Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/E6CA94o10MDDaO6vuTeRp1lcmes.roa
File:                     E6CA94o10MDDaO6vuTeRp1lcmes.roa (raw, json)
Hash identifier:          ajJEH4p7wIbrGRW5PzrwmUORbRw6D4g1va/N5nL8PFQ=
Subject key identifier:   13:A0:80:F7:8A:35:D0:C0:C3:68:EE:AF:B9:37:91:A7:59:5C:99:EB
Certificate issuer:       /CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
Certificate serial:       0E
Authority key identifier: 71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/E6CA94o10MDDaO6vuTeRp1lcmes.roa
Signing time:             Mon 01 Apr 2024 23:57:07 +0000
ROA not before:           Mon 01 Apr 2024 23:57:07 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        157.8.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7191CB9F4C422D3B3D675371B18A8DADDAE8798D
        Validity
            Not Before: Apr  1 23:57:07 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=13A080F78A35D0C0C368EEAFB93791A7595C99EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:b7:54:c4:f9:99:da:b8:ea:c3:22:15:bc:
                    b2:78:a0:87:b7:c1:4b:ab:b3:25:84:d7:5a:7e:07:
                    74:3d:e1:81:ed:d0:b6:31:a4:c2:87:5c:ca:d7:ea:
                    9a:ad:28:d6:ee:ef:fa:a0:ff:5e:11:43:d8:3d:10:
                    31:2d:68:1a:19:04:89:b2:ed:95:4d:70:47:5a:7a:
                    a8:5d:55:3f:b6:48:f6:81:1a:eb:c0:d4:6b:5f:f4:
                    de:6e:2b:ba:49:70:d5:8a:dc:58:63:29:3d:10:4e:
                    f2:6e:63:48:28:e8:81:2d:00:e3:97:4d:1f:2a:0c:
                    a0:de:60:ca:3c:3a:c9:8a:4b:36:6b:db:f4:18:43:
                    0a:f3:3d:c5:c3:da:7e:48:d3:03:fb:5e:aa:d6:56:
                    26:b1:95:80:db:6b:ef:e4:b1:9f:32:f2:19:4e:59:
                    32:ca:4f:c0:34:c8:db:c8:a5:86:50:b0:d4:68:73:
                    bc:8c:a3:9d:30:72:4b:67:d5:e9:23:74:cc:50:c9:
                    73:bf:d7:92:df:d8:3e:ee:72:a7:f5:f1:38:ea:c2:
                    24:c9:bf:62:a2:e3:af:69:31:28:d5:33:21:d9:2f:
                    35:fb:c7:de:19:10:01:e5:40:1f:50:d9:4d:a8:8b:
                    d5:b3:03:54:8a:c3:97:94:48:9b:0d:5a:35:4c:e4:
                    01:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A0:80:F7:8A:35:D0:C0:C3:68:EE:AF:B9:37:91:A7:59:5C:99:EB
            X509v3 Authority Key Identifier:
                keyid:71:91:CB:9F:4C:42:2D:3B:3D:67:53:71:B1:8A:8D:AD:DA:E8:79:8D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/cZHLn0xCLTs9Z1NxsYqNrdroeY0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cZHLn0xCLTs9Z1NxsYqNrdroeY0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/E6CA94o10MDDaO6vuTeRp1lcmes.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.8.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0c:61:3f:50:7f:d2:38:9c:3a:33:64:33:50:27:e7:f5:09:cf:
         bd:42:78:56:df:af:5c:d8:95:16:ca:17:79:af:bf:ec:85:a5:
         28:8b:89:d9:b7:bd:f1:be:de:51:60:b6:81:87:6d:5c:5c:4b:
         7c:a2:dd:8d:4b:7e:a1:1d:79:72:3e:ac:9d:94:c0:4c:0f:68:
         ff:66:22:e4:24:7d:8c:d4:59:95:eb:2d:df:0d:10:ab:43:7e:
         8f:d2:01:e6:66:b9:2a:61:1e:dc:38:0b:4b:bd:85:4f:8e:88:
         c6:c1:bb:64:e8:05:43:f8:9f:06:b3:87:f3:ee:43:35:46:94:
         cf:d9:1b:c3:b1:54:e4:6e:e7:e0:40:ff:94:98:e3:2a:4f:08:
         af:23:95:c4:de:d5:d5:0b:aa:ad:a9:d1:1b:b0:cf:58:b2:ee:
         75:36:51:74:c7:0a:fb:8e:f2:7d:1a:b0:76:c1:c9:a2:7a:29:
         f1:1c:37:16:9b:f5:b5:20:2e:ad:f1:8b:ba:95:61:15:30:d6:
         15:68:94:c4:b3:2c:d4:7e:b8:9f:ef:31:6b:b9:23:6e:84:23:
         ad:c1:68:c8:b2:93:99:24:53:bb:65:a6:5d:3d:3b:ff:bb:dc:
         9e:a5:3c:43:25:ab:50:36:6a:53:82:d3:51:e3:e2:6c:cc:06:
         24:5b:24:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org