Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/qVds19GUr_fXVOke9VPC0JcumWI.roa
File:                     qVds19GUr_fXVOke9VPC0JcumWI.roa (raw, json)
Hash identifier:          rSZdRCkWAMDerIxsD+ud2hmg7A+coDR6tABt2S2eRbA=
Subject key identifier:   A9:57:6C:D7:D1:94:AF:F7:D7:54:E9:1E:F5:53:C2:D0:97:2E:99:62
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       2C
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/qVds19GUr_fXVOke9VPC0JcumWI.roa
Signing time:             Sun 01 Oct 2023 01:29:56 +0000
ROA not before:           Sun 01 Oct 2023 01:29:56 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     131921
IP address blocks:        157.120.116.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Oct  1 01:29:56 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A9576CD7D194AFF7D754E91EF553C2D0972E9962
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:7f:b3:fe:3f:91:8e:f8:94:ba:53:4f:34:b4:
                    fa:a9:95:c1:5b:a0:8e:f1:0e:8e:66:fd:b9:53:ed:
                    93:61:34:d2:3b:be:47:59:af:f4:36:c8:13:b7:62:
                    60:41:14:8d:e5:ee:c7:65:d4:2c:22:8b:48:81:18:
                    c5:1f:a1:de:18:1d:13:f2:64:38:f7:8c:73:82:b4:
                    3a:bf:8c:36:c2:1c:e8:23:a6:e1:99:49:3a:10:60:
                    9c:53:23:84:64:e0:42:d4:59:45:18:a9:0f:ad:df:
                    d4:ae:e7:87:95:a1:90:1e:3c:f8:30:59:55:90:72:
                    c7:bf:40:23:9f:1b:64:0e:0d:08:28:d3:cb:6c:f4:
                    d7:4e:31:ce:eb:34:82:ea:9c:b6:1d:67:46:da:d6:
                    67:68:12:be:62:1f:98:ad:7b:ca:3b:77:76:d1:74:
                    b1:1e:1a:0e:d6:e0:f6:94:64:41:16:85:8b:5c:96:
                    38:ba:29:ca:d8:90:31:48:a0:ea:39:0d:53:49:4b:
                    08:67:1b:4d:68:ca:5b:f9:bc:c9:ff:b0:81:d4:b1:
                    92:91:c8:39:02:d2:22:f6:a0:ec:15:c1:fc:82:72:
                    d5:19:e3:92:ef:c6:1d:24:62:d6:e4:68:2f:05:e7:
                    c8:97:95:09:91:c8:99:06:4b:49:17:d0:e4:d2:86:
                    f5:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:57:6C:D7:D1:94:AF:F7:D7:54:E9:1E:F5:53:C2:D0:97:2E:99:62
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/qVds19GUr_fXVOke9VPC0JcumWI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         a0:e2:a6:69:17:86:5d:23:4f:c9:0b:b0:b3:47:3a:ee:ae:b6:
         fb:39:b5:a4:79:da:11:91:05:b3:62:51:5b:ea:04:9c:82:1b:
         2d:32:dd:96:c7:60:d0:aa:b1:fd:dc:60:26:1e:a7:28:d3:4b:
         24:d2:25:6f:7d:56:63:41:a4:30:1e:ec:0e:26:d5:6a:ac:0d:
         0f:4a:9a:54:4f:fd:a5:a1:a8:05:a7:5b:9c:50:f6:9e:0b:4e:
         16:61:75:2e:a0:64:e9:3b:13:9e:05:e5:8d:cb:c3:3d:8a:cd:
         82:d1:41:f3:79:65:16:48:bb:52:c0:91:a3:4f:0c:d0:02:8c:
         9b:78:85:21:9d:f4:a8:ee:76:31:bf:88:20:18:fb:83:7b:e8:
         1f:5a:fc:24:81:25:f8:51:75:5d:54:82:73:de:31:a4:05:8f:
         0f:2f:ae:3b:65:b3:f3:93:d2:2d:72:14:e1:1e:e0:87:03:91:
         30:29:d8:5e:37:71:ff:56:b3:69:d4:26:9e:0f:72:21:64:03:
         0a:cc:93:d1:0c:11:b5:41:51:9a:32:cf:d3:db:d1:80:60:14:
         4a:dc:f2:54:1d:02:f7:e1:15:3b:8a:9b:54:49:be:86:13:02:
         46:bf:7e:e3:ec:6c:02:bc:2e:7f:b4:97:e5:d0:f9:db:97:9e:
         ad:60:8b:57
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:37 2024 by rpki-client on console-ams.rpki-client.org