Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/XpqeOEtAktYTZUgwW5YtygMIiZI.roa
File:                     XpqeOEtAktYTZUgwW5YtygMIiZI.roa (raw, json)
Hash identifier:          I2Y5soZfFg4wIS737GhMFT29a5XaFPujhTGnOl8wYow=
Subject key identifier:   5E:9A:9E:38:4B:40:92:D6:13:65:48:30:5B:96:2D:CA:03:08:89:92
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       56
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/XpqeOEtAktYTZUgwW5YtygMIiZI.roa
Signing time:             Fri 01 Sep 2023 01:28:22 +0000
ROA not before:           Fri 01 Sep 2023 01:28:22 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     146984
IP address blocks:        115.69.236.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Sep  1 01:28:22 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=5E9A9E384B4092D6136548305B962DCA03088992
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:24:02:75:6b:d7:6a:d6:24:9f:b6:0f:6d:d2:
                    dd:4f:1b:46:10:65:74:83:71:fb:5f:89:43:8b:75:
                    23:4e:e0:23:c1:2f:00:30:57:ae:88:cd:9f:45:ba:
                    6d:94:81:f5:1f:dc:46:dd:14:07:75:a7:a0:69:1d:
                    46:68:58:90:92:4e:65:29:94:6e:5a:30:e1:61:ac:
                    b9:bf:e9:f1:6d:6d:69:3a:ac:33:a0:ea:0b:df:cf:
                    03:3f:d2:af:0d:1a:9e:6d:b0:6a:28:1c:eb:d4:86:
                    44:b4:19:b9:da:7a:46:73:53:a5:5c:79:8e:dc:dc:
                    86:d8:f1:a4:dc:bf:76:8e:1f:19:0a:86:4b:bf:cf:
                    27:95:4f:8a:4e:10:5b:b8:b8:9f:f7:a7:2c:a8:e1:
                    d9:e0:b5:0c:37:2c:67:36:36:32:d2:87:4c:6c:3d:
                    bd:36:ef:51:33:84:a2:91:b5:14:55:de:f5:4c:60:
                    67:07:e9:dd:52:89:41:d9:27:ec:86:69:cd:d0:4c:
                    b4:f5:5f:87:93:21:4c:01:8b:08:d1:12:16:9a:c7:
                    db:2b:8c:d7:c8:c4:7f:7c:3e:45:e3:f6:8c:19:31:
                    14:db:c1:b4:20:c9:74:79:07:17:47:2d:df:6e:b6:
                    72:88:47:22:fd:39:ad:89:6d:d4:9b:28:0c:1f:ed:
                    69:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5E:9A:9E:38:4B:40:92:D6:13:65:48:30:5B:96:2D:CA:03:08:89:92
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/XpqeOEtAktYTZUgwW5YtygMIiZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:4f:95:ed:d8:dc:65:52:ad:1b:c2:a5:d4:38:08:0c:47:9f:
         b9:8f:21:40:4b:a9:27:37:46:33:a5:d3:de:94:ab:6c:9c:cf:
         f6:e6:17:fd:86:4d:16:f6:a5:62:56:67:98:95:95:ef:67:1c:
         08:d8:a5:05:f9:c4:3a:3b:87:53:6e:bd:cf:ff:3a:f2:f2:15:
         bf:39:c2:4d:43:a6:be:06:1b:32:1a:d3:07:7b:13:d8:76:d9:
         e7:6d:9d:3b:d2:0d:3f:4b:57:71:5a:bf:37:ba:e9:f0:e0:7d:
         1f:09:55:5c:b4:7d:ed:24:55:d2:a7:fb:b8:ca:36:68:9a:1a:
         5f:f9:3b:38:4b:bd:b4:f0:3d:bc:78:b1:ec:4e:4e:22:60:44:
         4b:2e:ed:ad:aa:63:41:80:ca:5b:36:1c:b5:de:c8:c5:b0:72:
         15:78:2c:01:a4:59:e9:2d:74:97:1c:b5:b8:6d:2c:18:03:e7:
         d6:91:1d:ab:5a:96:cc:d8:d1:17:02:1d:02:7f:9e:1a:4d:ba:
         75:ca:c7:e3:59:24:e9:f5:cb:3b:71:37:21:95:ce:c9:f7:ad:
         bf:1a:00:34:c6:2d:21:32:2a:89:c2:5e:67:9b:21:12:7b:7b:
         57:10:c1:ef:3d:75:c4:20:cf:1b:95:e8:a2:e5:dc:5b:0c:31:
         4d:a4:ae:83
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:26 2024 by rpki-client on console-ams.rpki-client.org