Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20053/rGnjvBHaHJeD6fCkxcZ48Q8h3Gc.roa
File:                     rGnjvBHaHJeD6fCkxcZ48Q8h3Gc.roa (raw, json)
Hash identifier:          toazXW4O8vGzQ5jw6nL7GrCF/Oj3OVuqVCne8/KuJZU=
Subject key identifier:   AC:69:E3:BC:11:DA:1C:97:83:E9:F0:A4:C5:C6:78:F1:0F:21:DC:67
Certificate issuer:       /CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
Certificate serial:       02
Authority key identifier: DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/rGnjvBHaHJeD6fCkxcZ48Q8h3Gc.roa
Signing time:             Thu 18 Apr 2024 07:52:45 +0000
ROA not before:           Thu 18 Apr 2024 07:52:45 +0000
ROA not after:            Fri 18 Apr 2025 07:41:21 +0000
asID:                     131926
IP address blocks:        69.6.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:07:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DABF6D95DB256816D2942346B9FC2EA0C1AFD803
        Validity
            Not Before: Apr 18 07:52:45 2024 GMT
            Not After : Apr 18 07:41:21 2025 GMT
        Subject: CN=AC69E3BC11DA1C9783E9F0A4C5C678F10F21DC67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:14:87:06:e1:38:53:c8:02:8e:d4:ca:37:5c:
                    6a:ef:38:60:a6:f6:fa:19:fb:f9:69:96:18:73:bf:
                    a2:43:0d:57:2b:fd:ac:82:48:d0:66:b1:0a:c4:c4:
                    5c:af:fd:0f:31:6f:53:28:c1:58:8c:19:ce:24:fb:
                    91:c6:67:2a:13:a5:0c:5c:1e:fc:15:fd:1b:df:ee:
                    2b:db:db:3f:00:93:f9:b9:f6:3b:60:47:9b:9e:43:
                    06:ed:1f:53:33:0d:c0:61:40:e5:ec:2e:b1:27:19:
                    dd:5a:a8:46:d2:30:71:48:dc:06:8c:0c:1b:6f:42:
                    0c:fc:37:c6:b3:16:1e:53:f3:b6:cb:8e:a6:ac:05:
                    24:fd:b2:81:e6:cf:34:cb:fc:3a:db:5e:95:64:23:
                    bf:99:6c:ae:65:a5:7d:94:b4:63:a5:94:49:72:69:
                    6e:7f:ae:0b:c2:49:d1:61:0c:95:0f:d6:f6:34:ec:
                    02:82:cc:fa:05:74:ba:68:65:3c:23:8e:86:33:82:
                    a6:b0:8c:f4:ef:87:50:05:b0:1b:ba:50:37:68:7c:
                    ba:b9:6a:50:65:0a:39:00:be:e1:0d:49:6d:44:41:
                    2c:d9:71:55:cc:cb:8b:93:d6:1c:7c:ed:7c:43:26:
                    27:fa:a6:87:8e:1e:e0:cb:b4:98:3e:2a:e9:16:3c:
                    4f:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:69:E3:BC:11:DA:1C:97:83:E9:F0:A4:C5:C6:78:F1:0F:21:DC:67
            X509v3 Authority Key Identifier:
                keyid:DA:BF:6D:95:DB:25:68:16:D2:94:23:46:B9:FC:2E:A0:C1:AF:D8:03

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/2r9tldslaBbSlCNGufwuoMGv2AM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2r9tldslaBbSlCNGufwuoMGv2AM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20053/rGnjvBHaHJeD6fCkxcZ48Q8h3Gc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.6.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         5b:f5:58:8f:27:f4:31:b9:bd:04:2d:be:e1:b2:ca:c4:9a:bf:
         0c:d7:85:5b:f8:27:99:16:fe:00:74:2a:85:d6:9b:5f:47:11:
         d3:a7:85:9b:9c:a4:04:3d:00:5e:20:64:e9:9d:62:14:8d:8e:
         b0:5e:7e:70:8a:7a:ba:0c:64:a9:32:12:f7:8c:85:4a:b2:68:
         95:24:9c:8d:57:27:e2:b8:c7:83:99:f2:62:2b:37:f2:8d:42:
         7f:be:72:06:c6:e0:09:92:46:c4:4b:13:16:b7:74:e9:e0:09:
         67:89:6b:b3:c3:60:a0:5e:32:95:a6:83:9b:d7:43:e9:1c:d1:
         2d:bd:97:67:8c:5e:f7:32:7f:fd:9c:5e:10:d2:9f:43:07:8f:
         f9:20:13:db:f3:6b:e0:e8:e8:0a:0b:63:63:95:3e:60:af:22:
         7b:e6:8e:90:1a:f7:ce:ea:18:81:9e:1b:ca:3b:31:27:81:41:
         cc:48:42:a2:e6:bc:55:ee:5b:dc:3e:18:26:72:49:eb:ae:ca:
         a2:8d:64:e7:d2:4a:c0:5e:da:b4:38:69:55:10:c5:3e:4d:b9:
         4e:5d:80:52:fa:c7:93:09:a5:6d:b7:ca:8b:af:e2:82:db:74:
         e4:39:91:93:0a:ec:03:78:56:fc:e9:4d:69:f4:25:19:08:09:
         5c:1b:78:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org