Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KKBiHm0xSdJOH1qQyngYoDBHZxE.roa
File:                     KKBiHm0xSdJOH1qQyngYoDBHZxE.roa (raw, json)
Hash identifier:          HCChPUKWfK3mWVUZIVvgm5LXBZDASEABuRatwY4gkas=
Subject key identifier:   28:A0:62:1E:6D:31:49:D2:4E:1F:5A:90:CA:78:18:A0:30:47:67:11
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       A4
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KKBiHm0xSdJOH1qQyngYoDBHZxE.roa
Signing time:             Thu 29 Feb 2024 01:30:10 +0000
ROA not before:           Thu 29 Feb 2024 01:30:10 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        210.173.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 164 (0xa4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 29 01:30:10 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=28A0621E6D3149D24E1F5A90CA7818A030476711
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:8f:8d:c0:f2:e9:c7:45:80:57:e3:2c:1e:0e:
                    a6:a1:fc:88:41:fc:7c:09:ab:b5:45:18:6a:92:25:
                    f9:fa:ea:9a:57:dc:ba:4a:d5:3c:1d:23:7c:0e:94:
                    94:02:c1:6b:38:0b:17:aa:8f:e1:19:f5:d8:54:77:
                    b0:e6:c9:36:86:da:ac:30:56:a8:97:18:f4:bc:5f:
                    f6:91:3b:07:23:bf:eb:33:ea:83:29:b0:58:35:8e:
                    bc:49:57:68:8e:3a:bd:39:2f:fc:25:a6:d2:b3:e7:
                    7a:11:24:a4:06:96:e1:68:c5:e9:d4:28:2b:de:20:
                    04:59:58:30:59:cb:d9:4a:8b:84:3d:31:a7:15:2e:
                    8b:cd:f9:d7:58:ff:5d:c9:fe:ed:ac:10:f0:b9:7c:
                    ca:fc:6b:4d:72:c9:6e:ca:b1:a2:e0:ec:c4:76:11:
                    be:58:9c:05:b4:4d:5a:23:00:41:4c:a9:c4:34:d4:
                    c0:e6:4f:b1:1e:77:f2:dc:ab:28:01:3a:5e:d7:de:
                    42:0b:80:f7:c1:00:5c:09:74:d2:52:d0:2a:bf:6f:
                    b2:7c:6a:37:60:86:b8:3b:82:9c:ff:17:d8:8f:04:
                    2c:3e:35:5c:5d:24:c2:e0:20:e7:4e:45:ae:49:34:
                    a6:7a:7c:06:59:b7:a2:1c:f1:96:d9:2d:24:94:68:
                    6f:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:A0:62:1E:6D:31:49:D2:4E:1F:5A:90:CA:78:18:A0:30:47:67:11
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/KKBiHm0xSdJOH1qQyngYoDBHZxE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         19:0c:c3:a4:f1:d3:a4:f8:80:c9:19:a2:a7:2d:24:67:fd:11:
         28:aa:2b:58:1d:9e:5f:5b:55:e6:82:ab:75:2a:dd:35:9c:9b:
         e8:2f:f6:cb:55:00:d2:0e:16:e6:e8:59:65:cf:a3:b9:09:5c:
         ed:6b:e5:17:c6:87:b3:d0:73:9a:52:59:21:25:a8:d8:f5:35:
         5c:2f:a3:8e:14:d4:79:99:fa:67:d0:91:5b:4b:d4:a9:9d:0c:
         50:fb:bd:fb:eb:84:af:a9:16:3f:e9:5a:90:92:fd:18:a7:54:
         03:e2:18:c4:d8:43:9f:ad:ca:36:92:73:49:2a:19:39:91:ab:
         bf:40:be:d9:a6:27:0d:75:e5:0b:30:aa:44:65:ad:a9:7e:14:
         fd:ee:fc:5e:3c:3f:09:4b:64:f7:5b:41:b8:88:32:71:98:91:
         31:3f:aa:15:9a:e4:86:ca:a1:78:99:41:86:f3:b3:d4:0a:26:
         33:24:eb:04:da:00:f9:28:64:60:5f:a4:0e:26:37:e4:4f:8e:
         b9:19:f5:85:28:f5:20:7d:e5:4b:b7:40:bc:7b:6a:80:79:5d:
         d6:86:27:db:5d:22:8c:b3:c7:2f:5c:85:cd:8e:8b:7c:f0:ca:
         70:d0:7f:3b:15:ca:80:bd:c5:3d:42:07:e7:a1:45:2c:20:98:
         8e:44:a3:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:41 2024 by rpki-client on console-fra.rpki-client.org