Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/GZeZZy4JARJiB2uZ4adtzzVyAbs.roa
File:                     GZeZZy4JARJiB2uZ4adtzzVyAbs.roa (raw, json)
Hash identifier:          c6bgbF8aZeYKBDJ7kuAI1WsX35hy+hAgtnghXL7Y9p0=
Subject key identifier:   19:97:99:67:2E:09:01:12:62:07:6B:99:E1:A7:6D:CF:35:72:01:BB
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       59
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/GZeZZy4JARJiB2uZ4adtzzVyAbs.roa
Signing time:             Fri 01 Sep 2023 01:28:49 +0000
ROA not before:           Fri 01 Sep 2023 01:28:49 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        172.122.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep  1 01:28:49 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=199799672E09011262076B99E1A76DCF357201BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:89:b0:55:fe:7b:b7:9a:11:8d:2f:ab:31:1d:
                    ff:70:01:d5:3e:53:c0:a7:d9:ee:70:38:ce:76:72:
                    71:21:c2:eb:00:28:44:8e:f2:ce:48:31:06:ff:c5:
                    50:d5:91:57:5f:27:fb:06:ea:ad:31:d4:58:68:d0:
                    c2:2c:34:9e:c8:14:f0:10:8e:13:c1:de:ed:4f:9b:
                    6d:b6:0b:48:b8:0a:04:b2:56:91:d7:48:93:83:4e:
                    8d:98:6f:95:5d:b1:b5:a3:e7:3b:51:b1:80:28:6e:
                    98:63:7c:34:d3:3b:38:4b:5c:84:65:c3:b7:63:fc:
                    bf:df:e7:e6:47:41:f3:77:6b:fe:9d:29:77:49:10:
                    d8:56:92:d8:74:a4:f9:47:ea:3d:85:ec:ab:e0:9b:
                    d4:40:e0:e8:37:6d:0e:40:d8:e4:d2:51:10:06:c9:
                    51:ac:2f:05:6c:ac:ba:49:60:d6:ae:e3:b2:69:d5:
                    28:03:85:e5:b4:25:e8:23:90:2b:f2:52:b8:2e:03:
                    d9:04:3d:41:39:c9:5d:4f:ab:27:5a:67:9d:da:47:
                    0b:8a:2e:76:ca:e0:25:65:1e:c1:e8:91:31:a6:5c:
                    24:bc:a9:12:bd:ae:fc:a1:5f:5a:81:59:3a:18:ec:
                    b4:49:1c:09:03:5d:19:66:d8:1e:b6:6e:12:15:bd:
                    a8:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:97:99:67:2E:09:01:12:62:07:6B:99:E1:A7:6D:CF:35:72:01:BB
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/GZeZZy4JARJiB2uZ4adtzzVyAbs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         22:ad:fc:d7:b7:21:38:f1:10:58:a0:38:53:01:8c:70:1f:f6:
         1c:2f:42:12:d5:ba:b7:20:eb:aa:16:f4:d1:c0:c2:60:6d:af:
         15:72:f3:ab:cb:95:13:2f:27:fd:c9:0b:b9:34:b9:dd:9f:cf:
         75:92:97:80:6c:fa:de:0e:e9:15:69:65:a2:c1:af:3d:7c:a8:
         37:87:00:0a:57:9a:2a:5e:85:dc:05:87:32:56:9b:a2:3b:8c:
         bc:3e:86:a9:83:15:9d:d0:30:d5:73:2d:d5:39:d2:9d:74:f1:
         38:e4:02:df:49:31:3a:cf:ac:a2:a4:17:f4:84:79:fa:b4:90:
         01:f4:40:6a:6b:83:7e:35:7e:e7:63:9d:e9:bf:d0:38:48:71:
         0d:fa:32:2c:dc:25:e0:cd:d6:13:b5:38:ed:81:0f:ec:5e:6b:
         9a:1c:25:f0:97:26:cf:60:9a:38:e0:c5:bf:56:20:c0:d8:94:
         b8:fe:50:5f:cf:6a:c2:96:c3:99:5e:58:1c:ba:d1:d7:38:41:
         bb:fd:25:54:50:e5:01:e8:eb:0e:74:5e:91:3f:81:3e:ac:e2:
         8e:08:be:c1:e7:b2:30:6d:bf:6d:fb:41:bf:15:7a:ba:fd:0f:
         b6:3f:60:1c:96:bb:da:bf:a6:29:6f:51:f6:6d:6f:43:2c:d0:
         05:19:15:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:46 2024 by rpki-client on console-fra.rpki-client.org