Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/CjHtZgnLPy3H_2mCn9Ds8oPVABU.roa
File:                     CjHtZgnLPy3H_2mCn9Ds8oPVABU.roa (raw, json)
Hash identifier:          v34HTJVFKTXql95D7spNiO55LRj6HhuyEq8x6h0+V+U=
Subject key identifier:   0A:31:ED:66:09:CB:3F:2D:C7:FF:69:82:9F:D0:EC:F2:83:D5:00:15
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       06
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/CjHtZgnLPy3H_2mCn9Ds8oPVABU.roa
Signing time:             Fri 18 Aug 2023 02:20:20 +0000
ROA not before:           Fri 18 Aug 2023 02:20:20 +0000
ROA not after:            Sat 17 Aug 2024 02:01:09 +0000
asID:                     9597
IP address blocks:        115.146.0.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug 18 02:20:20 2023 GMT
            Not After : Aug 17 02:01:09 2024 GMT
        Subject: CN=0A31ED6609CB3F2DC7FF69829FD0ECF283D50015
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:59:4a:ca:a1:44:43:99:7d:88:86:67:a9:fb:
                    04:4b:f5:5a:8c:53:a7:84:65:97:a9:14:40:dc:d0:
                    6d:2c:35:ac:ef:3a:4e:8c:5b:c5:60:55:50:f3:99:
                    cc:09:11:51:a7:01:34:b4:41:04:bf:07:dc:3d:6e:
                    13:8a:b3:41:b8:e6:ac:c7:61:39:2d:91:3d:20:5c:
                    1e:94:f9:b4:31:96:ae:4e:03:48:2e:a8:aa:f5:fc:
                    69:6b:4d:e4:99:36:b3:52:d3:e5:bf:35:25:9b:ab:
                    df:8e:72:49:3d:28:4b:57:d4:05:ba:f0:9c:8d:52:
                    66:36:24:4d:91:b7:fa:4e:7a:54:81:86:ec:8c:c4:
                    fb:8f:4f:f9:4c:30:6a:42:f3:67:e3:ad:14:f7:1c:
                    df:ea:4d:01:06:6c:c0:d1:1e:07:08:12:2e:37:98:
                    79:d0:b3:b1:41:22:10:99:3b:ab:c5:d9:88:51:4c:
                    3f:84:a7:04:16:42:ef:d5:8e:af:48:46:39:f6:b9:
                    67:a3:41:b7:fc:0f:f1:8f:35:dd:f8:03:38:25:64:
                    e7:23:1f:d8:c9:68:0d:a7:dc:ad:d1:a2:8a:42:77:
                    ec:21:5e:13:47:60:af:bb:70:e3:55:4f:77:a8:a8:
                    bb:55:14:df:aa:05:ab:0f:1b:aa:a0:7b:90:17:dd:
                    76:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:31:ED:66:09:CB:3F:2D:C7:FF:69:82:9F:D0:EC:F2:83:D5:00:15
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/CjHtZgnLPy3H_2mCn9Ds8oPVABU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9e:ef:7b:86:8e:47:f1:cc:d0:e6:a9:7b:16:1a:e9:e3:83:30:
         74:2a:0e:ea:c3:88:39:cf:78:96:15:4b:9a:1f:60:64:19:24:
         06:6d:a6:aa:e3:e1:df:76:31:d2:9a:68:06:cb:a4:12:19:5d:
         56:55:e2:67:74:db:86:fa:50:27:9a:b5:a6:fb:41:27:2d:c7:
         e5:b7:f3:77:13:15:51:48:79:88:80:a2:1c:7e:07:36:b6:c9:
         3a:da:c4:03:6d:72:d7:3a:26:9b:f3:24:b3:3c:4d:bf:0f:2f:
         b0:f7:21:bd:d7:de:10:ee:fa:d4:c5:48:f3:ea:93:8a:9c:89:
         cc:ac:7b:1f:40:b2:0d:57:1d:61:28:0d:41:52:6c:e6:2d:63:
         69:2b:55:28:b1:f3:a9:a8:20:38:de:5e:69:22:36:31:1b:fb:
         68:f3:1a:af:3e:6a:95:8b:4e:b3:e5:2a:1f:33:ad:83:62:69:
         27:57:3f:d5:9c:81:a3:75:ba:a7:d7:28:8c:ac:84:32:bc:b7:
         98:69:4d:c7:c2:30:1b:d5:f5:5f:75:fd:90:b3:f4:f6:e4:3e:
         de:f8:6c:14:d1:ae:a5:ef:8b:ac:af:e8:0c:52:f3:14:b8:f1:
         fc:c4:96:84:53:ca:c2:de:74:49:e0:98:99:fb:71:fc:04:29:
         23:a4:a3:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:38 2024 by rpki-client on console-fra.rpki-client.org