Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/pkqyP10uOQ6lKLKNsnUcLMDTQ0Y.roa
File:                     pkqyP10uOQ6lKLKNsnUcLMDTQ0Y.roa (raw, json)
Hash identifier:          w5aF91oHfC/BnIYCBs3/upAMgOSYHLsyXipGUdBfhbs=
Subject key identifier:   A6:4A:B2:3F:5D:2E:39:0E:A5:28:B2:8D:B2:75:1C:2C:C0:D3:43:46
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       29
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pkqyP10uOQ6lKLKNsnUcLMDTQ0Y.roa
Signing time:             Thu 25 Jan 2024 01:18:30 +0000
ROA not before:           Thu 25 Jan 2024 01:18:30 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        203.138.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 41 (0x29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:18:30 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=A64AB23F5D2E390EA528B28DB2751C2CC0D34346
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:8e:85:a4:f0:3f:28:d2:ac:30:a8:29:15:09:
                    96:1a:c9:b6:9c:2e:6d:ab:64:06:9f:18:85:23:fc:
                    54:30:43:db:69:35:2b:17:7b:45:aa:0a:3e:71:20:
                    ef:ee:55:7c:92:f7:31:33:36:29:53:1c:c1:29:7b:
                    83:bc:93:14:c3:e0:f2:72:1b:3f:ff:fe:ab:10:72:
                    87:ac:16:0f:6b:f0:04:e6:e8:f9:9a:16:6f:8b:fb:
                    ce:57:c5:08:d4:b1:2b:69:20:a6:32:05:f5:84:0d:
                    03:88:64:ac:20:e1:06:43:6c:38:91:81:f3:0d:86:
                    d0:33:f1:da:da:33:61:f6:b7:7b:71:a8:19:ee:a3:
                    7e:d8:6c:88:4e:f9:16:2c:44:87:e1:83:f9:3b:79:
                    92:b9:30:86:20:19:4d:c9:45:6f:59:cf:bf:69:fa:
                    f9:e6:78:a6:1f:5d:5f:21:63:d5:5c:58:6d:2b:b9:
                    1a:87:25:f0:0b:f9:5f:bb:18:77:63:8c:ea:6a:f5:
                    c8:35:1a:2d:cd:de:eb:8b:58:91:53:11:b3:41:d8:
                    60:a8:83:cc:98:0a:ac:66:7f:db:fd:46:fd:53:1f:
                    b2:33:39:1d:9e:32:31:c7:61:f0:44:24:5a:28:e4:
                    9d:4d:97:8e:33:26:bb:29:22:6b:d4:18:03:24:17:
                    ea:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:4A:B2:3F:5D:2E:39:0E:A5:28:B2:8D:B2:75:1C:2C:C0:D3:43:46
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/pkqyP10uOQ6lKLKNsnUcLMDTQ0Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.138.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:21:45:30:71:88:c3:53:e4:cd:b3:a2:ce:0d:9d:eb:15:3d:
         41:78:6e:2e:df:94:b4:ac:ff:01:38:09:9f:5e:8f:75:95:a0:
         0e:15:9f:bb:a1:0e:cb:e7:74:06:9c:87:0f:da:74:81:44:88:
         37:02:c1:46:e9:77:c1:4f:a7:7a:cc:be:12:48:42:78:f8:74:
         19:ce:29:9a:31:14:2f:0f:0c:81:22:43:98:da:e9:58:8b:d0:
         50:8a:9a:9e:4f:8c:4e:f7:cf:3e:c8:c3:4b:6c:6c:4f:05:05:
         24:f5:32:39:80:b0:ec:71:50:d9:1c:c1:44:e7:35:c3:91:21:
         a0:8d:4e:d3:83:60:be:3e:fa:33:31:bf:dd:52:15:09:97:52:
         65:4f:11:de:3f:b7:ee:69:bf:07:e6:3d:12:7e:71:cc:fd:9b:
         bd:56:84:c0:1e:78:41:be:50:1a:c7:cb:6d:1d:89:f7:82:dc:
         82:7f:59:b7:14:05:68:42:79:1f:22:79:7b:88:4f:ac:79:43:
         09:7b:79:4c:85:32:d8:ad:ae:16:53:12:a3:36:f9:fe:b7:90:
         f9:71:fe:da:a4:70:cd:eb:ea:23:85:f4:07:b7:e3:e8:b3:59:
         07:64:11:04:5b:36:c4:7c:af:56:a1:77:dc:d7:a6:5f:45:4f:
         61:09:93:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org