Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/CyOPGtlZ7YBqLFmwQN0qlp60KaE.roa
File:                     CyOPGtlZ7YBqLFmwQN0qlp60KaE.roa (raw, json)
Hash identifier:          FAUS4x29fP0z9k6pdILK4nSIWNLFl3HzE4eGN7V/B7Y=
Subject key identifier:   0B:23:8F:1A:D9:59:ED:80:6A:2C:59:B0:40:DD:2A:96:9E:B4:29:A1
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       78
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/CyOPGtlZ7YBqLFmwQN0qlp60KaE.roa
Signing time:             Mon 01 Jan 2024 01:28:19 +0000
ROA not before:           Mon 01 Jan 2024 01:28:19 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        61.206.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 120 (0x78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:19 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=0B238F1AD959ED806A2C59B040DD2A969EB429A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:3c:34:25:87:bc:65:ce:a5:5c:fd:ff:fa:2c:
                    15:97:90:02:ab:74:89:a9:0b:e7:96:ad:e8:9f:35:
                    9c:2a:d7:08:dc:15:fa:80:04:33:d5:6b:77:d3:21:
                    d8:47:b6:c4:9b:6a:eb:51:8a:b3:f0:6a:f4:bc:e0:
                    43:17:49:69:83:3d:c3:30:c8:5e:49:75:80:fe:2a:
                    74:c0:e9:20:d7:45:e4:d3:41:2d:ed:51:9e:7f:39:
                    cd:df:21:6f:74:43:8a:94:6f:8b:b4:51:b9:2a:94:
                    91:f4:5c:47:b3:55:10:be:97:fa:53:ff:30:2f:26:
                    1b:85:c8:49:ce:f1:90:e8:6b:a5:73:c6:53:e0:ae:
                    a1:76:25:4b:11:11:4c:52:f2:8f:71:fc:b1:f5:bd:
                    19:d6:3e:13:00:22:d5:ea:13:0c:81:b2:91:00:25:
                    87:5c:44:f3:50:17:e3:f2:bc:f8:86:58:90:2f:b7:
                    6c:50:f1:69:b9:27:06:48:0a:72:79:02:d5:2f:f9:
                    38:e3:2a:f0:5b:97:a5:6e:b0:1d:4c:05:f1:e0:cc:
                    a3:f8:32:dd:8e:c0:e9:f3:63:95:ec:f9:9b:8e:f8:
                    8b:e1:c5:ef:2d:8a:02:23:87:d0:e0:dc:7e:4b:c7:
                    8b:2c:24:ad:b2:76:8e:b2:2b:ed:9b:e1:07:fa:0a:
                    9b:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:8F:1A:D9:59:ED:80:6A:2C:59:B0:40:DD:2A:96:9E:B4:29:A1
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/CyOPGtlZ7YBqLFmwQN0qlp60KaE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.206.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:16:5d:1a:e3:09:99:b0:70:5f:a4:95:97:9d:3f:db:b9:12:
         83:63:f3:b5:db:b5:19:39:ba:54:b4:ab:2f:b1:4c:93:9b:a3:
         19:b1:7d:3f:fc:6a:a7:65:3b:c0:db:94:07:3a:72:8a:3d:be:
         6b:e9:f7:0d:77:73:c2:73:d2:39:69:2a:48:f2:16:9a:97:ab:
         8e:df:96:8b:07:62:81:7a:34:f2:89:a4:30:5c:ec:32:cb:30:
         84:e6:00:04:43:fd:cd:9b:80:44:5a:9b:d4:5b:bd:2b:49:e9:
         3a:71:68:53:14:9e:9d:a8:af:1e:6a:fe:77:e5:ba:bd:91:bd:
         ba:c0:a3:90:ca:d1:9e:dc:0f:2e:d7:f8:1e:b8:fe:7f:64:37:
         35:8f:10:cc:dd:55:b8:b2:3e:35:cf:f0:0d:90:f7:78:dd:d7:
         ca:44:43:5f:c2:9b:15:c1:e2:64:ed:f3:c4:1c:3a:1a:a2:79:
         7d:a0:70:1a:8b:47:0a:fb:ed:d3:7e:10:82:11:5d:e9:63:66:
         43:9e:e1:d6:1d:54:8d:f3:17:9d:0f:d0:c2:23:b7:ec:e5:0c:
         64:19:cc:dc:89:fc:3f:d9:ac:0b:34:0f:3d:54:f5:a7:5c:d3:
         c1:08:56:cb:93:d7:83:77:c7:a0:62:1e:ab:0b:7f:15:af:dc:
         56:7f:e5:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org