Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/jsbndQB9CVAreNVgO-GuNrnUsVg.roa
File:                     jsbndQB9CVAreNVgO-GuNrnUsVg.roa (raw, json)
Hash identifier:          Z2WV/lMqdLwuDgoH9IWKYwW6JGIJHCdeDTVIBwCtq5k=
Subject key identifier:   8E:C6:E7:75:00:7D:09:50:2B:78:D5:60:3B:E1:AE:36:B9:D4:B1:58
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       26
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jsbndQB9CVAreNVgO-GuNrnUsVg.roa
Signing time:             Thu 27 Jul 2023 16:48:15 +0000
ROA not before:           Thu 27 Jul 2023 16:48:15 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9605
IP address blocks:        158.199.32.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 08 Jun 2024 08:46:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jul 27 16:48:15 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=8EC6E775007D09502B78D5603BE1AE36B9D4B158
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:28:65:a6:9a:28:e9:26:09:2c:df:c5:98:ae:
                    39:ba:4d:c8:52:7c:3c:07:40:fc:0e:41:87:b4:a1:
                    da:49:da:d6:65:93:56:57:ce:34:99:1c:33:b1:c9:
                    ea:06:4f:dd:92:d8:a3:8e:92:68:1c:c9:05:23:9a:
                    59:f2:0a:b7:a7:ae:c9:d6:84:ac:56:ae:42:ee:70:
                    76:ed:24:49:04:5e:3e:21:ce:d2:99:15:e9:f9:7d:
                    de:d8:7b:17:00:69:a9:67:93:5a:76:e6:0f:85:98:
                    42:9d:0c:44:99:28:52:3a:1d:5c:ae:20:f6:41:60:
                    3d:e9:3a:2d:39:2b:46:cb:92:65:49:f6:f3:29:34:
                    18:f8:c0:61:0b:95:44:8b:17:2e:8c:ae:48:fc:9b:
                    37:dd:f1:ec:ef:50:3b:78:9e:21:c7:35:82:e2:bc:
                    22:3e:52:c4:50:17:39:44:ac:5b:dc:58:d2:6a:b0:
                    63:69:2c:61:14:ba:a8:ca:b2:0c:5d:81:05:03:f3:
                    e1:f2:b5:e8:e9:89:87:f4:93:bd:4c:6b:96:ce:da:
                    0c:1a:5c:0e:a2:c1:86:65:78:55:c3:fc:f8:82:ed:
                    aa:cb:2e:97:5d:29:6c:b4:fc:f7:ef:d8:31:54:79:
                    7c:c2:25:9a:7a:62:3d:af:63:0a:94:71:01:88:e1:
                    c0:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:C6:E7:75:00:7D:09:50:2B:78:D5:60:3B:E1:AE:36:B9:D4:B1:58
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/jsbndQB9CVAreNVgO-GuNrnUsVg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.199.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:43:66:bb:dd:b3:2f:d8:25:50:25:ef:47:62:48:0f:ec:9b:
         7d:46:29:63:fd:4c:2c:d0:25:37:d0:01:51:59:fa:28:a4:1b:
         09:10:85:3d:b4:c6:19:9f:0b:ab:61:09:e3:56:e2:88:8f:52:
         73:17:77:4d:6c:94:06:98:37:b8:86:65:5c:09:73:6b:5a:f1:
         88:7a:14:0b:8b:41:72:7f:a9:27:db:eb:3b:23:7f:19:f7:8f:
         90:31:d1:b7:5c:23:98:38:74:f9:18:83:23:46:e6:be:23:60:
         c2:27:18:61:88:d0:ca:e8:2f:0c:24:b7:db:e9:d6:ba:02:7e:
         e7:e7:fb:63:bd:58:78:2f:fa:d7:cc:52:20:49:37:4d:ab:d4:
         86:0b:c9:48:87:3b:9c:ce:cb:79:6a:1d:9d:1f:47:cb:a9:dc:
         d6:aa:57:d5:4c:17:05:24:3f:a5:fe:53:69:08:1e:91:d0:50:
         24:a2:c4:19:66:b1:d2:78:d6:73:f7:55:1f:94:39:c6:22:41:
         bd:27:96:f1:3b:d9:82:c2:e4:1b:0a:2b:2d:46:cd:ad:26:95:
         39:98:30:14:02:47:b2:73:e7:1f:47:28:b1:15:8b:6f:60:26:
         57:80:99:95:35:fb:41:f0:f5:a5:27:e9:22:96:23:9d:c2:35:
         66:43:89:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:48 2024 by rpki-client on console-fra.rpki-client.org