Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/boanzg51YkkdCAql2NTtXJB2zPs.roa
File:                     boanzg51YkkdCAql2NTtXJB2zPs.roa (raw, json)
Hash identifier:          xYHFSQbrYzn8VpsoSotjb4HqWBaFRchPJ/rD8ydQ28U=
Subject key identifier:   6E:86:A7:CE:0E:75:62:49:1D:08:0A:A5:D8:D4:ED:5C:90:76:CC:FB
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       A6
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/boanzg51YkkdCAql2NTtXJB2zPs.roa
Signing time:             Thu 29 Feb 2024 01:30:12 +0000
ROA not before:           Thu 29 Feb 2024 01:30:12 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        202.62.160.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 29 01:30:12 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6E86A7CE0E7562491D080AA5D8D4ED5C9076CCFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:10:74:6e:d3:f1:41:dd:b2:a8:6a:6f:f3:89:
                    7d:0d:40:6f:a6:9a:98:5a:37:f8:66:f3:41:1e:b9:
                    fc:27:c2:6c:7b:b0:b1:25:7c:1e:85:3e:bf:3c:af:
                    d0:a5:ba:14:d5:c1:48:e6:4c:fb:84:4a:4f:c1:66:
                    b3:19:33:7d:0d:99:87:0e:51:6d:96:65:97:c6:89:
                    ba:88:55:2e:32:66:e6:ce:70:23:be:e4:7b:0a:26:
                    a6:2b:0c:6d:56:3b:7a:69:05:a6:da:dc:86:47:04:
                    e1:9a:24:29:56:f6:94:f4:9e:18:b6:25:8d:2f:86:
                    e6:15:28:e4:73:85:32:c6:41:63:15:2d:f5:11:38:
                    55:63:29:a1:f1:1d:a2:aa:aa:7a:ef:5f:87:b6:a7:
                    69:f8:62:47:70:08:b6:ea:f7:6f:3e:ca:39:81:0c:
                    24:5f:2b:77:4e:40:f3:39:d6:e1:03:5b:0b:33:b5:
                    a6:cb:76:6d:9b:0d:c0:80:af:9c:f7:d7:b2:7c:02:
                    d6:6f:ef:ca:14:ab:b0:d5:be:16:46:91:0b:a9:8b:
                    d6:d1:5e:3a:5a:c0:59:b4:7c:9e:df:b4:9c:49:04:
                    c8:b1:1d:d5:fa:bf:4a:f8:7a:75:d8:9d:cd:18:d2:
                    d4:1d:28:2a:e7:68:16:b3:40:b3:43:20:53:8a:40:
                    c1:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:86:A7:CE:0E:75:62:49:1D:08:0A:A5:D8:D4:ED:5C:90:76:CC:FB
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/boanzg51YkkdCAql2NTtXJB2zPs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.62.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:be:ca:cb:39:76:5a:85:17:57:c8:58:5a:cf:26:c7:92:30:
         70:65:a5:97:d3:bf:36:02:d3:21:ae:8f:0e:b3:01:ab:24:48:
         2d:c2:f7:f1:e9:96:69:61:7c:36:d8:99:12:7c:ff:73:29:f5:
         58:ac:4c:cb:fe:2e:73:30:02:c7:76:38:4d:76:fe:03:2d:78:
         ae:72:96:99:1a:11:b8:0e:c6:59:c3:f8:56:3f:b1:8f:fe:f9:
         1c:0e:20:75:62:48:6a:7d:33:fa:af:4f:0b:7d:46:58:8c:aa:
         6a:8a:ba:3b:24:e7:9c:9d:fe:f0:15:0c:8f:90:e8:be:67:50:
         df:e2:ce:82:65:64:d7:af:94:40:93:5c:b8:5e:12:40:f6:bc:
         30:98:e3:e0:7c:74:4d:ac:54:2d:8e:89:fe:19:95:fd:ee:95:
         38:58:1c:4e:d2:c9:9d:ea:af:76:49:5d:2a:dd:e4:19:bd:93:
         08:a6:76:ec:d9:eb:75:06:1a:bd:01:3e:18:50:62:1c:02:ef:
         24:8c:0f:f9:2f:80:ce:4f:8e:f6:da:cc:99:2e:64:86:a7:b2:
         15:08:a7:0d:15:9d:43:a1:9d:61:e4:67:89:37:be:8b:d5:9d:
         2b:03:40:56:98:d1:d6:cf:73:27:93:59:ba:8f:6f:47:0b:f2:
         a5:76:77:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:09 2024 by rpki-client on console-ams.rpki-client.org