Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRDoMXLIS3qmX1Wlc-hyBNp9FoM.roa
File:                     GRDoMXLIS3qmX1Wlc-hyBNp9FoM.roa (raw, json)
Hash identifier:          U8yVPYS1JrpTlGp0lKwjtnrBGqfRSRvJ4qZoh6xallw=
Subject key identifier:   19:10:E8:31:72:C8:4B:7A:A6:5F:55:A5:73:E8:72:04:DA:7D:16:83
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       39
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRDoMXLIS3qmX1Wlc-hyBNp9FoM.roa
Signing time:             Tue 15 Aug 2023 00:52:29 +0000
ROA not before:           Tue 15 Aug 2023 00:52:29 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     4694
IP address blocks:        210.129.184.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Aug 15 00:52:29 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1910E83172C84B7AA65F55A573E87204DA7D1683
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:fd:c5:9e:ce:cd:79:de:78:2a:1a:46:10:3f:
                    c3:3e:b7:a3:28:11:d0:27:71:d1:9b:18:90:bd:f2:
                    f1:bb:33:0d:b0:73:93:cd:56:56:da:e7:b1:b6:54:
                    fc:e7:92:92:40:1f:52:36:7c:a7:42:ab:e3:60:0b:
                    8f:33:3c:93:ca:1e:6e:3d:01:34:e1:e6:d4:4f:1f:
                    b7:3a:97:4e:97:5b:0d:20:45:0c:b5:3f:94:f9:48:
                    f7:0c:dd:dd:0d:75:88:19:69:04:bf:2d:95:33:22:
                    4d:f6:26:c4:c5:92:c4:e5:c3:ae:36:b7:6d:10:32:
                    10:61:23:44:1e:f6:d3:73:ba:63:6f:14:92:2f:a7:
                    3b:87:27:be:8e:6c:03:78:40:91:b5:d1:b9:ae:66:
                    e6:d8:a5:4c:f9:a2:71:e0:f3:df:a0:37:de:4d:6a:
                    7c:ce:64:f4:9d:be:60:8a:90:9a:1c:2c:c2:ae:b8:
                    0b:ad:ab:e0:83:d5:8e:ec:86:1a:11:02:b6:67:3b:
                    c0:a1:10:71:b8:05:5e:87:ac:3f:d3:7a:3e:4d:59:
                    ad:17:68:e5:93:ac:60:10:b7:f5:31:0f:fd:1e:e6:
                    2c:ac:33:aa:04:56:9e:e5:86:2c:7e:91:55:41:79:
                    d4:12:30:1c:44:99:3c:0b:3b:eb:04:c3:2b:cd:e9:
                    7d:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:10:E8:31:72:C8:4B:7A:A6:5F:55:A5:73:E8:72:04:DA:7D:16:83
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/GRDoMXLIS3qmX1Wlc-hyBNp9FoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.129.184.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2a:90:06:6c:49:fe:e8:79:fe:53:f6:45:16:bd:c9:6d:a9:72:
         ed:61:30:32:0f:2e:8a:7c:25:3f:b7:b9:f9:fb:24:5d:48:08:
         35:19:e5:bd:f4:92:c9:4d:49:ed:eb:d9:a9:94:dd:62:65:0a:
         61:94:8e:56:64:6e:c1:c6:19:e6:cc:18:14:63:d2:86:dc:64:
         1d:24:a2:fd:11:a5:24:25:99:9d:62:5a:39:ed:7e:62:e2:ee:
         75:5e:a5:33:53:13:4b:9a:75:a9:af:22:4a:70:4c:eb:ae:db:
         ea:1a:91:fe:f5:fb:1a:f3:ca:fe:09:51:63:09:05:86:eb:f0:
         38:c3:91:04:73:9e:38:b4:00:18:b7:6e:d5:ef:4a:be:76:b0:
         0f:ac:7d:3b:f5:61:a4:af:07:44:b2:10:68:74:24:39:e4:c6:
         c1:78:4c:e0:ee:01:30:9d:75:49:4d:8a:0b:b0:5d:d6:ac:0b:
         6e:c4:79:f4:49:b5:ef:84:f2:ff:15:96:c5:19:33:d3:8e:ea:
         f2:b0:39:0d:6f:86:dd:16:aa:03:ae:35:79:ec:d7:73:d4:67:
         ab:24:c7:5d:b1:1f:29:24:7f:7e:46:46:b2:d8:1f:6e:8d:36:
         32:39:96:49:46:16:e9:d7:02:66:b5:26:6e:7f:f4:bc:7c:da:
         4e:5b:60:89
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:07 2024 by rpki-client on console-fra.rpki-client.org