Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2005/VGGqJx2ymfJnmD54bEyRGUqJ67M.roa
File:                     VGGqJx2ymfJnmD54bEyRGUqJ67M.roa (raw, json)
Hash identifier:          Hv+SGkSWGA6uPhlMdAbGcxHVlQ90ulHBEzAqnNGUGXg=
Subject key identifier:   54:61:AA:27:1D:B2:99:F2:67:98:3E:78:6C:4C:91:19:4A:89:EB:B3
Certificate issuer:       /CN=0DF81D1E559B0F1955274E1E362C50C70362F461
Certificate serial:       1D
Authority key identifier: 0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/VGGqJx2ymfJnmD54bEyRGUqJ67M.roa
Signing time:             Sat 31 Aug 2024 01:31:24 +0000
ROA not before:           Sat 31 Aug 2024 01:31:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     0
IP address blocks:        160.195.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 27 Oct 2024 22:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF81D1E559B0F1955274E1E362C50C70362F461
        Validity
            Not Before: Aug 31 01:31:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=5461AA271DB299F267983E786C4C91194A89EBB3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:cb:0a:db:bb:6e:ef:b6:c8:c4:57:e0:60:97:
                    b2:44:a7:46:9c:37:5b:c0:92:76:ab:d9:f2:be:9f:
                    3d:9b:61:25:02:cd:50:5b:c0:95:fd:9e:99:d6:0e:
                    c4:59:79:1c:fb:a8:0a:9d:58:0d:c3:fe:50:06:73:
                    97:68:da:96:a5:aa:73:24:3c:a8:27:b1:59:80:1c:
                    c1:04:8c:34:f7:7e:f9:b9:06:74:2c:87:0d:71:c0:
                    94:96:10:c8:4c:e5:5c:50:70:85:48:fe:c5:6a:b2:
                    aa:96:86:3f:20:77:ba:54:e4:cf:62:ca:3a:ea:43:
                    ee:b1:e8:c8:20:c2:fe:28:10:9e:8d:3e:b2:23:87:
                    30:ff:97:82:fd:d0:88:0f:74:27:b4:28:10:74:70:
                    cd:2b:16:3e:38:ae:b9:ae:f4:3e:a7:20:d6:79:99:
                    b0:fd:d5:9a:05:f1:3b:a6:06:a8:4f:e7:62:9a:15:
                    9f:66:db:03:82:ae:2f:f3:80:72:72:e3:b4:70:4f:
                    be:ec:e4:21:bc:5c:d9:29:24:13:f6:6f:58:00:d8:
                    fa:36:0d:f5:99:ee:78:02:b6:b6:91:33:13:9d:94:
                    6d:15:e4:f2:dc:fd:9f:20:e8:2e:9d:55:00:db:7d:
                    0e:ef:92:3b:7b:d2:b7:4d:35:a1:f5:12:0f:83:4e:
                    9e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:61:AA:27:1D:B2:99:F2:67:98:3E:78:6C:4C:91:19:4A:89:EB:B3
            X509v3 Authority Key Identifier:
                keyid:0D:F8:1D:1E:55:9B:0F:19:55:27:4E:1E:36:2C:50:C7:03:62:F4:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/DfgdHlWbDxlVJ04eNixQxwNi9GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DfgdHlWbDxlVJ04eNixQxwNi9GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2005/VGGqJx2ymfJnmD54bEyRGUqJ67M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.195.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         b3:21:1c:e3:bc:42:22:c7:20:2e:66:64:2b:7b:ab:ba:1f:c4:
         9b:32:fc:a4:8f:d8:94:0f:1c:09:dc:6a:ac:ab:f2:61:ac:32:
         6c:e3:16:d4:32:66:c5:87:85:3c:78:5d:28:25:83:59:d7:b8:
         8e:19:de:6b:b2:18:e1:ff:28:35:bc:9b:d9:82:9d:24:9f:a4:
         15:8e:06:49:77:fc:25:5a:db:93:49:69:0d:33:8d:c0:61:b2:
         c9:2a:6f:eb:70:32:15:bd:49:88:5e:2e:4e:f1:f0:60:81:a6:
         d4:13:01:14:29:eb:a5:bf:2b:4f:9d:e8:d3:31:34:8a:33:7a:
         56:9d:a8:4a:12:bf:29:cf:a6:3c:87:41:5b:2e:03:d4:c3:98:
         8e:12:b0:05:d5:06:43:fd:1b:7f:88:0f:f7:0a:a5:2d:8a:b6:
         72:dc:a7:bb:43:f8:c1:ed:e9:c3:23:da:53:ca:e2:50:21:cc:
         77:7c:4b:4e:bb:bd:cc:18:8a:26:a3:22:8e:4d:ba:3b:5f:37:
         48:d9:e2:79:ec:19:09:1b:6b:0c:6e:c3:03:78:06:80:f7:9c:
         cb:6d:dc:a4:46:dd:58:02:ad:82:48:5f:5e:a6:09:5f:a8:47:
         fa:da:13:af:2c:d5:aa:5c:c5:53:4e:48:bc:66:56:6b:b1:16:
         0f:ce:71:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 22 15:00:01 2024 by rpki-client on console-fra.rpki-client.org