Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/208/pgkfIIlFvIBew0fqP7nDGlfbSdc.roa
File:                     pgkfIIlFvIBew0fqP7nDGlfbSdc.roa (raw, json)
Hash identifier:          mTwj1lSpLwjqFbDjYExa8nAXuFtIUcZlz/Okf4jlr+Y=
Subject key identifier:   A6:09:1F:20:89:45:BC:80:5E:C3:47:EA:3F:B9:C3:1A:57:DB:49:D7
Certificate issuer:       /CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
Certificate serial:       05
Authority key identifier: 7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/pgkfIIlFvIBew0fqP7nDGlfbSdc.roa
Signing time:             Mon 07 Aug 2023 10:59:36 +0000
ROA not before:           Mon 07 Aug 2023 10:59:36 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7682
IP address blocks:        210.191.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A7D206E5113C27285FDAA85362B4F6F9BD8D70D
        Validity
            Not Before: Aug  7 10:59:36 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=A6091F208945BC805EC347EA3FB9C31A57DB49D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:37:e6:61:81:24:d8:97:51:3b:de:6b:ad:74:
                    da:a1:a7:10:58:f1:ab:45:bd:f7:9c:ee:aa:fb:06:
                    b1:b4:cf:dd:89:dc:7b:e8:b4:5e:8d:4a:69:97:fc:
                    c5:d1:98:1f:ff:a2:a8:f2:f0:3f:5e:5f:d4:f3:8d:
                    c6:22:63:44:95:67:1d:95:80:ee:90:04:e9:68:55:
                    75:91:54:c6:af:95:d3:0f:e1:0e:d3:76:9f:54:ed:
                    86:a2:5a:b2:f6:59:ae:a1:30:16:c2:24:fc:e6:ed:
                    14:4c:dd:89:0a:56:3d:06:6b:11:c2:47:74:44:b8:
                    48:02:34:a1:ab:c4:af:d5:c3:ea:24:af:49:3f:e4:
                    76:01:d3:c9:60:c4:31:26:b2:98:79:dd:69:7b:ae:
                    45:cb:de:f6:f8:99:62:ef:76:95:80:9a:6c:4a:3b:
                    37:a4:fa:04:12:2d:2a:f6:82:83:b8:64:d2:cf:68:
                    b0:bd:5e:bb:f7:1c:87:64:97:21:1c:b3:49:db:8a:
                    f0:be:df:d5:17:0c:84:d3:33:b3:5e:7b:3b:37:6a:
                    f1:59:91:99:a5:d0:bc:ee:dc:8d:f3:e2:19:f7:38:
                    db:60:96:da:69:f3:e1:52:46:78:c3:5b:d4:3b:66:
                    ca:c4:6f:59:29:53:ec:4f:60:7a:b3:63:21:27:39:
                    42:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:09:1F:20:89:45:BC:80:5E:C3:47:EA:3F:B9:C3:1A:57:DB:49:D7
            X509v3 Authority Key Identifier:
                keyid:7A:7D:20:6E:51:13:C2:72:85:FD:AA:85:36:2B:4F:6F:9B:D8:D7:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/en0gblETwnKF_aqFNitPb5vY1w0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/en0gblETwnKF_aqFNitPb5vY1w0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/208/pgkfIIlFvIBew0fqP7nDGlfbSdc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.191.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         ae:79:fb:60:98:75:90:b3:9f:bf:6b:0c:89:65:7f:53:9a:67:
         c4:94:de:2f:fd:2f:6f:2f:0f:73:95:92:e9:51:6b:23:5e:be:
         ed:f1:a0:b0:6a:7f:bd:d6:81:57:bc:1e:ef:80:eb:ad:dd:12:
         a8:97:84:1a:07:b4:7b:69:19:51:7d:4b:c6:fc:9a:86:51:3d:
         5a:26:57:c8:93:7a:d8:8d:1c:b6:dd:5f:ab:07:5b:92:33:7b:
         a5:ba:12:b0:9d:8f:0e:39:a5:7f:01:cd:32:a4:66:d1:b8:a9:
         49:18:86:cc:63:1a:dd:f2:8b:82:07:bb:a3:b0:6b:de:a5:aa:
         fe:3a:0f:b0:ca:82:9b:0e:ae:54:fa:45:8e:e2:3b:af:b8:dc:
         7f:d9:09:4b:07:f5:94:d6:82:b1:42:10:54:0f:90:bd:22:cd:
         9b:07:55:5d:9a:4c:85:ae:76:8c:d3:0d:ef:e4:a3:1b:af:e0:
         aa:d4:fa:bd:6a:97:e5:66:3e:1c:79:32:b2:8d:f3:78:4e:e7:
         3f:4c:7a:88:d6:dc:8f:cc:2d:9e:fb:81:d8:7a:51:71:57:0b:
         6d:3b:ee:fb:cf:a4:19:cb:5c:2d:e3:ea:d4:b2:44:f0:69:16:
         97:0b:16:34:79:14:17:36:9b:22:3a:d6:cd:d9:b9:62:9a:46:
         f5:f5:93:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org