Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/c4akKBB-c507Z8RutnNTMLe9fKk.roa
File:                     c4akKBB-c507Z8RutnNTMLe9fKk.roa (raw, json)
Hash identifier:          T/sHjqolS+OrD6ucm4valHLovFK3v2meEHXXkdx10IQ=
Subject key identifier:   73:86:A4:28:10:7E:73:9D:3B:67:C4:6E:B6:73:53:30:B7:BD:7C:A9
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0114
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/c4akKBB-c507Z8RutnNTMLe9fKk.roa
Signing time:             Fri 01 Sep 2023 01:31:36 +0000
ROA not before:           Fri 01 Sep 2023 01:31:36 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        202.214.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:31:36 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7386A428107E739D3B67C46EB6735330B7BD7CA9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:51:e6:90:e2:15:ae:63:a0:43:a6:8c:9e:dd:
                    cc:7b:2c:ed:79:36:ba:67:ec:66:4a:e5:71:b9:3d:
                    a1:62:c7:b0:f0:b5:30:a3:20:b0:ac:04:7f:cd:09:
                    45:33:76:86:e0:71:85:aa:90:2d:53:59:b8:d1:a0:
                    3d:3e:72:22:70:41:89:c3:c5:6f:d2:99:6b:c0:db:
                    99:a1:f7:82:f2:8b:98:7c:fa:17:db:e9:30:7f:6f:
                    46:4e:c5:92:2f:44:9e:2a:9a:c2:f6:b5:ba:25:ab:
                    be:82:68:42:f7:82:48:b9:15:85:f6:8d:70:d3:7a:
                    c6:27:ff:78:01:8e:93:4f:77:e1:db:da:a7:87:14:
                    e5:dd:d2:ab:0a:b2:a8:08:94:d6:41:c0:35:2e:c2:
                    90:de:42:9a:86:de:e4:77:5a:ca:b5:8e:a4:43:1b:
                    20:59:ee:de:92:0a:b4:d4:b5:74:7c:40:4e:9d:e0:
                    9c:4e:3f:a9:1e:7e:90:96:e4:a0:a7:32:4e:f0:74:
                    ef:f9:c6:cd:8f:c7:6c:26:a3:6f:f4:18:0b:b0:d6:
                    ad:48:96:7f:ee:84:f3:6e:20:89:d5:a3:ac:56:5e:
                    f2:cf:65:16:6d:3f:22:85:8c:0d:de:43:fb:60:85:
                    9c:89:49:fe:56:24:e0:d1:d3:61:a7:ff:bc:b2:73:
                    92:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:86:A4:28:10:7E:73:9D:3B:67:C4:6E:B6:73:53:30:B7:BD:7C:A9
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/c4akKBB-c507Z8RutnNTMLe9fKk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9f:b4:93:01:25:1b:85:39:46:8f:22:87:75:8a:84:4c:5e:6d:
         17:67:b4:af:75:a9:af:14:9b:2b:3b:95:e0:d8:e2:da:34:66:
         2c:d6:f1:17:46:bc:f7:68:91:e9:fa:f3:d2:08:7d:2d:be:be:
         a7:e5:6d:d7:84:69:d0:d7:65:74:5b:35:69:1f:d9:97:a2:ff:
         ab:20:c1:e5:fc:69:3c:3a:80:d8:a0:ca:ce:c6:4e:ca:a0:f2:
         88:75:d9:4a:50:b1:10:df:58:73:bc:53:81:0f:1c:14:e4:3b:
         8d:77:33:83:6e:e7:60:1a:e4:f0:db:6e:73:ef:7a:e7:f3:48:
         7e:60:da:2b:46:76:28:97:4c:a4:84:7f:37:39:15:1a:b9:ab:
         e9:64:72:3a:c3:8b:26:2b:8d:f6:ee:ae:89:59:d6:54:43:77:
         79:ae:ea:41:47:62:6b:5e:77:d2:14:f2:fb:db:de:33:1a:2c:
         46:18:4e:58:3d:50:2b:36:f5:55:4a:0c:17:70:80:7c:09:02:
         a6:17:44:2b:bd:0b:4a:65:8e:ae:19:20:b7:37:12:f7:8a:16:
         a2:64:fc:1f:42:74:0b:55:e7:6d:38:d0:1c:64:54:1d:0e:bf:
         f2:b5:f5:1f:38:ca:6f:d8:d0:e2:64:02:f3:58:ee:1a:35:47:
         f0:97:c3:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org