Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/dgIaqQziCWNm7x_RlvZ6_Pi63KM.roa
File:                     dgIaqQziCWNm7x_RlvZ6_Pi63KM.roa (raw, json)
Hash identifier:          i3Xy7jdHgI6iNNR/jKM8VPm/iNkQhuC3LhsYF/Abo0g=
Subject key identifier:   76:02:1A:A9:0C:E2:09:63:66:EF:1F:D1:96:F6:7A:FC:F8:BA:DC:A3
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       5F
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/dgIaqQziCWNm7x_RlvZ6_Pi63KM.roa
Signing time:             Thu 14 Dec 2023 12:07:07 +0000
ROA not before:           Thu 14 Dec 2023 12:07:07 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7521
IP address blocks:        115.69.237.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Dec 14 12:07:07 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=76021AA90CE2096366EF1FD196F67AFCF8BADCA3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:4b:5d:63:a0:79:35:42:f5:ac:ca:db:c6:bd:
                    2e:90:59:4f:62:b6:b6:99:81:27:63:e2:ad:6a:d0:
                    78:37:28:3d:93:7b:c8:34:c5:44:4c:e7:b4:15:9c:
                    e1:81:53:c3:e8:08:c1:e6:c6:9d:bf:5e:a4:bf:79:
                    b6:8e:e4:a8:69:e5:32:af:54:f4:07:39:30:96:d0:
                    70:6b:75:b5:02:85:81:e5:03:ed:78:c1:8e:31:b7:
                    6f:db:2c:ad:0f:0a:5d:c8:aa:6b:34:d4:70:cc:7e:
                    bf:3d:09:cf:f1:d4:ae:e6:ee:4e:4c:74:db:a8:d9:
                    0d:64:99:76:3f:61:34:84:54:74:55:33:85:ee:60:
                    06:98:86:28:31:fb:ee:10:b3:5e:a4:bf:73:c2:3d:
                    93:d1:92:7d:9f:34:ac:6f:27:fe:e0:67:e5:cc:14:
                    26:3c:df:0e:04:ef:88:d0:c5:a2:bb:11:e0:49:38:
                    c6:55:02:c5:7e:4e:7f:fe:7c:81:fb:60:f1:e0:89:
                    69:28:f3:77:39:8b:3a:06:46:2e:ff:e4:cb:7a:59:
                    03:ca:ad:1a:46:40:8f:49:ce:a5:9b:32:0d:5e:27:
                    10:81:d1:0e:2f:33:ee:f8:3c:b4:10:9e:cc:45:11:
                    00:2d:ab:41:2c:82:5a:55:df:ab:1a:42:09:2a:3e:
                    28:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:02:1A:A9:0C:E2:09:63:66:EF:1F:D1:96:F6:7A:FC:F8:BA:DC:A3
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/dgIaqQziCWNm7x_RlvZ6_Pi63KM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         99:8a:87:54:62:75:24:7e:bd:83:0f:76:b5:42:d6:60:4d:da:
         68:de:bb:f8:02:c4:6f:e5:56:1d:e2:15:79:5f:54:ad:77:c1:
         93:8f:c8:82:e4:00:5b:d9:37:70:d0:29:2f:fd:a1:d8:93:27:
         29:6a:12:b4:75:a0:f6:cf:c4:d7:f6:47:6a:cc:8c:2f:50:1f:
         ac:58:9f:b3:af:a6:43:d7:6f:1b:b0:7c:f8:94:9a:85:35:b3:
         01:8e:6b:59:0a:25:7a:95:41:60:3c:ed:6c:9c:a9:a7:c7:22:
         35:a6:de:c3:b6:2e:dc:25:5c:52:8a:b7:b6:bf:36:33:d0:c0:
         c5:6c:28:13:39:db:d9:48:f1:00:a0:7f:2b:79:98:60:67:35:
         8f:27:46:34:8b:32:4b:cb:9a:e2:8b:a5:97:53:72:6f:b3:27:
         49:6f:61:3a:8b:96:aa:f6:8f:c1:13:02:cc:2e:ed:cc:e3:f8:
         ca:0f:a2:4e:a9:e1:65:cd:17:8b:38:68:ad:ac:d4:e1:4a:66:
         1e:b2:92:34:59:d2:1c:81:3e:7d:2d:e4:f5:93:ec:bb:cf:cc:
         63:f4:c6:a3:54:87:63:bd:46:b2:d6:1d:21:46:29:2c:21:1c:
         53:e1:2a:e3:3d:7e:fd:6f:10:37:d9:17:e1:91:26:8a:b8:ac:
         62:19:ae:69
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:26 2024 by rpki-client on console-ams.rpki-client.org