Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
File:                     djpHi6jC01c_zorYnpZbwrLCKio.roa (raw, json)
Hash identifier:          kR/rl5GM0UmRbPReoFZeO4evYDb6odrVQQeuO1xTaeU=
Subject key identifier:   76:3A:47:8B:A8:C2:D3:57:3F:CE:8A:D8:9E:96:5B:C2:B2:C2:2A:2A
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       28
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
Signing time:             Sun 01 Oct 2023 01:29:54 +0000
ROA not before:           Sun 01 Oct 2023 01:29:54 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     146987
IP address blocks:        157.120.112.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Oct  1 01:29:54 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=763A478BA8C2D3573FCE8AD89E965BC2B2C22A2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:ab:d0:15:c3:cc:d2:bd:55:47:17:f5:9f:04:
                    b3:7b:2c:a4:fb:ec:0d:5a:4d:be:1a:79:ac:96:26:
                    37:e6:fd:6b:03:25:66:df:49:61:84:9f:2b:cc:eb:
                    b5:98:97:dd:6c:c0:92:d7:57:51:00:0a:90:f8:46:
                    d2:ee:d9:64:f7:65:2f:fc:19:4c:ec:ff:8d:ba:45:
                    52:8c:36:0c:c7:45:87:5e:b8:8e:a0:a8:98:48:eb:
                    0b:42:8f:67:1a:73:3a:2b:24:e7:4f:a2:c5:12:44:
                    71:fa:3b:ec:8e:29:5b:49:42:53:3d:a9:4b:9e:bf:
                    91:01:5f:10:15:20:69:cb:d0:2c:c8:a3:2f:aa:89:
                    72:01:2e:7c:c0:47:f2:ec:59:eb:25:cd:bd:a4:15:
                    16:85:e4:ef:6f:df:ef:b5:d7:79:00:e8:a0:59:14:
                    0e:15:3a:21:d0:5f:90:07:5d:20:9b:cc:f4:bc:6d:
                    3f:57:14:2d:d4:b5:8b:60:62:c8:1c:3e:4e:9d:f1:
                    ec:97:f8:51:85:07:16:3b:94:3f:1f:e5:28:92:4f:
                    fc:cd:d5:53:32:88:3e:28:fe:fc:66:9c:e8:f0:79:
                    69:9a:3d:0a:fc:bc:0b:bf:ae:5e:e0:2f:20:6c:47:
                    a5:cc:af:1d:1a:00:78:14:72:b2:bc:bf:72:a6:31:
                    10:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:3A:47:8B:A8:C2:D3:57:3F:CE:8A:D8:9E:96:5B:C2:B2:C2:2A:2A
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/djpHi6jC01c_zorYnpZbwrLCKio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.112.0/24

    Signature Algorithm: sha256WithRSAEncryption
         02:37:1c:69:7b:dd:11:ab:ec:97:78:85:8d:1a:38:76:db:21:
         d3:98:8d:b4:99:99:f7:f8:2a:b2:c4:aa:be:c6:59:01:23:de:
         fc:48:9d:c6:13:ff:c6:8a:fb:db:86:18:76:58:ab:0e:69:e5:
         c6:b7:d3:ba:25:2a:39:89:5e:d4:f8:10:50:7b:77:8d:51:fe:
         8d:77:7c:8c:3c:43:62:46:f9:67:59:da:ff:9b:5f:9c:90:b2:
         e4:93:4f:42:68:09:43:bf:14:12:50:30:c8:9e:9d:f5:b2:e5:
         49:ba:73:c0:96:16:54:0d:28:b5:a4:6c:38:a5:d5:e3:10:25:
         f3:cc:29:0e:75:93:df:f4:a2:4b:c8:64:9c:f6:47:84:df:4f:
         75:ca:ad:35:de:a6:e2:c3:a7:7c:6c:78:49:17:3a:90:60:54:
         e5:61:64:38:bc:d6:9b:05:05:e1:11:b9:b7:4b:22:80:7d:f7:
         c5:89:41:b8:b8:31:40:50:2e:e7:d4:45:da:27:ba:96:0a:17:
         d4:00:72:3f:f4:e4:12:9b:ae:45:ad:ce:59:45:1f:b8:d8:a9:
         bf:9e:0e:37:1e:c7:fc:79:67:c4:4d:7c:a7:48:ce:7c:cf:3e:
         fe:99:e3:05:f2:9e:89:13:ee:c3:53:c4:67:8f:cb:ba:a1:9e:
         dd:1e:78:46
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:46 2024 by rpki-client on console-ams.rpki-client.org