Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20254/cCdW69JtIGx7exNTZsfRxlqTn-Y.roa
File:                     cCdW69JtIGx7exNTZsfRxlqTn-Y.roa (raw, json)
Hash identifier:          sy2UqdSv+/ps1b2F8ZEUeiphvWVvswZF+IFx+yMXPCI=
Subject key identifier:   70:27:56:EB:D2:6D:20:6C:7B:7B:13:53:66:C7:D1:C6:5A:93:9F:E6
Certificate issuer:       /CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
Certificate serial:       02
Authority key identifier: F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/cCdW69JtIGx7exNTZsfRxlqTn-Y.roa
Signing time:             Sun 05 May 2024 06:08:11 +0000
ROA not before:           Sun 05 May 2024 06:08:11 +0000
ROA not after:            Mon 05 May 2025 06:00:54 +0000
asID:                     63801
IP address blocks:        157.20.16.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F8C0305691D02A85DA9D5AA117A76259BD66F596
        Validity
            Not Before: May  5 06:08:11 2024 GMT
            Not After : May  5 06:00:54 2025 GMT
        Subject: CN=702756EBD26D206C7B7B135366C7D1C65A939FE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:07:20:6d:5d:58:81:af:ae:14:57:78:93:71:
                    5a:a2:e4:4e:73:ed:3d:60:c5:38:29:8c:5e:ba:40:
                    18:3c:54:49:af:56:19:65:09:8a:67:15:eb:39:52:
                    ba:f0:09:b8:0d:b3:53:8a:a1:c8:78:f2:7e:4d:9d:
                    95:56:4f:13:9e:ff:c8:3f:7d:99:c9:77:6d:db:4e:
                    ce:d7:1e:89:f1:8f:f9:31:fc:cf:e5:8f:5d:5c:71:
                    b8:0c:fd:b1:08:1f:d8:1a:47:b4:a2:ba:16:e7:54:
                    84:8e:01:e8:4c:09:8d:29:a1:1e:59:2c:1c:94:f0:
                    67:e3:84:73:0d:9a:c3:d8:df:2c:dc:d9:5b:54:7c:
                    98:9e:52:b1:9e:4c:ea:62:98:25:74:92:d8:3e:e4:
                    ae:50:e0:86:6d:ed:18:50:63:51:60:57:91:9d:b3:
                    0e:9a:6f:26:61:22:7a:f0:0e:3e:4f:e7:ad:79:d4:
                    76:3a:1f:1f:d3:cf:d8:f5:5f:45:19:52:e2:ad:68:
                    08:4a:7d:c9:c7:ee:e8:0d:a6:5e:aa:80:96:14:96:
                    8d:80:65:f8:4b:99:fe:6d:dc:43:0d:35:08:b1:9a:
                    ea:39:d1:9f:ff:d7:3c:61:75:c7:72:5d:c9:0c:85:
                    c2:fd:a5:31:7d:f4:06:68:48:34:77:13:27:83:37:
                    2e:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:27:56:EB:D2:6D:20:6C:7B:7B:13:53:66:C7:D1:C6:5A:93:9F:E6
            X509v3 Authority Key Identifier:
                keyid:F8:C0:30:56:91:D0:2A:85:DA:9D:5A:A1:17:A7:62:59:BD:66:F5:96

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/-MAwVpHQKoXanVqhF6diWb1m9ZY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-MAwVpHQKoXanVqhF6diWb1m9ZY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20254/cCdW69JtIGx7exNTZsfRxlqTn-Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.20.16.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6a:1c:ab:f5:a5:6f:b6:5f:14:e2:2c:89:22:2b:e0:1e:bd:69:
         e0:03:91:99:24:84:4e:71:76:6b:be:9d:7c:0a:d7:e7:35:0d:
         e5:2f:54:da:af:d6:5a:76:5c:95:b8:a8:59:9e:4e:f2:ea:1a:
         53:fa:2d:cc:e7:a4:42:d2:c8:87:df:26:f7:91:44:cc:ba:f1:
         c4:2b:dc:51:89:76:25:04:f7:b2:c3:08:93:4b:3e:57:ec:34:
         34:ae:6f:e7:d9:d7:38:5c:48:f4:cf:25:1f:1e:b5:8c:6b:df:
         52:20:d9:09:ef:88:97:29:8c:98:c3:b4:3c:a6:52:0c:57:54:
         1f:97:c2:b5:f8:b1:0c:ac:6c:bf:e6:49:29:23:cb:63:89:4c:
         70:e0:6b:46:51:92:0c:c4:4e:de:06:18:e6:99:3c:c7:96:c3:
         66:b3:3e:94:64:6a:d1:72:4d:f7:aa:07:3e:67:7d:e2:28:d4:
         9e:cd:7a:7c:7e:62:2b:fc:70:0d:ed:57:af:15:2b:b5:59:c6:
         53:cc:8d:89:f4:db:1c:66:7b:0f:2e:eb:14:dd:66:f1:14:68:
         1a:02:93:4e:19:50:a8:8a:a8:41:35:5c:f3:03:8a:d7:10:84:
         f0:e9:60:b2:b9:6a:b7:5e:6f:77:59:a9:ed:07:0f:ac:c4:39:
         1b:75:c4:1c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org