Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20255/PFjStXjxQt6Q9iIjdUKIGUASIY0.roa
File:                     PFjStXjxQt6Q9iIjdUKIGUASIY0.roa (raw, json)
Hash identifier:          w9ATA4UEM1s5HhSzQWK+VLQQbfEzNzqkivx7TWbLMvw=
Subject key identifier:   3C:58:D2:B5:78:F1:42:DE:90:F6:22:23:75:42:88:19:40:12:21:8D
Certificate issuer:       /CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74
Certificate serial:       02
Authority key identifier: 03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/PFjStXjxQt6Q9iIjdUKIGUASIY0.roa
Signing time:             Thu 16 May 2024 02:28:36 +0000
ROA not before:           Thu 16 May 2024 02:28:36 +0000
ROA not after:            Fri 16 May 2025 02:15:54 +0000
asID:                     151385
IP address blocks:        157.66.22.0/23 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=03706FA39B8E454EBA1DC3E73FEDC88A1E40AF74
        Validity
            Not Before: May 16 02:28:36 2024 GMT
            Not After : May 16 02:15:54 2025 GMT
        Subject: CN=3C58D2B578F142DE90F62223754288194012218D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ca:c8:b0:c7:2b:9b:b7:56:1e:7f:46:5d:8e:
                    9d:07:1c:20:8e:4d:0d:8a:29:4f:fb:0d:f2:02:e7:
                    04:82:e1:6e:74:47:f0:e3:ed:15:82:be:a5:c1:1c:
                    61:17:f2:e5:8c:72:f2:2a:71:db:85:f6:80:8b:32:
                    23:99:e5:80:37:55:7d:6d:90:65:ce:48:ab:1e:91:
                    25:38:da:65:14:e9:5a:24:e2:2b:f4:e0:bf:2c:4f:
                    87:7b:33:48:5e:87:3b:f1:65:7e:17:30:44:f2:21:
                    e9:96:76:b0:1c:7d:ce:85:bc:4f:c4:a8:76:1c:f4:
                    6a:47:a3:7a:d5:43:27:a9:de:00:58:21:12:f5:94:
                    60:83:2b:4c:5f:bd:d1:81:99:a4:5d:ac:54:ea:5e:
                    b6:e7:b6:9e:97:c7:16:51:94:86:0f:b9:df:d7:db:
                    d7:81:b3:10:e6:61:8c:c9:74:72:9d:18:e3:e6:0f:
                    3e:ff:68:8c:b7:0c:42:18:e9:cc:a0:9d:80:f1:b8:
                    06:c7:0f:e6:61:55:11:7f:6c:30:10:99:10:3f:1c:
                    8e:16:06:9c:ee:24:e3:bb:15:96:8a:0b:2b:9e:a0:
                    b8:94:a2:12:9b:6d:b1:40:33:39:3a:0a:ff:36:6a:
                    d1:4a:8a:a5:3a:56:1f:e8:de:73:29:84:3e:fc:1b:
                    c6:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:58:D2:B5:78:F1:42:DE:90:F6:22:23:75:42:88:19:40:12:21:8D
            X509v3 Authority Key Identifier:
                keyid:03:70:6F:A3:9B:8E:45:4E:BA:1D:C3:E7:3F:ED:C8:8A:1E:40:AF:74

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/A3Bvo5uORU66HcPnP-3Iih5Ar3Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20255/PFjStXjxQt6Q9iIjdUKIGUASIY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.66.22.0/23

    Signature Algorithm: sha256WithRSAEncryption
         69:0f:e7:d5:b2:4b:c7:6b:ee:f4:19:c1:1c:48:ff:42:24:7b:
         c2:3b:5d:43:74:19:27:84:cf:a4:96:69:82:9e:6c:a1:49:2a:
         4f:89:9f:7f:d7:7b:71:38:9a:20:e6:4f:f8:73:27:54:54:b9:
         3c:c7:6a:56:3d:e9:66:fc:a8:a3:10:d0:27:94:8e:02:9d:16:
         97:2e:1d:3c:eb:7e:f9:18:b2:5c:5b:5c:87:7f:0f:a8:33:34:
         6b:2f:cc:78:b6:c7:09:3f:0d:b8:6e:2b:d5:fb:7e:d0:a1:b4:
         b5:6a:e6:2f:2d:48:c5:24:cc:d8:ce:ce:c6:c9:45:ac:0f:19:
         a9:2a:48:36:85:9c:e5:08:3b:b8:3a:dc:e9:75:59:69:3c:22:
         b2:6d:fa:f0:48:53:5b:72:7d:cc:7c:f5:49:5a:b4:79:44:54:
         b4:39:05:6d:85:8f:17:91:89:75:db:ea:df:0a:bb:b6:cd:21:
         90:2f:45:44:3a:0e:b6:20:74:1c:3a:87:b6:21:cb:b8:7e:0e:
         3b:e8:53:23:3b:6c:79:13:21:da:ae:eb:6a:7a:0a:c3:f7:3a:
         3d:93:c8:a2:3a:44:5a:90:55:ab:e6:74:d3:5b:da:44:7b:0b:
         69:68:18:d7:42:f1:ff:24:f3:af:aa:21:77:39:b2:6b:96:95:
         8d:d7:a2:41
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:29 2024 by rpki-client on console-ams.rpki-client.org