Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GC-2K5o96PdXu_cBRgHLzzqGecc.roa
File:                     GC-2K5o96PdXu_cBRgHLzzqGecc.roa (raw, json)
Hash identifier:          QSFPHrIUm+uuYYX9NMmjlZMIZl7tzDp8JAicnhJKero=
Subject key identifier:   18:2F:B6:2B:9A:3D:E8:F7:57:BB:F7:01:46:01:CB:CF:3A:86:79:C7
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       2C
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GC-2K5o96PdXu_cBRgHLzzqGecc.roa
Signing time:             Thu 27 Jul 2023 16:54:07 +0000
ROA not before:           Thu 27 Jul 2023 16:54:07 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        148.68.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:54:07 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=182FB62B9A3DE8F757BBF7014601CBCF3A8679C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:12:b7:15:44:6c:4c:d5:a4:ee:54:71:af:03:
                    e6:f9:2e:50:14:7b:b1:e0:23:44:7f:26:85:f2:f3:
                    39:1f:52:04:84:52:ba:82:2e:e9:45:90:76:d6:2a:
                    ca:b6:d3:04:00:b9:d2:62:7f:55:e1:15:f2:08:17:
                    37:8c:63:2b:f9:7c:d9:c8:73:d2:fd:37:81:63:7b:
                    41:a1:f6:1e:0c:74:fc:09:df:8b:65:92:21:3e:42:
                    fa:b1:bd:66:03:8d:c0:b1:87:8c:36:0e:92:39:90:
                    ac:3e:90:e7:5c:82:f1:54:ad:ae:58:f2:f5:67:f3:
                    41:22:96:26:1a:9a:84:ed:e4:88:f7:0d:41:81:d6:
                    2a:c9:89:e5:fe:68:db:04:fa:0e:2f:70:ee:69:a5:
                    4e:40:bb:44:97:00:04:a7:81:72:e2:19:dc:ca:b4:
                    ec:b1:91:73:0b:9a:f3:97:b5:59:8b:40:89:a3:b8:
                    0f:05:a3:29:e5:13:7c:fb:9b:08:25:f5:43:39:3d:
                    bb:79:42:15:54:4e:d8:ed:27:98:01:7a:b9:1d:da:
                    ee:86:e8:58:f0:8e:12:76:71:56:b6:b9:94:f4:4b:
                    92:d6:e5:c9:c9:2f:cc:00:14:39:44:e9:36:84:c7:
                    2d:5b:61:a8:70:c9:30:bb:c7:2c:71:82:06:aa:ea:
                    79:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:2F:B6:2B:9A:3D:E8:F7:57:BB:F7:01:46:01:CB:CF:3A:86:79:C7
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GC-2K5o96PdXu_cBRgHLzzqGecc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.68.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         10:84:7b:81:6f:0f:3a:47:f7:bc:96:3a:50:2e:b3:bd:4f:00:
         19:8f:3b:e8:f1:53:07:7f:ae:10:ea:b0:4f:99:97:ae:e8:59:
         17:50:eb:2a:99:1a:0b:35:5e:84:b1:40:6a:c2:f8:e2:2b:76:
         4f:be:2b:b4:f3:42:28:6b:40:74:07:a9:eb:dc:92:71:f5:e8:
         a5:61:c7:56:f2:b8:29:8c:6e:31:2a:98:ab:d8:89:44:40:05:
         7b:13:03:9a:d5:1b:b6:53:8c:b1:86:25:d0:21:34:8a:56:a0:
         f6:6c:d8:2c:df:19:bd:62:71:5f:77:cc:97:bc:5a:01:19:52:
         04:6f:0a:ce:1d:03:69:a0:f9:c4:d3:0a:5f:82:28:e2:f3:bd:
         68:e5:e2:99:ee:fd:1c:15:45:27:2b:c8:89:f4:9b:b2:2b:0b:
         b5:da:0c:c6:6b:28:7e:ad:96:b9:96:2a:1e:7d:53:9f:9f:ee:
         df:6a:7c:7b:a6:81:43:64:16:68:55:0a:f3:10:02:7c:24:38:
         73:2f:cc:34:81:72:42:22:2f:b7:dd:48:b4:13:af:db:92:03:
         85:95:18:6f:1f:26:bb:59:ff:dd:50:6f:b3:07:3f:e5:21:eb:
         2d:90:c9:88:3f:09:3f:9c:43:80:f1:04:7d:38:55:55:5f:d9:
         a5:58:b3:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:46 2024 by rpki-client on console-fra.rpki-client.org