Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/dLXvto3s-3BKzZjfK6p9ZcuwmvE.roa
File:                     dLXvto3s-3BKzZjfK6p9ZcuwmvE.roa (raw, json)
Hash identifier:          UpCpHbyJ2QbsqpCCs1MBVOq8k0gso8cKzib3+vWlysI=
Subject key identifier:   74:B5:EF:B6:8D:EC:FB:70:4A:CD:98:DF:2B:AA:7D:65:CB:B0:9A:F1
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       2B
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dLXvto3s-3BKzZjfK6p9ZcuwmvE.roa
Signing time:             Thu 27 Jul 2023 16:54:04 +0000
ROA not before:           Thu 27 Jul 2023 16:54:04 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        157.112.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 14:50:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:54:04 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=74B5EFB68DECFB704ACD98DF2BAA7D65CBB09AF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f7:dc:9c:79:02:4d:28:c8:2d:cd:d7:9b:d4:
                    25:c6:c1:98:23:4a:a6:f8:76:fe:c7:8e:aa:3c:3c:
                    8d:ed:bd:3d:a7:e0:5e:76:00:d4:fb:c8:d2:34:a4:
                    85:ae:09:45:f2:8e:c1:f6:ae:de:24:87:74:16:9c:
                    02:fc:69:0f:9e:17:d9:32:f5:6c:32:2a:c9:4e:46:
                    67:7c:61:50:3f:a7:87:33:9f:37:03:74:76:22:53:
                    1e:53:ca:f9:fb:74:fe:6d:b6:9c:88:76:35:0d:9b:
                    f8:2a:e4:ae:7f:ac:04:69:13:28:62:74:13:54:3a:
                    1c:bc:c9:e4:a6:ad:f4:42:3b:07:fd:5c:72:32:73:
                    49:b3:40:a3:7e:c3:20:4e:a7:98:2f:23:db:6a:0d:
                    ce:5c:ac:c6:e9:2f:aa:dd:66:86:95:12:b5:ae:4d:
                    b2:b7:c4:8e:26:74:93:b7:06:38:04:e2:2b:d8:cc:
                    ac:c9:ca:47:30:a6:1f:9e:90:bf:86:44:e8:94:3e:
                    cf:af:bd:e2:9e:53:17:92:44:b8:94:8c:1a:e1:a7:
                    df:a0:ac:62:33:81:93:95:c4:b9:b1:3e:3f:fd:63:
                    1d:e5:7c:0f:fd:9f:12:9b:c7:c5:4c:dc:a4:60:5d:
                    5a:b4:65:bf:fc:68:3b:3f:d6:bc:e5:c2:17:4f:d2:
                    cf:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:B5:EF:B6:8D:EC:FB:70:4A:CD:98:DF:2B:AA:7D:65:CB:B0:9A:F1
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/dLXvto3s-3BKzZjfK6p9ZcuwmvE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         5f:05:fc:d1:0c:fc:be:ab:4b:9e:54:8e:cd:f3:ee:bd:25:43:
         a7:5c:42:50:bc:7a:d5:21:90:25:0e:b5:ae:a5:3d:0c:30:6c:
         ae:03:58:e8:e9:e0:55:3e:69:2a:c6:f6:3b:2b:76:bb:fa:0f:
         a2:6e:3b:21:d5:5b:38:95:72:30:b0:77:57:23:cd:aa:a9:ba:
         18:4e:09:78:93:65:c5:bc:ae:4a:f6:b9:24:97:33:0b:41:49:
         f2:b5:fe:1a:c0:de:3b:c5:37:13:e7:fb:80:eb:78:4c:68:23:
         14:40:11:39:84:b6:c4:62:c2:d3:cd:44:09:eb:62:7e:bc:31:
         b8:af:e5:83:e6:c0:96:72:19:70:60:be:18:a2:b9:c4:f5:3f:
         13:f4:7d:2d:95:ec:14:36:e7:e0:e2:b3:28:51:f8:4c:70:50:
         1e:38:2e:9b:45:7f:72:c9:8e:91:99:f6:ea:39:cb:3b:a0:b7:
         eb:bb:9e:6f:60:ce:74:71:a5:19:cf:f8:7a:08:28:0e:d8:dc:
         70:49:de:f8:1c:97:7a:18:2b:55:bb:b8:f7:74:94:be:51:ab:
         8f:c9:78:a3:a1:1f:16:db:8e:11:b9:4e:86:d4:64:f4:67:04:
         96:0f:df:74:df:c8:99:5a:a7:c6:8d:ce:e2:62:59:fc:67:f1:
         50:0c:79:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:31 2024 by rpki-client on console-ams.rpki-client.org