Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cvNVjOGqfR-AOoujSPAwFRBA9Bo.roa
File:                     cvNVjOGqfR-AOoujSPAwFRBA9Bo.roa (raw, json)
Hash identifier:          kRQVoQOfkAs/hJdjxYnd6R6yIDjC+n1DtnGzq2TtcZY=
Subject key identifier:   72:F3:55:8C:E1:AA:7D:1F:80:3A:8B:A3:48:F0:30:15:10:40:F4:1A
Certificate issuer:       /CN=C3941FA221377E9A206102B848EBB972A8709DD5
Certificate serial:       4D
Authority key identifier: C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cvNVjOGqfR-AOoujSPAwFRBA9Bo.roa
Signing time:             Thu 29 Feb 2024 01:29:22 +0000
ROA not before:           Thu 29 Feb 2024 01:29:22 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55392
IP address blocks:        14.1.4.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3941FA221377E9A206102B848EBB972A8709DD5
        Validity
            Not Before: Feb 29 01:29:22 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=72F3558CE1AA7D1F803A8BA348F030151040F41A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4a:7f:35:06:64:ca:31:6b:4e:bc:01:41:1d:
                    3f:01:1f:24:2a:33:9b:02:2c:cf:51:5c:f4:88:7e:
                    e8:e1:2d:5d:da:b3:01:9f:7d:05:25:53:7f:0e:4b:
                    d1:b0:39:bd:cb:1f:bc:ce:ec:7e:9e:7e:4e:a2:41:
                    35:ae:5b:c4:a5:19:f5:db:04:85:39:d7:fb:f7:f6:
                    8c:82:51:00:ff:dd:77:c0:98:0e:0e:02:3c:52:9b:
                    9c:07:77:fd:85:06:05:c3:43:68:83:0f:c4:d0:29:
                    8d:48:c3:c0:cb:02:cb:34:f8:54:bd:72:21:68:93:
                    06:60:f1:e8:45:ab:c8:fe:0b:9d:22:9a:45:94:25:
                    69:dd:a2:1a:9e:7b:0b:3b:83:fa:d7:f9:22:ad:40:
                    55:e3:00:fe:08:94:7c:45:93:99:96:7f:dd:d2:b0:
                    b0:d2:75:aa:60:0c:ef:a0:08:f7:25:ef:2f:d6:3a:
                    9e:ac:e2:e3:33:c3:fa:54:bd:51:2c:9c:44:b5:1c:
                    e5:2f:ec:b4:09:36:f0:de:1b:35:71:da:b2:e4:b8:
                    36:09:41:4b:b0:56:cb:f3:59:fa:f1:7c:4a:80:2b:
                    36:ff:c0:d2:a3:34:52:11:f1:9a:dd:a9:b4:7d:84:
                    1c:89:c5:ef:68:2d:1f:d4:f5:87:af:5f:9d:af:eb:
                    32:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:F3:55:8C:E1:AA:7D:1F:80:3A:8B:A3:48:F0:30:15:10:40:F4:1A
            X509v3 Authority Key Identifier:
                keyid:C3:94:1F:A2:21:37:7E:9A:20:61:02:B8:48:EB:B9:72:A8:70:9D:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/w5QfoiE3fpogYQK4SOu5cqhwndU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w5QfoiE3fpogYQK4SOu5cqhwndU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/cvNVjOGqfR-AOoujSPAwFRBA9Bo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.1.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         29:7e:37:5e:66:fd:3b:12:7d:3f:13:d7:d8:78:d6:ba:8b:40:
         c0:47:ed:53:6e:94:bb:b5:2e:8f:e6:78:b3:2c:bd:29:e1:56:
         4c:d7:6e:34:47:99:bf:ad:a4:9d:8d:51:03:da:aa:91:9a:88:
         29:0a:14:48:df:65:d8:c0:4d:76:21:a3:6d:62:b7:35:73:ce:
         30:21:b4:ee:21:bb:86:88:56:85:57:0f:9a:71:4f:17:f5:da:
         d7:59:fc:3b:75:61:60:16:ed:f7:69:72:c3:14:73:4e:8d:8c:
         ab:59:5a:2e:ce:f1:c9:96:e9:8a:66:02:22:b7:aa:0a:9c:fe:
         6e:16:36:62:54:55:c9:74:1f:45:e5:63:1a:d8:5e:6e:fd:99:
         21:7d:8f:99:0a:05:99:14:a9:ee:f4:71:8c:ab:f9:d9:dd:75:
         74:17:21:69:a7:31:a3:b7:bc:7e:90:d3:3f:c7:27:c1:d0:ef:
         69:b9:ff:7b:16:17:cd:6f:e6:94:a2:df:6f:1a:76:f0:f4:d2:
         6a:07:40:f8:81:59:a8:d6:91:e0:39:25:b9:c7:0c:99:10:f2:
         f2:bb:81:c1:93:86:22:1d:26:55:6c:37:f9:6a:13:fb:a1:36:
         f8:53:75:93:4e:ca:bf:82:a3:e8:a1:db:bd:ba:3a:27:a9:78:
         c6:92:8b:cd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 10 09:55:59 2024 by rpki-client on console-ams.rpki-client.org