Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/dOFU44KZNaIpxeXRVbGGX2ZWbTc.roa
File:                     dOFU44KZNaIpxeXRVbGGX2ZWbTc.roa (raw, json)
Hash identifier:          4GcSby5lU0TvEdhTtFGfeZxoSuUrQ3nH6/qzEq/OOT4=
Subject key identifier:   74:E1:54:E3:82:99:35:A2:29:C5:E5:D1:55:B1:86:5F:66:56:6D:37
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       03
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/dOFU44KZNaIpxeXRVbGGX2ZWbTc.roa
Signing time:             Fri 25 Aug 2023 00:29:08 +0000
ROA not before:           Fri 25 Aug 2023 00:29:08 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        42.187.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug 25 00:29:08 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=74E154E3829935A229C5E5D155B1865F66566D37
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:b6:03:1a:0f:a3:8a:6b:c7:42:57:ba:06:6c:
                    89:b2:b3:15:e7:39:5a:b3:07:e2:2a:c9:59:1e:12:
                    12:ad:06:23:f2:cb:5a:b7:7f:dc:a2:0c:08:5f:f0:
                    c4:d3:32:d7:78:76:ee:84:d6:1a:b2:cd:8a:27:d8:
                    97:c8:5f:cc:5c:1c:95:fd:ab:02:9d:f3:e3:ba:22:
                    d7:92:49:2d:5f:8f:da:37:9a:83:15:a9:b6:9d:59:
                    3b:27:5e:0d:80:ac:85:59:77:c9:d5:ac:f1:34:89:
                    7a:bf:57:44:6d:fb:15:00:b7:6e:67:6b:22:17:67:
                    ca:73:49:0e:e7:8f:02:06:7b:01:ca:82:aa:31:4a:
                    fb:76:e5:6e:c7:70:ed:b4:c9:12:3b:ca:74:aa:bd:
                    d8:a7:c4:de:00:13:ae:6c:27:65:62:12:1f:e5:42:
                    c7:4f:8a:ee:aa:4f:d9:e7:0e:ba:d6:1d:61:95:8f:
                    a1:7d:76:5d:21:28:f9:92:16:d7:7b:fa:d9:ce:b9:
                    3c:6d:37:2e:11:f3:58:da:5f:a4:dd:5d:51:71:9d:
                    d9:07:c0:d6:49:65:c4:dc:74:fa:05:33:d2:f6:da:
                    57:1c:78:5f:a6:b5:f8:9a:70:cb:69:c6:e9:72:a1:
                    35:f6:d7:ff:fb:dc:ca:ec:97:a9:68:c6:9e:b5:f3:
                    ed:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:E1:54:E3:82:99:35:A2:29:C5:E5:D1:55:B1:86:5F:66:56:6D:37
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/dOFU44KZNaIpxeXRVbGGX2ZWbTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.187.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7b:78:de:47:99:a1:cb:02:4f:8e:19:8b:23:df:78:0c:a8:cb:
         a5:7d:d3:20:35:88:b7:5b:68:9f:da:d3:c2:22:7b:f4:f0:e7:
         e1:a6:c2:f8:ff:6c:aa:fe:ec:71:9b:d4:c0:91:45:70:6f:14:
         d5:b5:e1:b1:ad:66:8a:9d:80:76:82:b9:20:8f:6a:64:7e:35:
         d7:35:02:7d:9e:da:92:aa:b1:7f:39:5d:65:75:8b:94:59:0e:
         05:f8:08:33:94:cd:f6:cb:04:56:c0:6d:f3:1d:57:9b:1a:df:
         db:e3:8a:fa:ad:d4:e8:cc:07:f3:48:eb:7a:0a:5a:43:3f:5f:
         13:02:07:81:5a:b2:67:e0:30:a1:39:bf:3c:81:96:e6:c0:03:
         d7:23:64:7d:54:a8:bb:83:cf:bf:1b:1c:7d:48:42:a9:4e:06:
         fa:96:be:7f:c5:4f:c0:bf:40:9e:f5:d8:8c:74:84:45:b4:16:
         78:de:b6:9f:01:b2:52:17:90:f1:a3:b7:49:9f:16:cc:51:41:
         e7:dc:8c:f0:5d:2d:bb:7d:1f:22:02:f0:95:af:b9:20:91:ef:
         61:1f:37:22:69:73:19:c9:53:6d:33:50:ec:f3:d2:2e:4e:43:
         3b:9e:cc:b4:93:88:34:ae:db:cc:d8:7f:29:20:d1:2c:18:fb:
         95:3d:b5:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:46 2024 by rpki-client on console-ams.rpki-client.org