Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa
File:                     ZBXmQRo0RJvljclTs6DkObccftA.roa (raw, json)
Hash identifier:          scUA9Mic3LjJ9C4r1L2kIytfAL5KBfV+1aYNGHfwPFY=
Subject key identifier:   64:15:E6:41:1A:34:44:9B:E5:8D:C9:53:B3:A0:E4:39:B7:1C:7E:D0
Certificate issuer:       /CN=C0EDE8C3879081138F9495306BE79EF7340A9451
Certificate serial:       47
Authority key identifier: C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa
Signing time:             Thu 29 Feb 2024 01:29:15 +0000
ROA not before:           Thu 29 Feb 2024 01:29:15 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7667
IP address blocks:        192.26.91.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0EDE8C3879081138F9495306BE79EF7340A9451
        Validity
            Not Before: Feb 29 01:29:15 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=6415E6411A34449BE58DC953B3A0E439B71C7ED0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e4:bf:82:04:12:d2:10:59:8b:d2:a1:c5:59:
                    ae:7f:e3:20:24:a4:65:34:84:df:61:ac:01:33:39:
                    82:2e:b2:05:6c:b8:ce:ab:0b:0f:97:e4:f9:4a:3c:
                    cb:50:79:4c:dc:31:04:e3:3c:8e:6a:bf:cd:6e:35:
                    c4:75:e2:5e:ce:35:bd:ea:e6:70:58:06:06:e5:51:
                    6b:30:42:cf:06:23:5f:6f:fa:b3:35:4f:48:c6:cd:
                    d1:f7:ff:4c:4f:4f:3c:2d:a4:d8:ab:7d:45:a3:95:
                    b8:1e:da:60:3c:35:6e:a4:c4:eb:4f:e7:6e:ae:3f:
                    85:80:8e:66:11:0d:ed:96:0d:c2:73:d4:fc:d6:b7:
                    2f:b3:49:a5:ca:cd:79:ba:4d:88:bd:ae:f2:51:be:
                    6c:aa:71:c8:36:ea:88:21:ba:52:9c:e9:78:47:76:
                    32:bc:06:98:db:fb:56:aa:aa:61:1e:43:6a:71:b5:
                    4d:7f:4c:b3:4a:d3:9f:98:32:c7:2c:f0:ec:70:25:
                    cb:b0:39:11:62:ce:fb:a1:26:b5:9c:ce:9e:26:10:
                    75:73:1c:40:57:1f:66:2e:0c:67:ef:d2:ad:99:6e:
                    5b:16:3a:b9:2a:2e:89:fd:f8:3c:57:1b:c9:c3:38:
                    60:dd:4c:57:98:e7:25:f7:ee:e9:30:be:cd:d5:23:
                    7f:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:15:E6:41:1A:34:44:9B:E5:8D:C9:53:B3:A0:E4:39:B7:1C:7E:D0
            X509v3 Authority Key Identifier:
                keyid:C0:ED:E8:C3:87:90:81:13:8F:94:95:30:6B:E7:9E:F7:34:0A:94:51

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/wO3ow4eQgROPlJUwa-ee9zQKlFE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wO3ow4eQgROPlJUwa-ee9zQKlFE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/ZBXmQRo0RJvljclTs6DkObccftA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.26.91.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5a:1c:0a:72:5e:2d:e7:29:16:a9:21:5a:c5:a2:8b:49:35:c7:
         39:8b:e7:eb:17:2a:75:d7:6a:17:2d:4d:c0:07:6c:6b:d5:93:
         5d:bf:dc:29:f0:c9:e4:6e:52:d1:a9:9a:73:40:bf:90:95:b8:
         a1:c3:81:8c:4e:41:fe:4a:9a:e8:bb:54:ac:62:0c:c4:37:f5:
         53:e4:a2:b4:b1:90:91:6a:82:b7:14:f7:98:5f:e7:49:dc:66:
         06:c9:d2:31:74:4d:58:0d:07:af:a8:09:8d:56:49:e8:55:fb:
         ed:83:e8:e9:60:be:85:46:35:a8:f6:06:7d:ba:53:d2:18:62:
         f4:c7:04:67:85:b0:bc:f8:bc:a0:2a:a4:d4:cd:78:c8:dd:21:
         c8:72:5e:5d:4c:30:e6:6b:23:37:24:e5:3e:83:62:7d:ec:48:
         d0:9a:a1:2f:70:d4:df:b9:2d:59:80:28:b4:89:31:0a:8b:79:
         5e:44:a3:fc:e8:15:5c:72:db:90:21:92:dd:ab:a7:3e:99:25:
         6b:ff:83:2c:2e:de:67:a1:26:27:95:65:b5:14:d6:c0:8d:03:
         d1:84:d1:30:a6:85:1d:7e:5b:4a:c1:38:a1:1f:97:25:79:0e:
         cc:b5:80:a2:9a:01:51:a9:42:82:d9:79:d1:e7:c3:b3:a8:1f:
         ec:72:a4:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org