Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/r0HR81o2IENaaN4Q496JEoupA-g.roa
File:                     r0HR81o2IENaaN4Q496JEoupA-g.roa (raw, json)
Hash identifier:          /kGIIKdSE3dv/39w/jcbmco56tBqAeGlVaD3Qu+Ketc=
Subject key identifier:   AF:41:D1:F3:5A:36:20:43:5A:68:DE:10:E3:DE:89:12:8B:A9:03:E8
Certificate issuer:       /CN=FB72FAA523BA6526855D99065E21B4B958C5F016
Certificate serial:       29
Authority key identifier: FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/r0HR81o2IENaaN4Q496JEoupA-g.roa
Signing time:             Sun 01 Oct 2023 01:29:55 +0000
ROA not before:           Sun 01 Oct 2023 01:29:55 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     146987
IP address blocks:        157.120.113.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FB72FAA523BA6526855D99065E21B4B958C5F016
        Validity
            Not Before: Oct  1 01:29:55 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=AF41D1F35A3620435A68DE10E3DE89128BA903E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d3:37:60:1b:3a:27:aa:f3:62:79:b1:9c:11:
                    e8:d7:72:a4:21:cf:c4:4a:8c:cb:73:a7:aa:06:7e:
                    3c:5c:d5:01:6f:ca:8c:31:60:d9:63:6f:c5:53:30:
                    10:0d:84:2e:c0:56:ee:e8:87:ec:9d:a7:c1:92:b5:
                    ae:10:5f:5f:ab:b9:d5:69:c1:fd:83:ca:08:8b:79:
                    02:32:1e:a8:ec:73:fe:de:78:f8:3b:59:42:bd:d7:
                    fa:e0:99:1a:63:4b:aa:c2:51:9f:97:bc:64:8d:3d:
                    05:ac:46:93:0f:7c:07:d0:63:bb:33:29:73:fb:4c:
                    e9:87:1a:7e:77:58:e9:35:0a:90:24:1c:7f:71:44:
                    fb:9e:c4:01:0a:4d:05:50:1f:1e:f0:dd:fc:bb:b3:
                    af:8f:71:ae:23:87:02:f3:45:be:5e:cb:1f:5d:1c:
                    d4:20:aa:3d:4f:cc:67:09:4d:a3:fe:59:93:62:b7:
                    fd:25:a5:7d:a3:9a:69:4d:92:90:89:1b:e7:3a:87:
                    55:2a:74:45:d6:d1:d0:21:24:3d:12:18:47:d8:d0:
                    09:5e:3b:ef:58:ed:bb:8f:90:30:ac:35:ba:85:ca:
                    33:0c:89:ff:7b:1b:01:06:8c:58:bf:9b:ac:35:51:
                    d0:bf:4f:80:8b:96:36:ba:cc:28:7d:61:cf:a7:d4:
                    dd:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:41:D1:F3:5A:36:20:43:5A:68:DE:10:E3:DE:89:12:8B:A9:03:E8
            X509v3 Authority Key Identifier:
                keyid:FB:72:FA:A5:23:BA:65:26:85:5D:99:06:5E:21:B4:B9:58:C5:F0:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-3L6pSO6ZSaFXZkGXiG0uVjF8BY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/r0HR81o2IENaaN4Q496JEoupA-g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.113.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9a:60:a4:6f:68:01:1d:fa:ec:0e:1c:7f:59:f2:ff:8f:06:93:
         57:44:68:df:62:5a:c1:9b:ac:9c:db:06:06:53:91:21:ed:a8:
         19:f2:6c:04:01:98:8e:48:b3:26:e8:9c:1c:ee:ad:60:92:c9:
         f7:fd:f4:4d:89:dc:da:9c:84:20:ee:10:f1:a2:22:d5:6a:9b:
         35:ca:b7:ca:1a:0b:3b:98:5a:99:81:06:64:f5:ea:f1:74:b0:
         ca:8b:f7:7e:ed:85:e0:91:4e:36:66:d0:a0:a1:e6:16:3d:97:
         7b:d9:c8:c7:a2:fe:4c:bb:f2:55:5f:1d:aa:c4:51:cd:58:0a:
         5e:bf:55:f4:2b:57:a5:55:bc:84:14:73:11:f5:95:91:d7:9d:
         84:55:15:af:6a:ef:a3:9e:d2:bc:e1:b1:84:17:4c:5d:c3:0a:
         24:50:b1:2b:27:78:e8:6f:68:3a:ab:10:91:46:1a:47:f7:31:
         fc:bd:00:17:32:39:bd:21:2e:ee:02:a4:24:da:1c:c8:9f:55:
         e4:63:25:5b:e6:66:40:e7:27:aa:1c:d2:c6:dc:ec:85:54:59:
         0b:91:f9:84:e6:07:c1:e6:fe:6c:23:c3:08:51:91:f9:2f:a9:
         8e:68:4c:95:3f:01:95:0f:de:31:e9:a2:c6:d5:7e:df:9b:7d:
         80:a9:e0:96
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:50 2024 by rpki-client on console-fra.rpki-client.org