Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
File:                     G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa (raw, json)
Hash identifier:          0Nn9wt3VBwVu2pPxmNMl/84RAcSNzMPlFJPpaoTeAEw=
Subject key identifier:   1B:E6:46:83:CB:77:78:5C:91:CD:16:E8:B7:83:5E:43:D2:FB:5B:5A
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       04
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
Signing time:             Mon 07 Aug 2023 10:51:40 +0000
ROA not before:           Mon 07 Aug 2023 10:51:40 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7682
IP address blocks:        202.89.112.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Aug  7 10:51:40 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=1BE64683CB77785C91CD16E8B7835E43D2FB5B5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0c:39:04:93:00:89:d8:58:e2:a1:82:83:ea:
                    33:46:1a:d6:4f:40:90:95:67:f3:7f:42:c0:82:23:
                    ce:81:e0:fe:ed:4e:33:ed:bd:05:d6:ea:3a:eb:5f:
                    4a:94:38:05:15:8c:b3:14:5a:49:57:88:17:62:dd:
                    56:8c:6f:b3:00:21:03:d2:67:ea:f8:ef:15:d3:c6:
                    47:2a:72:9a:9d:c5:d8:3e:1f:39:90:3b:ae:09:a2:
                    f3:0e:40:60:e5:e8:66:c8:08:2b:0e:e4:d7:42:a6:
                    82:30:8f:27:ac:02:7d:13:fe:0e:5f:ff:18:5f:3f:
                    09:67:0c:89:07:5e:fa:75:1e:4b:14:09:17:a4:54:
                    d9:dd:55:f2:24:b8:73:ad:5b:a6:93:68:eb:23:32:
                    fa:f8:84:8e:8b:00:92:e7:22:c3:72:53:4f:47:88:
                    04:61:09:6e:f1:59:10:56:ee:a5:89:12:c4:c2:f8:
                    28:5a:04:af:a2:90:7e:7e:55:52:d5:a1:75:87:4c:
                    0b:f7:8e:2a:d9:0c:b9:f0:f8:46:ca:64:34:cf:75:
                    4b:40:ee:be:45:4f:cd:71:98:1b:72:1d:01:c6:96:
                    8c:0a:a1:3e:73:5a:b5:04:6b:a6:0d:73:68:6e:55:
                    7d:0e:17:70:75:82:ef:8f:f4:2c:42:cc:36:ef:b3:
                    48:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:E6:46:83:CB:77:78:5C:91:CD:16:E8:B7:83:5E:43:D2:FB:5B:5A
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/G-ZGg8t3eFyRzRbot4NeQ9L7W1o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.89.112.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6e:bb:97:23:c9:a5:08:56:d8:c4:a7:40:a1:82:05:37:36:f6:
         ee:63:33:6f:d5:e3:ac:2f:91:8b:2a:9f:e0:1b:fb:a5:90:e8:
         08:82:73:47:2e:df:70:24:60:ae:c2:da:22:c1:5c:38:71:9a:
         b8:ba:e6:4a:62:70:fb:80:95:71:42:01:cc:03:cb:d4:12:61:
         a1:79:64:23:cd:91:8e:4a:a0:58:cf:4d:23:e1:9a:fd:cb:09:
         6a:12:82:2d:10:44:77:16:9f:0e:a5:2c:49:29:76:ab:fa:57:
         27:76:af:0d:7f:93:37:33:bc:7b:63:98:86:7a:db:7e:5c:ee:
         6d:e1:35:df:e2:dc:53:e0:3a:f6:7d:5d:39:e5:52:4c:1d:f7:
         64:c4:66:b3:60:95:96:61:f1:86:6f:b6:07:4e:df:ec:d9:9d:
         46:c2:5d:0e:68:2c:ac:c2:5e:eb:7b:50:3f:15:1e:ba:f5:fe:
         6f:c2:28:04:f0:ef:a4:02:c7:22:e4:66:f4:05:44:05:ee:f4:
         97:29:c7:38:2d:3b:cc:99:21:2f:2a:0d:54:60:47:44:77:24:
         de:f5:08:6a:90:c7:10:1d:cd:40:c6:8a:0e:db:16:99:5c:66:
         b2:36:f2:95:87:46:64:8b:26:15:5b:5a:da:0f:cc:0f:be:80:
         67:7f:41:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:14 2024 by rpki-client on console-fra.rpki-client.org