Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/inUTJS3RMvBICcB7kVo796RTt-k.roa
File:                     inUTJS3RMvBICcB7kVo796RTt-k.roa (raw, json)
Hash identifier:          C47SLLWIE4of84WrEHk0vL9Vc7AoGLBcIytKPGEKCsw=
Subject key identifier:   8A:75:13:25:2D:D1:32:F0:48:09:C0:7B:91:5A:3B:F7:A4:53:B7:E9
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       09
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/inUTJS3RMvBICcB7kVo796RTt-k.roa
Signing time:             Thu 16 Nov 2023 02:40:48 +0000
ROA not before:           Thu 16 Nov 2023 02:40:48 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     18266
IP address blocks:        203.179.240.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov 16 02:40:48 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=8A7513252DD132F04809C07B915A3BF7A453B7E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e0:8b:50:13:e7:0e:7a:db:b9:bb:a4:32:6c:
                    a7:18:cd:e7:80:3d:31:67:9b:1d:81:d5:b8:1f:c5:
                    4c:c0:a1:62:82:24:01:ed:44:0b:d7:80:e0:ae:bc:
                    aa:bb:e6:9e:28:a4:f4:ba:87:27:50:91:9f:14:a7:
                    fc:94:29:a9:35:7a:ee:c2:dd:24:a7:cd:af:70:6f:
                    5b:ef:77:51:55:17:6b:46:2c:c3:58:67:a7:f7:64:
                    b6:ea:42:34:ec:d3:df:0f:9a:e7:01:c6:4d:c4:96:
                    6d:c9:4a:5d:38:92:f2:b7:a0:8d:ab:01:26:11:5b:
                    7e:4c:36:8d:b7:06:38:2f:ac:58:f4:b3:91:98:af:
                    74:d5:97:f1:e3:51:43:95:74:1c:55:53:12:d8:13:
                    56:2b:a2:f8:29:62:74:66:38:b1:ac:d5:b1:8b:31:
                    19:34:08:10:3e:8e:f3:9d:2f:6f:cf:1e:3e:84:8a:
                    13:da:59:84:c9:53:05:4f:23:2b:01:08:15:49:77:
                    69:e8:c5:7d:32:04:7f:d2:84:0d:ff:f2:ff:60:96:
                    d8:0e:d2:50:5b:5f:20:35:0a:3a:19:8a:35:a8:7c:
                    48:c0:60:b0:cc:52:b5:a7:75:a4:3f:6a:76:a3:6e:
                    9f:f2:29:7d:0f:3a:23:ca:b4:af:ad:ab:b1:5a:e0:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:75:13:25:2D:D1:32:F0:48:09:C0:7B:91:5A:3B:F7:A4:53:B7:E9
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/inUTJS3RMvBICcB7kVo796RTt-k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3f:0f:aa:e4:d8:90:6e:ae:63:15:ea:59:ef:30:b4:52:33:d5:
         2d:31:b4:5a:0f:a4:b8:d1:bb:ac:05:a5:54:c9:f7:87:04:b8:
         fc:08:e4:24:39:2d:c3:01:fb:4b:fb:63:5f:b6:50:e1:53:cc:
         93:16:5e:2b:4f:5d:7c:7e:43:0b:e9:f8:08:0d:07:d4:91:0e:
         1a:b0:d4:c4:d0:7c:cc:0c:bb:fc:76:8f:10:ac:a4:e8:c6:21:
         07:17:22:e6:d1:23:31:5e:5e:4a:8a:df:b6:72:bd:ca:e5:9f:
         3a:18:65:1c:30:07:6d:c1:f1:cb:51:17:e6:6e:39:0c:70:eb:
         2b:83:bb:c5:01:c4:b3:3f:e2:76:c9:19:cf:e0:4d:ff:95:89:
         9a:3f:56:73:b3:07:21:ef:8d:5e:74:4f:bc:a1:ff:f4:a6:50:
         5f:1f:2d:4b:8f:82:b9:39:0c:66:cc:ee:b2:54:8a:57:13:9f:
         dc:ed:21:a5:12:d9:ea:16:2e:3a:8e:bd:ee:c1:2b:a6:40:4c:
         e2:96:0a:9e:b8:0b:43:ab:f8:1c:c1:b4:74:67:c0:ed:8f:98:
         1d:ff:62:35:45:90:af:04:ba:62:0b:98:fd:5b:10:0d:04:da:
         51:01:34:64:0f:4a:f5:46:41:d6:7b:09:60:d5:8b:e4:6f:bf:
         ba:f3:b8:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:35 2024 by rpki-client on console-ams.rpki-client.org