Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/CPC8z8FjVclofVIqdwC0uO9vZo0.roa
File:                     CPC8z8FjVclofVIqdwC0uO9vZo0.roa (raw, json)
Hash identifier:          dMeTkfiWTlaFFtdKo1zyOwakrE5tjH8iLQot7PWpx/c=
Subject key identifier:   08:F0:BC:CF:C1:63:55:C9:68:7D:52:2A:77:00:B4:B8:EF:6F:66:8D
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       06
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/CPC8z8FjVclofVIqdwC0uO9vZo0.roa
Signing time:             Mon 07 Aug 2023 11:07:38 +0000
ROA not before:           Mon 07 Aug 2023 11:07:38 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7682
IP address blocks:        210.229.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Aug  7 11:07:38 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=08F0BCCFC16355C9687D522A7700B4B8EF6F668D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:e9:9b:a5:7e:ce:62:04:01:e7:69:e7:a6:32:
                    22:66:99:74:e9:49:bd:df:8c:03:16:ce:53:79:b4:
                    85:fb:2b:91:99:5b:2b:5e:53:00:65:b8:c9:31:5b:
                    d5:da:1e:d8:64:96:4b:df:17:da:54:8d:65:39:a8:
                    9d:64:79:0d:4f:49:50:0b:ab:81:6b:34:8c:86:32:
                    5c:f2:f9:78:60:85:03:54:6d:2c:85:16:26:1e:6f:
                    52:82:32:ac:74:d1:5f:19:ee:1e:58:e0:07:25:f7:
                    4d:4f:57:2f:9b:6c:07:98:38:54:50:d0:56:1e:5d:
                    5b:9c:3d:25:6c:e5:8f:1b:3c:99:ca:95:70:cf:0c:
                    f5:7d:8f:6a:6e:d6:8c:d7:9b:75:6a:53:40:3d:4e:
                    2b:52:99:66:44:a2:5f:6d:72:ec:c0:27:44:bc:af:
                    ff:02:13:a0:8b:92:b4:68:51:58:bf:2f:a0:9a:e4:
                    39:c2:5f:9e:ad:fe:ba:f2:da:aa:73:57:9d:d0:e4:
                    85:b5:17:45:fe:43:67:20:7b:01:24:77:6f:91:fd:
                    69:50:1e:3f:95:7e:6b:ae:30:86:02:56:b3:69:a7:
                    49:0a:85:76:60:8c:2a:de:5f:0e:03:01:f0:2f:61:
                    f8:9c:b2:79:80:48:e8:52:c3:f5:08:ac:c3:b5:3b:
                    8e:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:F0:BC:CF:C1:63:55:C9:68:7D:52:2A:77:00:B4:B8:EF:6F:66:8D
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/CPC8z8FjVclofVIqdwC0uO9vZo0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.229.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2d:9b:3b:00:cf:55:b7:84:d4:fb:da:4e:52:e2:fd:7d:83:aa:
         5f:9c:2a:72:e1:fe:dd:3e:00:b2:f6:f1:e3:f4:41:35:f2:ea:
         55:16:98:6b:8d:19:66:ae:d3:f0:b8:fa:58:32:92:58:f2:a0:
         9e:e9:36:fe:de:2d:51:0b:46:61:b2:4c:29:4c:68:f6:54:a4:
         d1:90:9f:79:71:08:2a:2c:62:20:8f:00:09:d6:0a:7c:b6:d9:
         1b:1d:e1:96:9f:72:49:47:bd:01:7f:15:87:b5:70:14:59:82:
         d2:b1:dc:04:cd:f7:62:51:96:d5:f0:4c:dc:7e:9c:d0:1a:29:
         e3:96:76:6e:54:26:50:f0:f0:22:4b:10:37:3c:c5:a5:9b:8e:
         1a:c6:65:63:3f:4e:de:af:ed:7a:5b:47:2a:92:05:49:8f:f8:
         67:4d:09:24:13:5e:62:21:a4:e0:95:4d:d3:37:a1:5b:9c:59:
         c7:ef:fd:c0:70:a3:bc:1c:f8:78:5c:01:96:70:90:af:0a:2b:
         5a:6c:00:95:39:bc:4e:7b:80:90:9b:e0:84:62:41:c8:9c:3b:
         48:75:f1:7b:a1:0a:12:fd:c5:5e:70:9d:b2:12:d7:6b:f0:2d:
         c8:6b:61:1d:38:43:8c:8a:40:2d:63:80:fe:5f:bb:28:94:de:
         b4:23:b0:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org