Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/4abZoPslFn17aNEesDfD2YJFraw.roa
File:                     4abZoPslFn17aNEesDfD2YJFraw.roa (raw, json)
Hash identifier:          4A/4qrRscjgPGrbQ1r+UZ0GmnOsJJmotFErACynjWr0=
Subject key identifier:   E1:A6:D9:A0:FB:25:16:7D:7B:68:D1:1E:B0:37:C3:D9:82:45:AD:AC
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       44
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4abZoPslFn17aNEesDfD2YJFraw.roa
Signing time:             Wed 31 Jul 2024 01:08:59 +0000
ROA not before:           Wed 31 Jul 2024 01:08:59 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        210.153.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jul 31 01:08:59 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E1A6D9A0FB25167D7B68D11EB037C3D98245ADAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:a0:a2:38:4e:bc:fa:28:f8:e7:5a:67:c6:55:
                    95:6d:ff:3d:db:3e:cb:69:ad:a4:c6:7c:82:58:b8:
                    bf:1e:15:3b:e1:f6:67:c4:37:cf:31:ef:dd:62:cc:
                    7d:f5:cd:d1:d5:90:6a:e1:80:74:97:9c:a6:91:1a:
                    55:bf:44:8d:a1:8d:4c:6e:50:1a:35:a7:48:2b:aa:
                    9e:ec:71:b9:05:52:c9:53:00:91:c4:22:ea:b5:60:
                    3f:c4:0d:da:d7:b4:35:2d:92:af:42:9a:8b:d4:05:
                    c6:2d:cb:48:59:90:be:86:c7:bb:96:3f:ca:e6:71:
                    28:5b:54:7a:a0:15:33:82:97:5d:54:6b:8c:02:06:
                    49:a9:cf:d4:4f:2e:76:ad:2d:bf:0d:39:ce:4a:35:
                    fc:ec:89:4c:73:51:d2:56:bf:44:50:0e:ee:de:58:
                    f9:42:a3:7c:91:84:8c:d9:cf:f7:5a:b6:07:79:0d:
                    35:4c:80:b3:67:dc:58:73:93:ff:67:48:aa:59:6f:
                    ad:dd:9d:e8:ad:23:c7:90:cf:f5:58:4c:02:32:0d:
                    2b:68:19:5c:68:44:4c:73:38:ca:bc:38:31:94:94:
                    9f:ce:17:18:37:fb:a2:f1:94:90:85:c4:06:bc:6c:
                    58:42:78:79:4c:5d:74:cc:d5:45:c9:1c:3f:5f:f1:
                    02:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:A6:D9:A0:FB:25:16:7D:7B:68:D1:1E:B0:37:C3:D9:82:45:AD:AC
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/4abZoPslFn17aNEesDfD2YJFraw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:12:6a:ef:4f:30:85:c7:85:b6:9e:a5:2b:86:ee:94:a1:01:
         12:20:6d:02:15:9d:1d:7a:6f:37:fb:53:71:e2:7f:4e:d9:69:
         e6:99:77:3b:32:fa:a4:ca:b1:89:9e:8d:c0:8c:96:6b:83:37:
         df:c1:5f:15:fb:eb:ea:83:cc:ea:75:9f:38:f4:b2:af:3b:c3:
         ae:a8:93:5f:b8:d7:ab:9d:a1:5a:f7:97:63:56:62:6d:47:04:
         14:10:e7:99:6b:81:d8:70:95:5f:91:f7:34:21:20:ca:37:40:
         fe:63:c7:51:75:9c:69:64:5f:32:27:df:6a:07:95:1b:f5:ac:
         5e:3f:09:4c:76:ec:17:a8:b0:bc:4c:c7:94:b7:c1:77:3c:dc:
         87:c4:79:dc:3e:b3:a1:7b:3c:7b:d3:a2:96:38:72:f7:43:86:
         16:8b:3d:98:b1:f0:ba:73:23:b0:7e:bb:cd:15:34:32:26:dd:
         38:1f:cd:d4:38:f0:4a:db:de:fb:d8:cf:f6:8f:af:43:cb:4a:
         a4:b9:f9:60:c7:77:09:ec:87:e3:0e:e0:08:39:cb:ff:a4:20:
         a7:d0:6f:73:14:ff:ec:24:0d:db:c4:6d:07:b5:9f:c4:5e:32:
         bd:1c:09:72:da:7e:43:23:56:a0:6a:52:42:e4:58:a7:bc:d5:
         db:f7:24:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org