Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/DEFsKJibjrIIv7mO01qQFIOnW5A.roa
File:                     DEFsKJibjrIIv7mO01qQFIOnW5A.roa (raw, json)
Hash identifier:          Ao2ZBjVxcCjDllvnJVzAmuq9FASpym0Qaw2TPHgCoqA=
Subject key identifier:   0C:41:6C:28:98:9B:8E:B2:08:BF:B9:8E:D3:5A:90:14:83:A7:5B:90
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       58
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/DEFsKJibjrIIv7mO01qQFIOnW5A.roa
Signing time:             Fri 01 Sep 2023 01:28:23 +0000
ROA not before:           Fri 01 Sep 2023 01:28:23 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131079
IP address blocks:        115.69.239.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Sep  1 01:28:23 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=0C416C28989B8EB208BFB98ED35A901483A75B90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c5:a0:5b:16:d5:50:d4:48:1e:a6:53:50:38:
                    16:c2:1b:5c:73:fd:b2:e2:49:42:64:fe:fe:54:6d:
                    fd:a6:9e:5a:76:71:63:4c:b9:e7:16:af:79:ff:3c:
                    33:c3:80:3d:bf:b0:c5:48:53:fc:2f:05:4a:58:24:
                    d4:0f:d2:59:74:43:65:69:30:06:d0:95:39:cb:70:
                    0d:b5:0e:c1:be:ab:37:41:09:d7:6d:ef:7d:80:94:
                    b3:df:56:e7:51:61:57:65:dd:7c:1b:d4:e8:7c:41:
                    d6:af:dd:1d:fe:ae:b0:3e:8b:5d:7f:32:7d:75:93:
                    f5:58:b1:6e:5b:bc:83:22:c1:ce:08:ec:06:1e:2a:
                    27:27:a5:9c:96:2e:3d:00:3f:b5:e6:0b:24:23:6c:
                    f8:86:bd:88:e6:08:f7:e2:91:8c:9f:6f:45:7c:5f:
                    e1:df:c4:88:df:66:6f:5e:dd:2c:3b:5a:2e:f8:81:
                    13:43:88:e9:d9:c8:15:ea:d5:8f:3f:2f:9c:7e:2d:
                    de:45:2b:f0:8f:b2:5f:e9:83:e3:c7:b1:fa:2a:a0:
                    b2:f4:13:d8:45:9d:87:95:0c:4e:67:9d:ec:b2:b6:
                    12:68:54:1d:e3:5c:e0:d9:5a:97:6a:3b:6e:21:62:
                    8e:0a:8c:23:82:ae:37:bd:ea:f9:bf:43:95:07:6d:
                    55:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:41:6C:28:98:9B:8E:B2:08:BF:B9:8E:D3:5A:90:14:83:A7:5B:90
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/DEFsKJibjrIIv7mO01qQFIOnW5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.239.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:04:de:2e:ec:42:08:3c:a5:d4:b1:37:4a:e9:c5:44:7a:48:
         c1:ca:c8:36:9d:1c:99:3e:d7:5e:7b:9f:57:70:4d:5e:51:14:
         4b:e1:43:c0:d9:e1:f1:cf:08:40:ca:cb:b7:64:97:82:f4:a1:
         32:4f:cf:2f:70:2f:ec:3e:0a:5d:ca:29:a9:94:d3:83:79:32:
         bd:f7:f3:9e:78:4f:72:57:e2:47:59:5d:2a:c3:d6:57:da:ec:
         17:a5:24:18:ff:df:18:bd:1d:ba:d4:0d:38:40:d9:d9:55:5d:
         22:73:77:11:02:55:3b:79:f7:16:0c:44:dd:a7:2f:81:7a:9e:
         9e:df:83:a2:05:f0:ef:82:04:f3:ee:97:c0:3a:bf:39:09:ae:
         54:2f:2d:c1:e5:32:54:3c:69:e5:61:13:fa:e5:2a:9e:13:22:
         4d:00:47:e7:1a:07:c9:92:d8:d8:67:ee:36:92:1a:3f:7a:60:
         ad:f0:49:2b:b3:c9:3e:9c:c3:68:2e:d4:57:4b:15:c5:19:33:
         85:49:5e:fd:ef:96:69:78:cd:be:73:e4:64:d3:87:31:05:e4:
         40:76:a0:38:b1:82:d4:59:fe:a2:81:fc:51:b1:71:85:82:41:
         e9:45:fb:69:ab:77:57:2e:4c:bc:be:30:d3:65:26:bb:6e:ad:
         6e:d7:a5:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:41 2024 by rpki-client on console-fra.rpki-client.org