Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/A7B9GYT9llhaJvtazQCQ-f0Td-k.roa
File:                     A7B9GYT9llhaJvtazQCQ-f0Td-k.roa (raw, json)
Hash identifier:          x3pPf7IINIkarBXrQ/tdmLsy/uNDLjl257s0uFQQubI=
Subject key identifier:   03:B0:7D:19:84:FD:96:58:5A:26:FB:5A:CD:00:90:F9:FD:13:77:E9
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       87
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/A7B9GYT9llhaJvtazQCQ-f0Td-k.roa
Signing time:             Tue 30 Apr 2024 01:28:26 +0000
ROA not before:           Tue 30 Apr 2024 01:28:26 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7521
IP address blocks:        210.173.178.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Apr 30 01:28:26 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=03B07D1984FD96585A26FB5ACD0090F9FD1377E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:d5:55:f2:22:a4:81:9f:a4:cd:d6:ef:50:2b:
                    61:c3:82:07:5b:ea:ad:fc:5b:28:34:3f:e8:97:dc:
                    28:c5:a7:10:ad:f4:d7:a4:28:51:1b:16:e0:7f:7c:
                    9c:4e:1a:7f:04:3b:f6:41:74:b8:9e:e3:43:e3:e3:
                    03:b3:b1:80:31:93:bc:3a:0f:db:33:f2:c3:56:d5:
                    41:d3:ec:58:c6:cf:3b:18:db:a2:50:15:00:dc:9c:
                    2a:25:db:08:dd:03:fc:03:c2:0c:b9:25:cf:6c:21:
                    92:a0:e7:ab:c0:24:19:e7:79:c8:cb:af:a1:ff:9f:
                    bf:2d:c0:fd:f3:8b:6c:f3:db:14:3e:0b:75:79:3e:
                    d3:2a:31:7b:d5:01:c2:de:52:bc:09:87:9f:77:54:
                    81:88:3d:26:da:82:4c:80:15:7f:5d:ec:36:98:95:
                    c3:08:be:87:e2:f1:dc:31:d5:00:de:d7:86:95:8e:
                    c7:cc:93:9b:a6:61:ad:56:0b:a2:c7:a1:1e:4a:84:
                    fd:da:f1:d7:2d:d9:49:e2:b7:5e:02:30:f2:f0:b5:
                    c5:6e:26:0a:1b:d7:d0:4c:f5:4c:e3:68:70:79:c2:
                    20:58:85:c5:39:95:2b:74:50:f3:19:bb:8e:77:5f:
                    9d:40:0e:92:ce:f3:e1:11:cb:82:70:f5:f2:27:f5:
                    8b:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:B0:7D:19:84:FD:96:58:5A:26:FB:5A:CD:00:90:F9:FD:13:77:E9
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/A7B9GYT9llhaJvtazQCQ-f0Td-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.178.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0b:22:ef:51:fd:08:ea:17:5f:51:95:50:0f:fd:5e:76:7b:7a:
         8e:59:c7:6b:ee:c4:9f:e6:15:f2:35:e1:76:97:81:33:ec:7f:
         c5:53:36:83:ba:1a:5f:30:eb:6b:01:bd:2d:37:95:5a:b3:bb:
         1e:71:48:8c:af:59:27:bb:e0:f0:99:ba:40:32:13:b7:95:14:
         e7:67:bd:01:d7:38:42:a9:11:7b:a0:55:3b:a5:68:55:d7:0a:
         0b:60:65:9c:a0:c5:fd:fe:31:27:02:ea:1c:2d:40:54:30:53:
         6f:dc:85:06:d5:f6:6f:cb:1d:0e:f9:20:54:28:78:dd:bc:71:
         3b:62:fc:61:d0:c4:f5:ff:4e:2e:10:99:99:eb:21:7f:cc:c6:
         62:32:63:ee:1f:be:c5:68:b6:56:cc:50:6e:2e:8f:ca:1f:38:
         fe:57:6f:7c:3d:56:e0:09:d8:10:ae:c0:80:c3:c2:8a:1d:28:
         26:d9:c5:47:b6:01:3b:f9:f4:03:96:7d:46:28:47:49:f0:12:
         0f:0d:41:37:bd:99:95:9b:e4:ae:52:6d:34:00:46:fd:1f:57:
         ea:26:ae:ed:b0:41:90:5e:c6:72:d2:43:d3:50:c1:73:12:09:
         46:81:d9:03:ae:13:9f:3c:b1:04:c3:43:a1:a4:71:d3:7c:bb:
         de:ca:30:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org