Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqf6SKlrMUL-YW7N4dEAb6NHKt8.roa
File:                     kqf6SKlrMUL-YW7N4dEAb6NHKt8.roa (raw, json)
Hash identifier:          /ch7Tsp24JEp1PlC5mApm7VGdBkTnzrBhiCFIAXAYQM=
Subject key identifier:   92:A7:FA:48:A9:6B:31:42:FE:61:6E:CD:E1:D1:00:6F:A3:47:2A:DF
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       25
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqf6SKlrMUL-YW7N4dEAb6NHKt8.roa
Signing time:             Thu 25 Jan 2024 01:14:27 +0000
ROA not before:           Thu 25 Jan 2024 01:14:27 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        202.212.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:14:27 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=92A7FA48A96B3142FE616ECDE1D1006FA3472ADF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:df:62:21:ae:3c:ef:e3:be:8b:a1:21:b1:47:
                    b4:6b:35:a8:b9:af:7f:bf:e1:45:3f:38:b7:7c:bc:
                    a3:51:18:5c:ca:1a:a7:38:6e:9b:99:e6:af:cc:cb:
                    4f:67:a5:5f:4b:81:32:39:2e:5d:bf:e3:c9:b7:57:
                    0a:77:42:14:11:a7:fb:8f:80:c6:da:9f:ba:94:26:
                    0b:0b:58:f5:d5:63:e6:27:da:2a:82:c4:43:9d:36:
                    0b:3e:e6:4d:60:21:4f:6f:f0:38:bd:25:2b:2c:4c:
                    3b:3e:94:5e:1e:52:aa:dc:f1:c1:3d:74:02:f6:d9:
                    c9:fc:3d:7c:06:44:6b:a3:80:0e:61:2d:7c:0d:3d:
                    a9:e9:eb:f0:bc:a8:76:00:c3:9d:a3:af:39:c1:d9:
                    9f:1c:25:b8:91:8f:be:86:09:e9:66:0a:0f:8f:6b:
                    b0:54:c5:09:2e:1b:a1:f5:af:1c:1d:e7:21:1e:75:
                    4f:7a:a2:de:65:15:a8:23:e3:70:a6:e2:53:2d:9f:
                    84:62:68:ac:53:8b:d1:42:38:2c:91:3a:3e:73:ba:
                    e0:4a:17:63:89:56:62:67:29:42:65:1e:ac:3d:d8:
                    11:bb:86:b9:92:e3:6d:29:26:6c:c8:3a:18:c4:97:
                    cf:1f:65:cf:3c:0e:d9:49:53:12:9f:37:db:1f:e1:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A7:FA:48:A9:6B:31:42:FE:61:6E:CD:E1:D1:00:6F:A3:47:2A:DF
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/kqf6SKlrMUL-YW7N4dEAb6NHKt8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.212.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a0:8b:b2:b2:4e:8e:80:d1:2e:0b:0f:58:a4:37:0d:2d:19:a4:
         83:3e:ad:1f:8c:c5:63:86:c6:be:3b:00:b4:0a:5f:d7:09:ea:
         cc:3f:e1:6f:96:98:6c:f2:a3:98:24:a1:78:b3:ef:77:6b:20:
         38:ab:fb:d2:13:53:3f:d4:e3:3b:f5:a9:a9:47:9a:86:00:16:
         b2:ac:9c:2c:36:f9:5d:d1:de:5e:89:f5:af:fa:d3:d4:45:28:
         70:f9:e9:0e:5f:1a:cb:56:a9:27:e4:60:73:31:35:ca:88:88:
         5a:51:8c:2f:0f:0c:b9:47:28:ae:66:9c:b3:11:c8:4a:05:ed:
         ad:ac:64:71:7f:6b:48:e5:59:d7:ca:b6:a1:3b:d4:3d:7b:89:
         25:b2:f7:15:19:ff:77:43:f8:8b:de:24:dc:9b:cf:5a:8b:98:
         2a:d3:2d:17:6a:b7:9b:be:2e:f8:fa:05:68:7e:23:d4:b4:bc:
         40:e1:81:9d:5f:35:32:3b:c8:e1:91:f6:ea:58:f1:c7:96:dc:
         42:0b:cb:bc:8b:12:6a:28:53:79:66:9d:37:a9:f2:23:66:61:
         20:c4:be:99:21:c8:30:59:c2:a4:43:1e:c6:bd:20:b5:20:9b:
         ee:57:3e:96:0e:ce:1f:13:8b:e7:51:0b:2c:44:f2:d4:93:e9:
         98:25:3c:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:19 2024 by rpki-client on console-ams.rpki-client.org