Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/in13o5A24puBdkD9gKaRQob2wLM.roa
File:                     in13o5A24puBdkD9gKaRQob2wLM.roa (raw, json)
Hash identifier:          BkTuNQ8Qd5qwi+7nCAxWjC8jaaaNebUFt6kAPggYVT0=
Subject key identifier:   8A:7D:77:A3:90:36:E2:9B:81:76:40:FD:80:A6:91:42:86:F6:C0:B3
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       56
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/in13o5A24puBdkD9gKaRQob2wLM.roa
Signing time:             Fri 01 Sep 2023 01:28:48 +0000
ROA not before:           Fri 01 Sep 2023 01:28:48 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.176.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 02:50:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Sep  1 01:28:48 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=8A7D77A39036E29B817640FD80A6914286F6C0B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8a:84:33:f5:03:17:ed:22:8d:90:52:45:c6:
                    8d:aa:99:da:6a:a7:8d:92:42:a6:66:88:65:d8:3e:
                    82:ac:ff:a3:f9:6a:61:44:05:62:89:e7:df:ac:c3:
                    3f:8b:9b:c2:37:95:b5:29:54:2b:ad:34:b9:9f:bc:
                    5c:e0:d5:23:bc:45:28:66:fc:b1:a8:fc:55:b2:b3:
                    a8:46:4a:b2:5f:59:b3:88:12:6f:a7:4f:f8:98:94:
                    16:32:1d:51:ce:62:56:64:02:12:54:16:18:2e:e6:
                    b5:15:66:77:55:a0:ea:5d:a4:f6:81:4e:0e:18:0d:
                    07:d8:90:44:26:40:5f:22:b5:06:37:89:d4:0c:61:
                    14:c7:12:1d:85:36:57:ff:a6:7e:c6:71:f8:1d:b0:
                    10:25:31:c0:4d:d0:c4:3a:c5:7c:2d:e9:2d:cd:1f:
                    43:20:cf:b2:e9:5a:3e:a5:aa:e8:b4:10:e1:87:d1:
                    91:c8:0e:b3:3e:89:a7:65:9a:1a:ba:5c:b5:f5:33:
                    8f:03:22:c2:87:89:f5:06:8b:ca:0e:58:47:82:ca:
                    92:48:3b:00:e2:7b:9c:49:e7:a6:ca:45:a9:14:ee:
                    fc:1c:3d:4f:37:e4:9e:53:66:b3:e9:09:e5:55:c4:
                    7f:3b:13:b1:b3:06:0d:59:6f:3a:6f:25:6c:cf:8d:
                    bb:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:7D:77:A3:90:36:E2:9B:81:76:40:FD:80:A6:91:42:86:F6:C0:B3
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/in13o5A24puBdkD9gKaRQob2wLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         07:c0:aa:1e:7a:92:44:a8:11:23:85:67:7f:02:88:01:97:fb:
         a3:85:6b:6a:3f:61:c5:cb:95:00:a1:28:9c:e7:bb:52:29:73:
         bc:79:f3:00:0d:3c:7b:28:c0:f6:e3:88:82:35:ef:b8:a1:c8:
         d7:79:f2:68:7c:0a:97:8b:b0:95:b6:4d:c9:14:be:30:8c:ec:
         03:36:c5:60:b3:3d:96:52:a0:02:f7:e1:1a:30:0f:8b:92:ca:
         dc:a6:cf:fd:ec:53:50:fb:62:e4:d7:94:93:2d:73:d7:83:b1:
         a4:cc:9d:94:06:9e:11:e1:53:96:48:b4:30:cd:f0:d7:ed:de:
         b4:3e:4b:25:fa:df:9f:aa:2d:df:a0:5c:8e:59:06:fe:cf:9f:
         8a:64:de:1d:08:c6:f8:5a:4e:69:05:59:b7:df:ca:49:9b:f7:
         54:69:56:cc:83:e7:da:03:34:ba:2e:b0:97:b4:84:86:86:20:
         28:96:35:40:74:23:81:4e:ae:c1:81:52:1a:df:bd:36:48:5f:
         94:f6:ea:1a:7c:e4:5e:55:a2:9c:6e:4c:36:ca:ce:ea:e6:22:
         c3:e6:0a:b7:da:10:6d:7c:61:3c:f8:7d:05:c2:b6:8c:10:04:
         2f:4f:92:d1:78:b7:f5:a0:f2:fc:b8:64:66:1f:17:01:7b:a5:
         69:78:7c:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org