Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/B0BZsNE30lclPPe9u3J0BA8PDC4.roa
File:                     B0BZsNE30lclPPe9u3J0BA8PDC4.roa (raw, json)
Hash identifier:          BSOOd4JenGKv+jUKAHrWTC8KCgtYWyRGSTJ3VBPSgrg=
Subject key identifier:   07:40:59:B0:D1:37:D2:57:25:3C:F7:BD:BB:72:74:04:0F:0F:0C:2E
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       54
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/B0BZsNE30lclPPe9u3J0BA8PDC4.roa
Signing time:             Sun 30 Jun 2024 01:31:49 +0000
ROA not before:           Sun 30 Jun 2024 01:31:49 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     24296
IP address blocks:        210.252.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Jun 30 01:31:49 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=074059B0D137D257253CF7BDBB7274040F0F0C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:c1:6a:f2:b7:63:0a:c0:1c:a4:0a:e2:72:cf:
                    69:33:82:07:ec:d4:e0:e4:42:61:02:ee:50:1d:55:
                    9a:96:04:f4:e9:a3:fe:b6:f8:27:6b:10:a9:f7:e1:
                    0a:c8:92:86:61:4a:cc:89:5f:e1:49:98:e8:8b:e3:
                    5c:d3:de:b5:94:f0:5f:af:46:f9:c4:46:bb:65:e8:
                    d3:d5:22:0c:ae:79:c2:e0:d6:e4:74:fd:50:e8:07:
                    ec:01:7e:c3:9c:f4:07:d0:ae:d4:34:80:4f:51:50:
                    ee:02:02:7d:40:a3:02:df:39:f3:a5:ef:4d:4a:17:
                    eb:b5:68:0b:1a:8b:23:71:93:fd:7b:5a:9e:1f:b3:
                    69:ae:3c:3a:d5:e6:80:10:ab:7e:11:2b:ee:fd:32:
                    eb:eb:ef:ef:f2:10:b2:d4:34:b0:e7:75:00:83:a9:
                    bb:29:34:1a:43:10:60:90:51:d4:83:b9:12:1d:6e:
                    13:f9:37:2f:d0:eb:96:ec:5f:55:14:b7:c0:71:44:
                    bf:93:ec:a8:db:95:a0:38:ec:e3:7b:ba:38:98:12:
                    a5:1d:d6:5c:43:46:8c:d6:5f:60:d2:d4:a2:a8:e7:
                    75:07:8e:e6:93:11:3a:06:ae:f1:a7:fb:61:08:a9:
                    c3:08:8a:75:22:df:87:60:8b:44:5c:bb:99:74:05:
                    3b:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:40:59:B0:D1:37:D2:57:25:3C:F7:BD:BB:72:74:04:0F:0F:0C:2E
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/B0BZsNE30lclPPe9u3J0BA8PDC4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:e9:9a:96:39:7a:5f:ec:b3:18:c0:8c:c9:c0:37:66:c9:c6:
         f0:ef:63:29:9d:36:3f:b3:eb:e4:20:04:58:bf:cc:75:0f:95:
         85:16:eb:70:62:f9:73:75:c5:a1:6b:39:5b:b5:e0:7d:d1:3c:
         72:c5:c6:3f:e3:3f:5c:f4:0c:ac:f3:18:4f:cd:90:48:0f:4e:
         34:2b:eb:ad:14:06:83:3e:c6:67:87:09:fd:1e:02:9d:2a:68:
         69:d7:ca:08:a1:7b:ac:35:0d:02:a1:a8:a2:cd:17:c8:34:e8:
         14:1e:bb:9a:6d:b3:b8:ec:5a:28:fd:6f:25:3d:3d:38:0b:56:
         4d:83:4b:3b:c7:cb:59:4f:76:ca:f6:8d:c0:1d:4b:94:8e:09:
         ce:23:f2:d3:74:11:0f:e3:6c:96:7b:4f:14:4e:05:8c:42:50:
         27:3c:36:18:13:ab:b5:92:29:6c:e1:ab:67:a9:79:a2:4e:9b:
         54:d6:c8:20:c8:ee:6f:81:c2:13:bc:5c:5e:73:1d:6a:e6:b6:
         95:4f:25:75:48:f6:26:d5:c9:b6:38:83:d1:cd:5f:30:8b:b2:
         a4:95:26:aa:90:06:bc:3a:97:37:7c:45:0a:ca:53:ff:bc:92:
         1d:42:5f:88:8d:ab:ec:db:9d:1a:35:74:cc:03:1f:c4:76:b8:
         3d:f0:ef:dd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:11 2024 by rpki-client on console-fra.rpki-client.org