Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/aE7B-0MiHzJQ_iyhFqCMgiQyq2M.roa
File:                     aE7B-0MiHzJQ_iyhFqCMgiQyq2M.roa (raw, json)
Hash identifier:          nZJrrCP0fM/bEcejjIFCEx25fp+K7PUrlCGl3eqVHBE=
Subject key identifier:   68:4E:C1:FB:43:22:1F:32:50:FE:2C:A1:16:A0:8C:82:24:32:AB:63
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       12
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/aE7B-0MiHzJQ_iyhFqCMgiQyq2M.roa
Signing time:             Mon 20 Nov 2023 03:50:03 +0000
ROA not before:           Mon 20 Nov 2023 03:50:03 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        202.208.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:50:03 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=684EC1FB43221F3250FE2CA116A08C822432AB63
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ee:59:14:9f:71:25:3a:a2:ce:70:9e:ae:8d:31:
                    eb:8a:d0:cf:b8:02:b5:b3:71:11:6a:7b:4f:86:6d:
                    50:bb:89:4b:9f:bf:d4:97:39:04:4a:59:2d:a6:8c:
                    19:39:49:12:4d:51:f3:9f:e0:92:ad:91:85:fb:7c:
                    95:7d:2a:86:7d:a4:52:2e:37:9c:eb:31:30:32:d5:
                    19:35:d9:d7:7d:40:6f:ca:99:db:09:c6:b5:69:6c:
                    b4:f9:fa:09:c8:85:76:eb:87:ee:e0:ea:59:94:82:
                    20:bb:62:fa:4d:ba:d6:f8:57:a6:a3:83:5b:81:7a:
                    0d:d0:07:42:9f:29:22:df:16:6c:26:16:9c:68:3d:
                    93:9e:18:7f:e5:62:29:c7:c9:49:7e:5d:a7:7e:a5:
                    6a:92:ce:a9:10:ba:1d:44:ae:8c:06:04:69:22:ca:
                    fb:36:a7:fe:cb:94:85:3a:8f:c6:8e:67:bd:7c:4b:
                    0a:f1:31:01:ef:47:5b:de:24:8b:40:91:b4:20:d5:
                    06:38:f2:b1:d4:18:3c:48:cf:30:fd:03:20:1d:11:
                    9d:30:52:1f:88:fc:0d:9e:56:36:8a:e9:92:4b:e0:
                    8b:28:18:9f:f8:70:34:c3:d6:ca:af:ec:d6:61:d8:
                    52:1c:7d:6a:83:7c:9e:58:d7:50:17:14:30:5c:15:
                    3d:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:4E:C1:FB:43:22:1F:32:50:FE:2C:A1:16:A0:8C:82:24:32:AB:63
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/aE7B-0MiHzJQ_iyhFqCMgiQyq2M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         77:95:64:74:96:06:0a:68:82:60:00:8b:af:f9:46:9a:be:cb:
         8d:31:22:0d:57:d8:07:13:71:e9:93:01:80:18:81:11:85:42:
         cb:c0:c7:9a:28:12:55:cd:78:4e:50:46:80:c8:ca:7e:18:cb:
         90:10:50:e2:6c:51:bb:f3:20:41:05:17:0e:6e:7e:cd:91:c4:
         bf:0f:86:33:4c:b6:88:25:c8:1c:27:bf:8c:29:b6:53:d9:bd:
         7b:3c:e1:25:f1:39:f3:03:9b:3a:92:67:72:4d:59:4f:24:8f:
         11:31:b9:08:30:20:15:36:e0:99:78:31:8e:74:2c:02:3a:72:
         2c:ae:c2:a8:90:e3:0e:58:86:55:95:08:13:6c:be:bc:60:a0:
         bd:8d:22:29:3a:07:53:5f:78:83:a4:30:cc:30:d0:9a:a0:b9:
         97:29:80:6c:74:93:c6:b0:34:0f:40:40:03:c7:80:fe:40:39:
         66:34:ce:0b:c4:13:e4:4c:cd:c2:50:57:80:0e:2d:e6:e7:75:
         8a:46:6f:5d:50:d2:9e:87:62:6f:80:5c:17:c8:da:a2:86:36:
         e1:6d:20:b6:34:b4:30:f7:aa:a8:3f:43:8a:e2:b0:a2:87:24:
         36:5d:61:c3:2e:11:3c:36:e1:55:01:c3:b8:0e:c7:75:47:ca:
         3f:0b:33:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:43 2024 by rpki-client on console-ams.rpki-client.org