Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uHRnr4uGsLtGOcYce2LrovaakCY.roa
File:                     uHRnr4uGsLtGOcYce2LrovaakCY.roa (raw, json)
Hash identifier:          tTGucAXpDOqSGFCveYBScwXVh4Uu5+vTha8IyqEyxBI=
Subject key identifier:   B8:74:67:AF:8B:86:B0:BB:46:39:C6:1C:7B:62:EB:A2:F6:9A:90:26
Certificate issuer:       /CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
Certificate serial:       53
Authority key identifier: 59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uHRnr4uGsLtGOcYce2LrovaakCY.roa
Signing time:             Sun 31 Mar 2024 01:30:36 +0000
ROA not before:           Sun 31 Mar 2024 01:30:36 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2554
IP address blocks:        61.215.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=590A82288D2E23DBFA87638F3EB8B995E1897E95
        Validity
            Not Before: Mar 31 01:30:36 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=B87467AF8B86B0BB4639C61C7B62EBA2F69A9026
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a2:17:47:f9:24:29:41:9c:7b:bb:c8:e9:a7:
                    89:fd:d1:46:95:2f:3e:49:b8:91:73:4d:71:2a:dd:
                    e4:99:ef:68:ec:7e:13:f7:ee:98:db:31:1b:fa:fe:
                    08:2b:cb:0b:cb:f5:81:a2:ba:14:c4:c5:37:00:f1:
                    11:b8:c3:c1:fe:54:8f:63:95:6c:0d:52:d6:8c:1d:
                    5d:b4:dc:f3:70:0c:5c:d5:f7:54:d6:af:02:63:21:
                    25:9c:af:c6:87:1b:d0:cb:83:ea:aa:b2:98:80:26:
                    f2:ff:12:88:2d:da:ae:17:f2:ff:65:60:d2:da:58:
                    b8:18:0d:fd:fe:60:83:25:51:ec:c7:13:df:52:b1:
                    33:3c:20:b5:22:ef:28:e8:73:9f:49:8a:3d:8d:64:
                    bc:00:a9:21:27:3f:de:e6:6c:4c:46:d1:72:87:d8:
                    25:ba:37:2c:4a:49:7d:5e:a8:62:27:ff:25:84:c8:
                    cb:c9:21:b4:9e:fa:f6:8d:2e:61:d5:70:3f:33:83:
                    13:ad:49:1a:09:00:1b:77:3e:8d:dc:95:e1:48:b5:
                    85:fb:f3:5a:48:e8:c9:c0:dd:6a:3f:41:d2:64:87:
                    fc:c0:fa:fb:63:8f:4b:e1:3d:1e:e3:7c:da:bc:fa:
                    ad:13:b7:4a:c6:0e:37:a7:5d:4e:14:99:7a:61:90:
                    df:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:74:67:AF:8B:86:B0:BB:46:39:C6:1C:7B:62:EB:A2:F6:9A:90:26
            X509v3 Authority Key Identifier:
                keyid:59:0A:82:28:8D:2E:23:DB:FA:87:63:8F:3E:B8:B9:95:E1:89:7E:95

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/WQqCKI0uI9v6h2OPPri5leGJfpU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/WQqCKI0uI9v6h2OPPri5leGJfpU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20083/uHRnr4uGsLtGOcYce2LrovaakCY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.215.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4b:14:85:f3:8d:53:7c:fc:02:62:78:d6:61:c1:7e:9f:31:2e:
         32:d3:0a:b1:c5:c3:8e:e7:1e:eb:56:b4:e4:6d:86:c6:c5:b2:
         60:b0:b9:6a:73:ad:23:a4:67:a5:c7:08:55:f7:a0:be:2e:3b:
         e1:dd:55:99:58:10:a0:a0:11:09:f9:77:bd:05:90:b4:e8:6d:
         0c:ef:1c:3d:d7:d7:29:3d:9c:23:89:39:e2:a7:dd:bd:eb:e2:
         ed:fa:5c:8a:39:b5:29:82:c1:5a:7c:e5:dc:5d:64:ab:eb:d0:
         ec:3e:35:09:9a:12:e4:f0:5b:8a:34:e8:89:05:76:51:44:00:
         cd:de:1c:8e:91:d3:09:b7:90:fd:00:31:91:d9:aa:18:d9:0f:
         7b:03:84:60:ff:2d:d4:d3:d1:a3:16:b9:0b:f9:c9:4a:eb:62:
         08:2a:c6:8c:96:29:7d:e3:80:87:37:9b:fc:b3:53:85:af:83:
         a7:8e:d8:78:35:3b:5b:4e:db:03:11:5e:02:b1:36:ad:2c:ef:
         51:dd:75:92:96:a4:35:4e:2b:cf:72:c9:35:f4:b5:7c:28:3c:
         08:e6:ce:27:73:77:51:bf:c9:3c:04:15:fb:06:88:e9:4d:5f:
         e3:10:78:bc:f4:54:b0:98:ac:a3:cf:cb:3e:8d:ed:d6:00:ba:
         75:5e:26:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 10 10:26:07 2024 by rpki-client on console-fra.rpki-client.org