Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Y-9RYOj6MTKPgiEs_OCb47OoUwg.roa
File:                     Y-9RYOj6MTKPgiEs_OCb47OoUwg.roa (raw, json)
Hash identifier:          OCoYkoSncEAOHXkjHMY5bzNFdZQwF87alw6tChZQF6g=
Subject key identifier:   63:EF:51:60:E8:FA:31:32:8F:82:21:2C:FC:E0:9B:E3:B3:A8:53:08
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0124
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Y-9RYOj6MTKPgiEs_OCb47OoUwg.roa
Signing time:             Sun 01 Oct 2023 01:28:37 +0000
ROA not before:           Sun 01 Oct 2023 01:28:37 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2497
IP address blocks:        58.138.0.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 292 (0x124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct  1 01:28:37 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=63EF5160E8FA31328F82212CFCE09BE3B3A85308
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0b:2e:28:05:af:b2:60:c9:0e:f9:30:24:28:
                    90:e2:9d:bf:fd:84:ca:36:b5:e7:59:2a:c4:07:30:
                    e2:2f:cf:d6:f4:e5:54:16:e8:3d:68:0f:17:96:fb:
                    86:3e:7c:b7:8d:cd:4a:20:c8:46:32:dd:5d:c7:48:
                    67:06:35:dd:43:f8:8e:97:04:fc:5d:00:ae:7f:0a:
                    c0:ea:73:55:13:8f:58:29:48:fe:11:bf:d6:da:e8:
                    67:1d:ef:d6:06:2b:1d:69:53:70:d5:39:3a:e2:39:
                    5d:12:51:d9:ad:6a:2a:fa:01:e1:78:97:76:fa:87:
                    06:3e:8f:29:7e:8f:10:69:25:95:4a:0d:c8:da:10:
                    ad:ce:57:7f:e1:64:0d:9d:7a:c8:1d:38:e3:97:7a:
                    f5:a9:30:37:fc:b6:6b:f3:b4:ae:0b:14:14:d0:d2:
                    92:e3:c1:98:f6:4c:8e:a2:09:03:8a:7e:e7:d5:3f:
                    ba:0d:50:32:4b:d8:ed:3f:db:47:6d:06:fb:63:41:
                    14:37:35:35:41:90:a6:74:60:b3:92:84:ae:62:d7:
                    67:0f:c8:bd:47:1d:f3:67:e6:e2:9a:4f:e7:67:81:
                    fb:ae:33:32:fa:5b:be:59:30:87:b1:bb:a7:8a:a1:
                    79:bd:99:be:fe:c8:0d:84:f7:52:27:11:70:47:1c:
                    8f:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:EF:51:60:E8:FA:31:32:8F:82:21:2C:FC:E0:9B:E3:B3:A8:53:08
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Y-9RYOj6MTKPgiEs_OCb47OoUwg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:d5:7b:30:41:b2:08:7c:80:85:dc:4a:20:11:d4:79:8d:19:
         5a:15:6c:b3:80:51:43:13:de:b0:2c:96:7e:f5:3a:82:55:b2:
         0d:b5:e9:78:d9:cb:12:f4:10:e0:82:43:e6:3b:97:5d:60:98:
         0b:b6:86:17:c9:26:ca:6b:1d:a8:36:ef:cf:e7:bd:60:34:11:
         7a:71:f2:14:e3:ff:2a:fe:90:e5:47:59:f2:e1:f4:4d:cf:5d:
         3a:58:69:53:e8:04:b6:40:de:cb:82:81:f8:06:92:c6:72:ff:
         97:d0:85:ac:16:40:51:c9:9d:38:eb:00:cf:11:a9:58:05:77:
         5d:5f:ca:94:99:eb:3d:db:80:9e:81:1c:ff:8b:99:7f:87:85:
         ad:f4:e0:4a:92:2e:e6:6b:3f:7a:84:b5:b8:82:c0:d6:af:92:
         c8:1e:cc:1e:14:b7:8e:91:70:29:90:e9:5c:73:f4:ea:65:f7:
         6f:a0:e7:1b:cb:9b:78:11:b3:99:14:c2:bc:40:3d:e0:8a:e5:
         2a:63:39:a6:e1:bf:6c:f4:3c:a3:63:04:78:0c:33:e9:aa:ad:
         e8:c4:25:39:0e:28:f2:f5:0a:50:02:13:dd:57:c4:7a:ac:15:
         73:64:6d:98:4c:6a:1c:3c:33:29:b7:20:ee:5a:7b:3a:79:41:
         f7:a9:1e:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org