Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
File:                     HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa (raw, json)
Hash identifier:          SeIG1e3Mm1/VYbSkW2wl5ccNtje/TqrCjdtf7Er5GgM=
Subject key identifier:   1C:BB:4C:61:7F:A2:BB:2F:11:0F:F4:B9:3F:F5:D6:64:99:D8:4A:AB
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       73
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
Signing time:             Fri 01 Sep 2023 01:28:12 +0000
ROA not before:           Fri 01 Sep 2023 01:28:12 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     38644
IP address blocks:        210.173.190.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 01:59:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Sep  1 01:28:12 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=1CBB4C617FA2BB2F110FF4B93FF5D66499D84AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:c2:20:12:0d:cb:89:f0:c7:55:87:b4:5a:3b:
                    a8:7b:8a:f6:97:0b:81:9a:c3:0c:e5:76:05:3c:7b:
                    f6:51:3b:21:65:f6:2d:f7:e8:b1:3b:6d:26:d8:96:
                    2f:34:3d:7c:d8:01:81:d3:9a:ac:61:dd:9e:0c:80:
                    ec:a5:67:8a:66:3b:5f:b1:e1:c4:d9:ce:7a:24:3c:
                    3e:9f:ca:98:66:5a:9a:44:fb:7d:d3:f6:d1:fe:e2:
                    3e:39:84:a2:64:ba:5f:fe:08:d3:e8:ef:6c:db:2a:
                    d9:74:68:30:00:42:11:db:56:8b:d3:21:fa:74:fc:
                    25:11:3a:f6:d4:9d:51:d6:e1:7e:88:78:a9:05:79:
                    62:77:7a:b2:db:19:84:80:4d:ed:8c:59:e6:a0:24:
                    1b:29:d0:cd:76:55:cd:28:01:a7:40:bb:ea:c6:82:
                    4e:86:99:6b:6e:71:56:be:63:12:f0:ca:b2:6e:61:
                    32:f4:01:fd:b2:4d:05:6b:48:06:44:56:e3:db:0c:
                    33:4b:0a:c8:19:08:16:f9:9c:2d:9a:e1:62:5c:e7:
                    fe:ef:a6:fe:f1:a7:86:ce:bd:57:b5:10:20:53:ad:
                    cc:17:5c:6a:fa:55:59:81:9f:67:8a:18:63:ed:af:
                    81:0b:75:2a:fb:89:48:1f:48:ea:48:f2:27:db:d3:
                    34:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:BB:4C:61:7F:A2:BB:2F:11:0F:F4:B9:3F:F5:D6:64:99:D8:4A:AB
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/HLtMYX-iuy8RD_S5P_XWZJnYSqs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.173.190.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3f:6d:7c:fd:d5:eb:8b:d1:ca:b7:c6:05:04:b1:b3:4b:72:4c:
         dc:b8:0e:26:57:ff:a7:9c:bd:cf:d4:62:e4:21:b7:cc:94:5f:
         fa:1a:06:94:a1:37:85:b7:55:3a:36:70:78:60:23:3e:53:04:
         bb:58:19:71:27:f9:44:e2:22:29:3a:40:0f:60:83:05:9e:58:
         74:77:43:a4:9a:17:cc:95:c8:fc:ae:5d:2b:ec:1d:bb:52:60:
         1b:b8:f2:77:ad:2a:b5:0a:83:39:96:86:1c:2b:d3:59:f8:76:
         7c:19:ee:85:b3:01:9d:17:4f:c4:49:5f:de:2a:24:9c:e1:72:
         8c:2c:55:46:3e:4e:f3:6f:ce:4c:d9:a4:9d:9a:5a:a6:27:cf:
         eb:93:b7:fa:c6:37:65:c6:94:0b:61:90:99:9c:78:b7:ea:7c:
         29:2c:4b:7d:2a:9e:ae:36:f3:cf:fb:e0:e3:f2:ac:0f:4d:2a:
         44:84:d6:7a:91:cc:87:12:28:84:fa:f8:2c:e3:7c:79:a7:ef:
         fe:1b:90:1a:e7:9c:65:6a:18:ee:46:77:88:3e:a0:16:45:10:
         f1:90:5b:3a:ee:bb:39:9d:4a:97:36:70:40:68:c3:a9:c0:43:
         73:34:79:43:eb:b5:b5:69:4b:7d:e6:20:19:ba:8e:90:88:58:
         bb:41:b8:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 02:47:19 2024 by rpki-client on console-ams.rpki-client.org