Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa
File:                     lBpfv9HN-OIq0r3PphiMU151ywk.roa (raw, json)
Hash identifier:          +i+i7gnheVidSj9lYb7pVeuKOjjJV/x8PdWGO28uWZU=
Subject key identifier:   94:1A:5F:BF:D1:CD:F8:E2:2A:D2:BD:CF:A6:18:8C:53:5E:75:CB:09
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       014A
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa
Signing time:             Fri 31 May 2024 01:31:16 +0000
ROA not before:           Fri 31 May 2024 01:31:16 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        210.148.131.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:50:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 330 (0x14a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: May 31 01:31:16 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=941A5FBFD1CDF8E22AD2BDCFA6188C535E75CB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:6b:b4:84:c6:de:7b:3c:0c:b9:bd:ef:f3:a3:
                    b2:37:f7:41:75:9d:49:d8:f2:b7:02:c6:6e:49:53:
                    84:5e:2c:27:65:8c:88:0b:3e:ec:0c:57:97:84:4d:
                    d1:9e:aa:c5:c2:d0:d4:8e:3b:51:bf:c9:e4:35:ca:
                    c8:c3:fc:b8:bb:9e:50:bc:6b:85:67:52:0c:a2:40:
                    da:e6:d4:60:25:d7:04:44:5c:cd:08:b7:38:95:3a:
                    28:05:08:c2:d3:eb:d2:bc:f8:39:d8:56:dc:ff:8b:
                    e2:e0:c9:37:40:6d:25:43:e0:30:40:7b:9e:68:2c:
                    20:39:74:e0:44:05:e5:49:c6:36:a7:7d:98:18:e5:
                    a9:fd:d3:4b:8f:f2:1f:39:4e:c2:99:18:d7:87:27:
                    0d:8c:5f:ef:f0:6c:f0:56:ee:9f:76:b2:8f:76:b5:
                    1d:c9:dd:0e:95:0f:f4:d8:7b:06:2a:c1:b8:6a:1f:
                    84:3e:68:86:60:e7:83:62:39:24:68:81:96:85:b9:
                    c0:52:22:1a:6e:e3:96:ea:a4:b3:84:0c:60:78:61:
                    9d:a6:d7:37:38:c0:39:da:82:ea:22:df:ee:00:eb:
                    95:8e:52:27:3b:12:60:21:73:f9:9d:e8:a2:37:08:
                    74:6f:e2:80:56:e6:ac:b8:6f:35:11:7c:71:ae:15:
                    b3:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:1A:5F:BF:D1:CD:F8:E2:2A:D2:BD:CF:A6:18:8C:53:5E:75:CB:09
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/lBpfv9HN-OIq0r3PphiMU151ywk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:a2:83:7d:d7:ba:a2:b5:e1:0e:a3:f2:b4:a7:0f:45:40:e2:
         2c:e0:c9:5a:b6:ec:f7:9a:e3:36:49:8d:04:fd:bb:19:ff:04:
         31:31:50:ff:e1:3a:d1:f4:c9:24:52:26:d0:6b:8f:85:6d:30:
         2a:13:d3:cc:6e:6a:c6:92:3b:3b:b6:65:54:21:a0:c1:3a:93:
         4b:19:9d:ca:cd:a3:1e:da:01:bf:fb:7e:da:90:d6:be:e3:e7:
         e4:71:16:30:9b:f0:55:62:7f:a2:cf:2e:41:d7:3b:27:7d:2c:
         96:4c:f3:56:cf:af:95:a4:c9:fe:a1:55:cb:ac:d8:73:31:8a:
         b4:52:33:ec:89:6c:6e:9e:f0:15:6c:82:a5:84:1f:00:74:66:
         92:b1:e3:67:34:79:f7:c1:78:53:88:16:7b:28:c0:b3:e4:9d:
         f6:01:4b:d4:ed:d7:e4:2a:d2:61:0b:50:94:ba:59:b1:21:90:
         1d:a4:43:a1:c6:0e:05:31:11:73:de:39:56:1e:3f:11:06:d5:
         0a:70:05:f1:5a:e3:ff:d3:a9:2e:e2:73:70:93:36:34:1b:b4:
         ce:a8:32:e6:04:06:d5:b6:e4:bd:d3:de:04:19:ba:6f:46:90:
         37:9e:d4:8b:22:9d:c2:20:10:d4:21:5c:cf:c9:db:9d:a8:af:
         ac:7b:04:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:54 2024 by rpki-client on console-fra.rpki-client.org