Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/f_GSaB6yvvUIoAChed5qxNOpuhM.roa
File:                     f_GSaB6yvvUIoAChed5qxNOpuhM.roa (raw, json)
Hash identifier:          NhhU2cQK68o5jNiC2zG/gt+lAdjnrrmiPVXfMfJUcF0=
Subject key identifier:   7F:F1:92:68:1E:B2:BE:F5:08:A0:00:A1:79:DE:6A:C4:D3:A9:BA:13
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       FC
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f_GSaB6yvvUIoAChed5qxNOpuhM.roa
Signing time:             Fri 01 Sep 2023 01:28:53 +0000
ROA not before:           Fri 01 Sep 2023 01:28:53 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        202.141.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 252 (0xfc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:53 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7FF192681EB2BEF508A000A179DE6AC4D3A9BA13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:f3:d7:1c:e4:45:ad:ac:36:8b:a4:c1:a2:2b:
                    8c:fa:20:52:10:85:8e:74:bd:5e:aa:0d:da:98:61:
                    33:4d:b1:dc:de:c3:ca:b4:bb:0f:b2:67:aa:bf:0f:
                    89:8c:70:23:f2:69:0d:af:a4:8a:20:75:cb:c8:3e:
                    1a:34:bb:42:05:6c:19:84:48:10:43:c9:ed:77:14:
                    de:9b:31:ba:ea:f4:9e:8a:ca:52:00:eb:94:67:f1:
                    cc:af:a1:00:1e:ba:9a:cf:94:e3:f3:2e:97:fa:86:
                    0c:b7:36:b8:1e:a0:e8:25:21:12:75:d9:10:df:72:
                    31:4d:99:37:fa:c9:83:66:94:e0:8e:f1:b6:62:4b:
                    e5:58:3a:53:96:26:cc:ae:4b:59:bd:72:07:aa:f2:
                    a2:76:44:cc:da:61:b9:54:ec:ef:5a:90:b0:88:66:
                    83:70:62:68:d3:7f:f0:23:ef:ab:16:39:af:58:86:
                    b9:1e:d1:ab:9c:3f:64:68:bc:34:16:25:36:27:8f:
                    9d:97:dd:4b:a8:c4:80:af:bb:3b:b4:47:de:fa:04:
                    10:a4:4a:ca:4d:a4:11:d2:e0:86:a6:8b:07:4b:df:
                    4d:d2:e2:1b:2d:14:4d:45:cc:3e:ce:bd:bb:f7:5c:
                    b7:c5:55:4f:f7:94:9c:4c:ef:15:41:25:49:04:c8:
                    b5:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:F1:92:68:1E:B2:BE:F5:08:A0:00:A1:79:DE:6A:C4:D3:A9:BA:13
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/f_GSaB6yvvUIoAChed5qxNOpuhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.141.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         45:74:6c:71:8e:b7:b6:2a:f0:b3:ad:6f:26:aa:e8:6a:97:3f:
         0d:6c:aa:16:ec:63:7b:33:a2:4b:96:ae:0e:1b:df:9c:36:81:
         14:2b:cc:2c:f3:2b:d8:fe:4e:82:9d:9d:3c:0a:9a:0f:30:18:
         71:03:6a:56:16:57:93:cb:b8:ab:8c:cc:70:0c:ba:9b:f2:77:
         76:29:f8:a5:cc:ed:b3:b3:10:98:e9:53:2b:4f:29:45:2d:6e:
         db:9d:75:7e:6a:80:82:dd:00:65:a0:e8:57:d0:c4:49:d2:8a:
         db:c1:29:f7:a9:c1:5d:6e:95:87:11:ca:a1:d7:65:48:20:67:
         14:67:30:bc:f7:3c:af:58:88:f4:27:90:33:bd:bd:04:bf:3b:
         19:59:de:f4:a9:fc:32:e3:ca:db:cd:af:64:e4:a4:f7:ab:08:
         25:ba:c6:86:3f:4e:fc:e0:a5:8d:8d:a0:3c:18:37:29:1f:61:
         da:75:66:62:c6:83:4b:21:da:66:a6:21:84:0d:3f:a7:b4:70:
         dc:f8:1c:e2:f3:e2:3b:36:1e:27:37:eb:71:5f:ec:94:aa:36:
         2c:be:2b:e7:99:21:f5:9d:d5:af:85:9b:39:cb:e0:a7:86:5c:
         37:08:c2:b2:b6:98:bb:c8:8f:02:48:61:6e:01:70:52:5d:6e:
         c5:fe:ae:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org