Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/ATTWzUXUbSCmwTWTnf5iDb0naqY.roa
File:                     ATTWzUXUbSCmwTWTnf5iDb0naqY.roa (raw, json)
Hash identifier:          s4sqV7mRRc+dFiLUG0n2q+opr9C1zUzkO5BLTOL+CSs=
Subject key identifier:   01:34:D6:CD:45:D4:6D:20:A6:C1:35:93:9D:FE:62:0D:BD:27:6A:A6
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       2C
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/ATTWzUXUbSCmwTWTnf5iDb0naqY.roa
Signing time:             Fri 15 Sep 2023 06:44:32 +0000
ROA not before:           Fri 15 Sep 2023 06:44:32 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        58.183.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:44:32 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0134D6CD45D46D20A6C135939DFE620DBD276AA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8d:8f:f0:6a:31:b5:93:47:73:51:1e:78:90:
                    ef:6d:89:4e:37:13:6f:50:21:f0:63:f7:5d:bd:81:
                    39:7a:53:ba:6e:58:b6:87:a0:00:e5:75:18:7e:b5:
                    b5:6c:b0:21:98:f4:7a:a4:64:e7:24:11:2a:0b:eb:
                    46:a0:3a:2e:f4:2f:51:2d:c7:bc:1a:aa:7e:8b:6b:
                    cf:5e:56:8d:62:42:eb:b8:75:54:cc:97:eb:2e:fb:
                    81:19:4e:96:7f:00:b3:3b:21:80:c5:0f:4d:3b:8f:
                    3a:e1:8e:0f:25:1c:89:a1:6b:e8:2d:dc:ff:1d:d0:
                    ca:4b:7e:96:d6:d3:40:3e:bc:d6:c7:73:06:a2:51:
                    28:29:c8:50:9a:81:38:65:c1:e4:ad:06:a3:bb:3b:
                    bb:8d:58:4b:14:c9:df:69:68:cf:cd:bd:ee:6e:29:
                    c3:6c:6b:3c:6f:66:aa:fe:c7:1d:8d:5f:f7:1c:f3:
                    9e:16:da:b6:48:c9:65:b2:78:97:6f:55:fe:ee:0f:
                    73:21:34:17:52:87:e4:af:47:69:09:99:5a:9c:5d:
                    a0:03:34:ee:4a:67:1e:e5:81:5c:46:bd:75:d3:d2:
                    3a:c3:5c:89:d5:d5:7e:db:13:12:49:98:cd:25:f7:
                    58:59:19:73:90:67:5b:26:48:96:fe:b1:25:3f:71:
                    ff:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:34:D6:CD:45:D4:6D:20:A6:C1:35:93:9D:FE:62:0D:BD:27:6A:A6
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/ATTWzUXUbSCmwTWTnf5iDb0naqY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.183.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         07:e6:16:2f:b9:df:b6:3f:2c:19:f7:95:1b:fb:2f:24:12:ec:
         ae:10:96:a5:54:f6:9d:9a:cc:80:e8:25:99:2b:2c:cd:7c:70:
         c9:1b:ae:7f:c7:44:a6:9f:ab:bd:6e:b8:38:e8:00:1e:44:f9:
         a8:f4:8e:35:71:16:29:76:b9:4a:0f:24:84:6c:7d:dc:ba:11:
         71:6e:43:16:57:e6:c7:ed:c4:e8:65:3b:e0:64:15:df:32:a4:
         df:dc:19:24:c2:eb:7e:ba:1f:a8:3f:71:65:55:33:f3:88:a3:
         21:3b:f2:03:9c:b8:07:84:9a:44:9e:fd:ea:0d:61:99:fa:4f:
         5d:fa:23:7f:2b:b9:11:32:c6:2b:a0:e7:29:cc:6c:93:20:01:
         ec:9b:c0:69:ab:35:ee:ec:0f:f8:e0:23:41:f1:23:b1:68:01:
         38:39:6e:bc:0b:0f:d7:91:77:0d:40:7d:bc:55:8a:61:ed:39:
         3f:4c:94:00:31:06:1a:8a:b0:00:96:dc:85:c0:b5:de:94:fe:
         e5:f4:84:98:51:78:0e:6f:b5:f1:c7:db:7e:98:87:1a:57:14:
         a8:ed:1d:65:54:a9:47:cc:c9:f1:57:3c:93:ab:a4:09:70:ea:
         75:37:f2:18:a5:97:e6:d4:c3:50:fe:d2:6f:05:f4:75:3b:7c:
         49:f7:a9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 23:50:32 2024 by rpki-client on console-fra.rpki-client.org