         22:4d:72:1f:6a:54:a0:4a:96:50:15:48:80:06:ed:8f:8c:4e:
         97:c8:87:71:a9:5c:e4:8a:65:af:fe:0e:bc:2e:ad:fa:e7:f4:
         15:41:e8:90:0f:7e:02:f9:50:96:de:89:a6:7a:4b:13:5c:ee:
         68:50:45:0e:c0:a3:4b:1e:11:22:1b:1c:eb:a9:87:a6:56:19:
         41:fa:26:08:e0:d9:4f:fe:f3:c1:4b:f9:8f:94:af:17:0c:fa:
         90:8f:61:93:e3:a1:fa:c5:1f:0c:6b:ae:7a:02:ec:3b:41:6d:
         6e:f5:95:fb:f1:d8:5d:b7:74:b2:0f:b7:1e:0b:59:0c:b7:ea:
         4d:18:4f:54:35:34:e0:3e:69:4e:33:34:bb:03:94:98:a1:ba:
         cc:f2:77:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:01 2024 by rpki-client on console-ams.rpki-client.org