Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/LD383KCyIOvbF8IY8aw4wgfyh2k.roa
File:                     LD383KCyIOvbF8IY8aw4wgfyh2k.roa (raw, json)
Hash identifier:          o+o6KtI3YtCR/6wOclz1sMy6pfsfJlnbbsTT0eSsgvI=
Subject key identifier:   2C:3D:FC:DC:A0:B2:20:EB:DB:17:C2:18:F1:AC:38:C2:07:F2:87:69
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       7D
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LD383KCyIOvbF8IY8aw4wgfyh2k.roa
Signing time:             Fri 08 Dec 2023 12:20:25 +0000
ROA not before:           Fri 08 Dec 2023 12:20:25 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7521
IP address blocks:        113.192.20.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:34:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 125 (0x7d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Dec  8 12:20:25 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=2C3DFCDCA0B220EBDB17C218F1AC38C207F28769
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:67:bf:7f:99:1b:f9:5a:78:94:79:6f:83:cf:
                    0c:84:11:74:39:43:31:3f:3f:9e:86:cb:26:77:19:
                    8e:35:a2:31:f4:20:2b:6e:c0:f3:df:7b:19:64:93:
                    25:45:4b:a7:7a:d1:a6:9b:3b:dd:ea:cf:d3:53:99:
                    21:f2:85:75:ff:68:0a:b4:0e:87:05:a2:b6:54:27:
                    36:f6:02:7e:32:0c:38:bc:c4:4f:76:53:ed:d3:f6:
                    8a:b5:ca:cb:ca:1c:d6:82:91:b1:a0:e9:f9:f9:8f:
                    99:40:17:06:2e:d1:c3:c0:d1:a2:30:9d:04:e0:3e:
                    fa:39:16:a9:47:c9:c3:63:57:3e:51:62:5a:61:9d:
                    ce:3b:ba:b4:08:7b:06:87:16:b0:28:c7:80:50:e7:
                    20:bf:04:bb:42:95:0e:28:17:c8:7e:69:1a:ba:14:
                    98:8b:5a:9b:fb:ea:96:2e:d2:59:99:6c:e1:d4:72:
                    20:49:88:3c:07:82:f2:08:74:3c:33:ef:54:0c:cb:
                    72:a9:60:2e:8f:fd:51:70:99:2c:b6:f2:46:fd:95:
                    f5:ec:c7:3e:a8:b5:ca:8e:c6:20:cc:0d:ce:26:f6:
                    f4:3e:74:d9:95:6c:85:b3:7d:95:3d:5a:4e:8c:f8:
                    16:fc:3d:7a:f5:65:91:c3:e8:2d:c3:f5:cb:c7:d6:
                    28:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:3D:FC:DC:A0:B2:20:EB:DB:17:C2:18:F1:AC:38:C2:07:F2:87:69
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LD383KCyIOvbF8IY8aw4wgfyh2k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/23

    Signature Algorithm: sha256WithRSAEncryption
         93:6d:80:64:87:52:e6:15:3d:ae:be:d4:8b:85:c6:85:7e:d7:
         aa:1b:f6:a3:04:95:c0:28:22:59:f4:97:25:ed:fa:c3:93:32:
         3e:03:66:1d:62:01:91:47:43:31:61:b4:53:83:d3:9b:f0:ed:
         83:63:23:ba:02:42:0d:e1:7d:e3:d1:6c:f5:3f:58:a7:3b:25:
         8b:0c:d4:d7:72:be:b3:80:05:ae:2a:b1:f8:a7:e6:b5:14:3a:
         90:dd:df:98:6e:46:33:eb:4c:40:8f:de:e1:8d:59:6e:51:0f:
         ff:32:7c:81:d3:36:a7:09:ce:f1:33:8c:59:fb:b4:36:7f:69:
         f2:8c:a1:fd:59:8b:90:71:ca:50:39:66:28:ac:f4:2a:1f:cd:
         12:d3:98:06:59:48:b4:c6:84:ee:fd:41:c4:5a:bf:39:fa:a9:
         a6:53:2e:80:de:fa:ab:93:81:41:3e:cc:ba:7a:70:0c:4c:97:
         b8:9c:a1:a4:e9:d8:29:b4:cd:10:93:d0:8e:3e:97:3c:52:08:
         ca:24:b6:7e:57:ae:ed:62:e6:8f:d5:f2:dc:99:c8:39:cf:18:
         93:3a:a1:83:ec:18:cb:5d:ea:92:14:ac:b2:a8:11:1d:28:e6:
         42:b6:4e:41:af:d0:f8:fc:d1:52:1c:1d:bc:6a:70:63:c5:ab:
         ab:e8:28:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:58:55 2024 by rpki-client on console-fra.rpki-client.org