Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
File:                     rvbQzPKu4a3fBkGml78i78anlVU.roa (raw, json)
Hash identifier:          xSmJeeevuyRzq3yc4jpWGxgG2khcijDdNFdm/Hy13w0=
Subject key identifier:   AE:F6:D0:CC:F2:AE:E1:AD:DF:06:41:A6:97:BF:22:EF:C6:A7:95:55
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       F5
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
Signing time:             Fri 01 Sep 2023 01:28:50 +0000
ROA not before:           Fri 01 Sep 2023 01:28:50 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        219.119.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 245 (0xf5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:50 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=AEF6D0CCF2AEE1ADDF0641A697BF22EFC6A79555
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:7b:38:07:3e:38:70:ce:b3:c0:e9:d6:44:a9:
                    ec:1d:1d:3a:b4:54:55:ce:fb:ad:db:dc:cb:1e:2c:
                    f5:fd:eb:5b:d2:a2:d1:3d:f9:39:08:d8:4b:cc:45:
                    07:0b:81:af:67:b9:81:5f:15:f5:f7:8c:05:3f:c4:
                    c5:5f:5b:8d:90:c8:67:42:16:34:f3:1f:8d:e9:10:
                    71:13:e5:00:80:b9:5e:5a:80:24:b0:69:a1:4d:4f:
                    aa:d2:48:d3:6a:4c:b8:5d:65:bc:11:6c:00:b2:aa:
                    b7:60:4e:3e:e7:aa:93:34:66:10:b0:6f:10:b1:8c:
                    ed:1c:8d:89:8c:e7:98:b1:07:8a:5f:f1:a5:36:2c:
                    2f:2f:40:11:fa:19:26:19:b7:7f:ef:85:ae:52:3f:
                    7a:ea:4c:98:69:01:95:ce:8a:12:40:f1:df:8d:49:
                    43:6f:37:31:48:a1:c1:3b:bf:e0:d7:a1:b9:6b:cf:
                    45:33:e2:25:53:42:a3:c8:f8:52:d1:8a:a5:8a:a0:
                    29:b6:28:2a:98:fa:40:4f:29:0a:7e:e1:e1:db:71:
                    ac:42:f6:de:56:fa:c7:53:dc:af:a2:9e:8f:e4:e0:
                    46:84:b3:b1:b7:19:dc:cf:91:ca:e0:ad:74:4d:b0:
                    38:56:27:5f:96:d2:62:e7:89:95:fd:90:fa:19:4a:
                    ec:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F6:D0:CC:F2:AE:E1:AD:DF:06:41:A6:97:BF:22:EF:C6:A7:95:55
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/rvbQzPKu4a3fBkGml78i78anlVU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.119.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         2b:5c:d7:b1:4f:37:ba:7e:1a:a4:1f:c2:a5:e4:46:83:9f:7a:
         66:23:fe:ef:be:a5:cb:09:e1:c1:25:56:1b:02:79:f4:99:54:
         05:a1:b0:98:21:90:e7:11:6b:58:b0:4f:04:f4:5a:fa:3e:22:
         cd:eb:d6:10:b4:1c:96:74:c2:8d:dc:7a:9e:6c:de:d0:f3:67:
         22:9b:b5:7f:f6:eb:a3:29:ed:50:a5:e0:fe:f5:d8:7e:ca:2f:
         2c:fc:10:87:cc:d0:12:4b:aa:ef:04:e7:93:c4:14:8c:bd:59:
         82:24:22:2a:7f:58:cc:96:87:e0:aa:a7:09:ca:18:38:9c:2b:
         59:73:8f:18:cc:77:2b:45:2f:08:88:79:4d:81:5e:90:bf:fe:
         3d:4f:9b:66:ba:1f:12:a9:71:5d:8f:c5:17:6d:06:4e:4d:61:
         d5:e6:4f:f0:10:47:3a:0f:dd:fd:88:68:36:d1:1f:4e:e4:53:
         b6:80:0d:18:3b:9c:ba:f9:7b:78:7d:a7:0b:dd:22:21:ed:63:
         49:5e:28:53:17:98:1f:62:f8:23:8b:38:b1:1c:ed:f3:5a:0f:
         93:26:88:31:3c:4e:7c:c9:de:70:a0:94:da:85:51:e6:a6:84:
         b6:49:d2:d9:19:26:ca:6e:5d:7e:dc:9f:3f:1b:ef:0f:47:e9:
         03:42:88:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:47 2024 by rpki-client on console-fra.rpki-client.org