Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
File:                     F08cX1gJI0XKArzF_PtJZoXkj5A.roa (raw, json)
Hash identifier:          J8jZ7m0fKo7ZvzagYpMgH+gXqwQ5kBE7OR7kmzpOqwQ=
Subject key identifier:   17:4F:1C:5F:58:09:23:45:CA:02:BC:C5:FC:FB:49:66:85:E4:8F:90
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       14
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
Signing time:             Wed 06 Dec 2023 01:44:29 +0000
ROA not before:           Wed 06 Dec 2023 01:44:29 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        107.153.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Dec  6 01:44:29 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=174F1C5F58092345CA02BCC5FCFB496685E48F90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:2e:7a:c9:20:38:0d:dd:71:d2:b9:d6:ca:48:
                    cf:cf:10:8e:9c:ed:b9:ce:cc:92:7c:8c:08:c3:13:
                    27:09:24:b4:fc:08:eb:9a:1b:4d:08:ea:71:94:c7:
                    dd:ba:59:50:f9:87:2f:9e:42:36:ac:db:c5:5b:03:
                    cf:24:be:ca:53:76:2f:f9:bd:63:9f:c7:74:b9:97:
                    c9:d2:a5:a5:da:15:6f:77:f0:1c:7a:33:32:15:b5:
                    cf:f1:42:72:26:f8:62:80:41:f8:b8:db:ac:b7:91:
                    01:38:d8:c1:db:57:02:54:cf:0a:87:0c:b6:d8:1b:
                    ce:79:fb:f9:db:33:32:32:37:06:8f:b8:50:8d:11:
                    de:85:f6:25:57:db:d9:be:9d:9c:5f:b1:ce:80:e2:
                    97:49:85:4c:fd:08:ad:5a:e4:a5:6c:ef:ca:6f:c4:
                    7f:7a:15:b2:48:7b:48:ed:b5:36:df:ac:4e:e1:2a:
                    01:f7:bf:47:dd:2d:3c:b3:bc:b6:95:34:9a:5c:63:
                    b2:9c:e9:b2:5d:55:d0:84:e8:8a:a8:2d:30:6d:ec:
                    20:a2:dc:ed:ce:01:8f:95:ed:2c:17:f0:b3:2c:e0:
                    35:a8:19:95:88:da:be:bb:7a:11:f1:94:4b:c8:95:
                    46:de:1d:ba:89:37:7a:7c:3d:d9:29:15:03:55:c0:
                    44:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4F:1C:5F:58:09:23:45:CA:02:BC:C5:FC:FB:49:66:85:E4:8F:90
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/F08cX1gJI0XKArzF_PtJZoXkj5A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  107.153.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         ad:3d:93:c6:f3:9b:3d:eb:76:9c:89:c4:31:75:18:de:80:b0:
         f0:bb:f3:80:ed:ad:f7:b6:24:53:4f:79:a9:2e:af:ff:a9:b7:
         05:38:c3:40:69:ab:af:6b:28:88:4c:0b:74:c1:e7:77:c9:7f:
         8d:0f:9e:cc:ba:87:30:ea:f9:5d:9d:eb:ca:22:db:3c:56:41:
         40:92:16:35:95:8d:52:30:fe:14:ca:c9:c6:56:86:7c:59:c1:
         be:8f:f5:ed:46:3a:e5:14:11:cc:04:8c:77:0e:8c:a0:8e:c1:
         92:f8:e5:8e:ca:e6:87:d2:3e:f7:f3:1e:a8:d0:bc:9f:2c:a3:
         4f:85:92:1e:84:77:ad:90:ce:41:9c:77:f8:d0:55:af:93:8c:
         1a:aa:c2:b0:a6:11:a5:0d:0b:69:05:1d:b1:0e:f4:d3:16:03:
         d8:5e:ff:39:6b:f2:36:57:bf:52:cf:95:41:2c:25:ab:65:cb:
         2e:6e:87:01:90:41:73:76:96:5d:3e:63:78:a4:85:2f:f3:32:
         10:a2:67:de:85:c7:2e:d9:0e:4e:22:cb:2d:20:1e:f7:1a:95:
         cc:bd:0b:9c:87:a8:56:16:2e:5e:25:fc:08:9a:63:f6:92:f7:
         00:4d:e9:33:42:a0:46:f0:a2:d7:89:12:63:54:6c:c7:58:54:
         43:62:47:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org