Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/RlKOeCNukiS0DbSATf-3osUcNKM.roa
File:                     RlKOeCNukiS0DbSATf-3osUcNKM.roa (raw, json)
Hash identifier:          UBq69U1ZLj/B0HSRjwzM0O7O1+a4x4Iv/JD6dGqy+ng=
Subject key identifier:   46:52:8E:78:23:6E:92:24:B4:0D:B4:80:4D:FF:B7:A2:C5:1C:34:A3
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       40
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/RlKOeCNukiS0DbSATf-3osUcNKM.roa
Signing time:             Tue 01 Aug 2023 01:29:02 +0000
ROA not before:           Tue 01 Aug 2023 01:29:02 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     24296
IP address blocks:        210.171.32.0/19 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 64 (0x40)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Aug  1 01:29:02 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=46528E78236E9224B40DB4804DFFB7A2C51C34A3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:10:b0:52:83:f2:f6:4d:dc:96:13:d6:33:ac:
                    d3:80:62:a1:41:bb:ed:7b:62:8e:cd:29:44:72:b5:
                    0b:af:f7:ef:61:c3:6f:6f:a7:98:79:6a:53:f7:8c:
                    8b:91:af:d6:42:bf:e3:57:fc:2d:9a:13:3f:8e:5b:
                    f6:d9:07:1b:f5:a4:ab:0c:55:a4:5c:de:f2:42:db:
                    cb:93:c8:74:29:d7:e7:25:b3:d1:a7:5f:1c:2a:9c:
                    35:92:de:d9:58:27:41:df:ca:5c:d8:0d:20:71:cf:
                    2f:74:e2:b4:3e:23:1c:2c:79:1a:ec:89:62:b4:84:
                    35:64:74:29:0d:4a:18:d2:27:fa:e6:0c:b6:4f:48:
                    77:f6:6d:41:fc:26:0f:f5:f4:8c:54:c5:87:b3:49:
                    35:85:e0:18:0a:2b:5e:48:0c:c3:e3:2f:02:5e:c6:
                    bd:4f:0b:6c:c0:46:d3:98:c9:73:8b:5c:a7:eb:95:
                    0e:07:3e:1e:8d:3d:e3:8b:62:56:90:5b:b3:77:5a:
                    b0:4f:29:e8:76:bd:d5:b3:4a:66:8d:2c:bf:25:74:
                    a2:c2:d4:3b:18:10:e9:01:20:12:97:ad:b8:03:e3:
                    e6:8e:49:72:47:40:e4:42:a2:cf:24:5c:23:df:3f:
                    e9:3d:5f:03:22:8a:bc:43:fb:c3:14:ca:2d:34:1c:
                    e5:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:52:8E:78:23:6E:92:24:B4:0D:B4:80:4D:FF:B7:A2:C5:1C:34:A3
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/RlKOeCNukiS0DbSATf-3osUcNKM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.171.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7d:11:50:d3:5d:fc:87:71:16:c2:bf:06:25:f9:ec:dc:e2:eb:
         44:f1:0c:e5:57:0c:da:6b:d2:c4:ed:c8:65:87:29:f1:b7:19:
         4d:e9:b6:dd:e8:f7:80:db:e5:46:15:93:38:58:cd:0a:07:f5:
         c9:95:d8:e3:3c:a3:65:ce:67:91:e8:fa:6d:f1:4e:c8:c3:1b:
         a9:9f:1c:9c:c3:e0:42:53:42:9b:36:c6:f4:38:eb:fc:2f:ad:
         19:d3:46:d0:df:b3:dd:eb:06:95:55:46:fe:2d:b4:77:94:b6:
         97:a1:35:6a:60:2a:05:f6:12:b8:90:b8:7f:1e:95:b0:68:10:
         fc:66:30:54:49:ec:92:11:4d:d1:d5:85:bd:c9:1e:7a:41:43:
         e6:77:ec:5f:ab:9a:65:75:21:04:df:1f:47:34:f6:d6:d3:23:
         7c:5f:01:46:b1:81:30:c0:23:ba:c2:5a:ef:03:f3:72:5f:5b:
         43:c1:23:46:3d:f3:53:48:76:ee:3e:1a:91:22:d5:7b:fc:2b:
         40:e5:31:aa:02:bf:c5:9a:a9:25:73:44:cb:77:95:b5:3a:dc:
         dc:f7:a1:ed:83:49:58:e2:79:2b:55:26:17:06:5f:ea:e1:0e:
         5e:a7:f4:59:87:16:57:c5:7b:00:f9:8c:7a:0a:a3:91:4c:6c:
         7f:d1:a4:04
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:39 2024 by rpki-client on console-ams.rpki-client.org