Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa
File:                     zyJoOzHb0897DIOdH0bpiU1ufj8.roa (raw, json)
Hash identifier:          sQyKxMhxXioRIBk6J9dQPhS+RtC9WEGaciD54gqlRdM=
Subject key identifier:   CF:22:68:3B:31:DB:D3:CF:7B:0C:83:9D:1F:46:E9:89:4D:6E:7E:3F
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       0C
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa
Signing time:             Thu 16 Nov 2023 02:48:39 +0000
ROA not before:           Thu 16 Nov 2023 02:48:39 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     23783
IP address blocks:        203.179.252.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Nov 16 02:48:39 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=CF22683B31DBD3CF7B0C839D1F46E9894D6E7E3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:9e:b1:96:d4:8e:3f:d7:0e:d7:8f:38:65:3c:
                    f5:db:cc:3b:d1:9e:48:7d:cc:bc:03:47:35:53:54:
                    b7:8a:d8:7c:2d:6d:2a:de:d2:b3:66:5c:ab:eb:c3:
                    6a:49:85:e3:db:73:d8:3a:d8:d0:c7:47:c5:e2:9e:
                    e9:e2:19:50:b6:fc:b5:35:10:5e:97:f7:41:42:19:
                    64:34:a4:dc:15:a5:df:e0:ef:2d:8b:0c:10:cf:11:
                    bb:7b:00:ae:97:c7:42:d2:5e:67:cf:6e:1a:b8:8f:
                    4d:ab:3d:06:fb:ed:c2:28:fe:93:75:f0:93:76:47:
                    53:97:55:24:ad:ae:be:de:37:70:e2:6d:f7:20:36:
                    cf:76:d5:08:6d:50:8e:d0:29:c7:17:d0:47:6a:cc:
                    7a:84:8f:31:88:bf:d0:ba:8d:a9:04:67:33:2a:02:
                    82:02:a2:12:81:74:54:bb:1f:21:86:dc:8a:26:8e:
                    77:a8:27:70:d4:96:70:3a:25:0f:7f:1c:22:ce:49:
                    48:a7:48:7f:ad:41:51:f4:38:c9:98:b5:99:31:9f:
                    91:2a:fd:1a:5e:b8:0e:e6:db:ac:ab:49:4d:75:f2:
                    18:4b:00:dd:2a:e4:ce:d6:e7:b9:ce:c4:d1:8f:89:
                    11:ed:96:27:2b:80:a4:b5:33:0c:04:49:73:71:64:
                    9c:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:22:68:3B:31:DB:D3:CF:7B:0C:83:9D:1F:46:E9:89:4D:6E:7E:3F
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/zyJoOzHb0897DIOdH0bpiU1ufj8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         d0:6d:53:7c:a8:b3:42:c0:1a:ba:74:9e:82:03:11:c4:a9:d3:
         4f:46:60:e5:04:72:25:31:4d:d9:6e:a7:18:9d:cc:ad:c5:26:
         f7:e4:83:29:0f:c3:e4:a9:dc:2d:ed:2f:0d:b6:c7:0f:5e:5e:
         9b:c5:cd:38:37:83:b5:ce:73:37:de:0e:ae:d1:33:00:dc:02:
         a8:14:95:1e:0c:36:ef:92:90:fa:1c:42:8e:a2:ca:0f:bc:74:
         93:d1:d1:2a:1f:55:f0:92:dc:d1:73:8f:a0:2e:2c:fe:4d:2f:
         81:fc:11:f0:22:34:b4:73:b9:40:c3:2c:7e:7f:20:0c:72:b5:
         5f:80:1e:45:77:d8:55:0a:44:51:1a:d4:8b:c7:7b:0a:35:36:
         65:7a:29:29:0e:17:85:8a:9d:b6:26:6b:ea:93:76:7b:55:fa:
         af:35:25:c1:2c:90:49:69:32:a0:84:e0:86:0b:46:4a:5f:5c:
         52:86:bd:e6:f0:7c:33:a1:cf:f6:bb:5e:7d:f7:a3:a3:cc:2f:
         d0:62:bd:18:14:0f:27:6e:07:c0:2d:d9:11:c0:a9:4d:7d:af:
         a9:61:13:57:87:dd:94:f3:b5:d3:44:ea:1e:2c:6d:9c:2f:9a:
         28:dd:24:96:89:e8:29:81:61:2f:fc:5b:54:62:2e:c6:69:48:
         0c:df:8d:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:41:52 2024 by rpki-client on console-ams.rpki-client.org