Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/285/dpeOfVcPZLppzVvTzbhwCtlH0Ks.roa
File:                     dpeOfVcPZLppzVvTzbhwCtlH0Ks.roa (raw, json)
Hash identifier:          B8wI3X04uTPGbIH6LJ16vt+Yump/YnT89pFRAPBFBts=
Subject key identifier:   76:97:8E:7D:57:0F:64:BA:69:CD:5B:D3:CD:B8:70:0A:D9:47:D0:AB
Certificate issuer:       /CN=A3590C569DD668350463F6F7CF91383D3040AF26
Certificate serial:       43
Authority key identifier: A3:59:0C:56:9D:D6:68:35:04:63:F6:F7:CF:91:38:3D:30:40:AF:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o1kMVp3WaDUEY_b3z5E4PTBAryY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/dpeOfVcPZLppzVvTzbhwCtlH0Ks.roa
Signing time:             Thu 29 Feb 2024 01:30:03 +0000
ROA not before:           Thu 29 Feb 2024 01:30:03 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9363
IP address blocks:        210.251.160.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/o1kMVp3WaDUEY_b3z5E4PTBAryY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/o1kMVp3WaDUEY_b3z5E4PTBAryY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o1kMVp3WaDUEY_b3z5E4PTBAryY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A3590C569DD668350463F6F7CF91383D3040AF26
        Validity
            Not Before: Feb 29 01:30:03 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=76978E7D570F64BA69CD5BD3CDB8700AD947D0AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:d6:23:59:34:53:d4:a9:ae:ff:da:84:5e:18:
                    12:87:81:99:72:d1:fb:68:bc:9e:38:a6:d0:96:de:
                    6a:a9:17:90:79:41:92:8d:5b:77:e3:02:36:fd:b4:
                    9c:81:a6:a8:04:30:7d:96:c7:16:07:b4:c2:6b:34:
                    ed:75:23:39:5b:3b:27:89:ae:6f:da:40:1f:7b:47:
                    2b:f3:fa:82:9f:67:24:54:fc:bb:c7:59:b2:6e:8c:
                    6c:b4:8c:26:ee:53:c2:36:98:60:89:bc:e7:a6:80:
                    5c:39:fe:2f:ec:3b:04:78:6e:7a:ae:6b:f1:a2:4d:
                    73:5f:66:bc:2a:64:f6:13:ff:f1:c4:53:8b:9f:7d:
                    17:db:ee:d5:44:30:b1:5b:66:40:ae:8b:d0:79:81:
                    60:fa:0d:d8:30:59:af:34:44:e1:07:52:2b:d5:17:
                    77:99:77:aa:d7:97:de:21:6e:4f:ae:2c:a2:ee:28:
                    50:10:df:52:4c:1c:f8:af:63:9c:2c:7a:83:a4:f5:
                    02:2d:6b:b0:25:e1:fd:fe:1d:12:96:c6:c8:25:e7:
                    df:e2:a8:86:6b:4e:92:0e:0c:a8:a3:58:29:40:51:
                    31:0b:5e:b5:e3:72:c3:fb:ca:63:68:19:4d:82:9c:
                    24:21:0b:f2:a1:2a:c5:06:72:cb:06:91:6a:a5:90:
                    a1:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:97:8E:7D:57:0F:64:BA:69:CD:5B:D3:CD:B8:70:0A:D9:47:D0:AB
            X509v3 Authority Key Identifier:
                keyid:A3:59:0C:56:9D:D6:68:35:04:63:F6:F7:CF:91:38:3D:30:40:AF:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/o1kMVp3WaDUEY_b3z5E4PTBAryY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/o1kMVp3WaDUEY_b3z5E4PTBAryY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/285/dpeOfVcPZLppzVvTzbhwCtlH0Ks.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.251.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         63:8c:a9:19:65:49:a9:83:29:42:28:57:c7:f0:83:23:df:5f:
         26:72:6e:1a:f1:3a:1c:65:8a:1d:a7:44:cb:0f:76:89:83:9c:
         d3:c6:d7:e1:58:f4:a2:4e:2f:ca:04:62:7d:56:89:dd:37:98:
         80:83:06:77:92:0d:ec:8c:0c:89:94:ff:72:b1:d5:3a:dd:cc:
         7e:1c:02:27:ab:21:99:1f:60:2f:93:d4:9f:70:e4:49:5b:ec:
         48:30:04:3f:d8:a2:48:a7:fa:2c:41:e8:73:37:14:1e:21:c7:
         a1:d9:2f:fb:43:e9:54:11:d0:4c:d3:25:ba:7e:2d:a2:7b:87:
         e5:48:4e:07:da:1b:93:fa:03:1a:5e:12:95:52:fc:ae:c3:d1:
         5b:00:60:a6:f6:48:40:76:26:1f:01:00:fa:7c:d9:b3:5a:7d:
         88:81:58:e8:1f:bc:73:07:ca:ac:aa:3f:cc:08:10:e3:92:e0:
         19:fd:db:80:c4:e9:2e:a6:bf:89:97:cc:cf:f4:4d:87:70:7d:
         60:1b:a6:2a:35:12:5c:ba:09:e6:d6:c9:d6:00:24:38:18:f1:
         15:26:cb:fc:55:88:02:36:da:81:45:e9:60:14:c5:78:21:f6:
         4e:86:d0:18:30:57:e8:00:4c:aa:64:c4:90:f1:1a:48:34:94:
         16:eb:93:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org