Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/sqQ12tk3meNnwr0-z1q4HrAWI64.roa
File:                     sqQ12tk3meNnwr0-z1q4HrAWI64.roa (raw, json)
Hash identifier:          +G8r4xYe5ZpJ18zpz6voRxvZq3111RXXUjQVWNVf9D0=
Subject key identifier:   B2:A4:35:DA:D9:37:99:E3:67:C2:BD:3E:CF:5A:B8:1E:B0:16:23:AE
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       06
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/sqQ12tk3meNnwr0-z1q4HrAWI64.roa
Signing time:             Wed 17 Apr 2024 06:13:56 +0000
ROA not before:           Wed 17 Apr 2024 06:13:56 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17955
IP address blocks:        210.56.160.0/19 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Apr 17 06:13:56 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=B2A435DAD93799E367C2BD3ECF5AB81EB01623AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:4a:bf:20:31:a8:b1:97:20:e7:9d:e0:c0:07:
                    b0:b6:66:31:89:7a:bc:d7:3d:27:0c:f6:ee:22:ff:
                    11:22:86:e0:51:69:6e:3f:db:75:4e:73:e4:a1:8d:
                    1f:e8:77:e5:cd:d5:88:70:9d:e4:57:1f:9d:f9:ad:
                    b3:a6:bd:d8:83:73:7e:7b:6d:ef:d3:57:41:a7:70:
                    c5:b0:a3:17:49:56:a7:50:91:fb:d6:b9:97:8a:95:
                    3f:d2:e5:06:29:8d:0b:1b:a5:d6:da:5b:7b:a3:08:
                    3b:1d:c2:9f:28:87:a8:6e:f6:33:a9:ff:56:42:67:
                    4f:d1:a9:fc:41:e6:3f:32:c2:d6:58:a0:b9:82:d9:
                    4e:68:38:a6:73:1f:99:3b:d4:40:8b:f8:4b:2e:02:
                    7f:b8:b7:11:c1:8f:a7:c0:93:8b:f3:23:5f:c2:82:
                    b0:34:39:5e:e9:6a:7e:bf:f4:36:40:05:0c:c9:a1:
                    e5:66:a3:78:9a:59:32:e6:e0:34:2b:ff:c5:f0:fa:
                    9e:e9:e4:9e:1d:25:cd:ca:19:47:4f:a1:09:a9:56:
                    dd:7c:5e:00:98:c7:c1:ce:76:fd:a4:35:3f:7c:80:
                    65:ef:ce:62:1c:cc:bd:ff:b2:eb:cd:61:4e:42:c1:
                    70:9f:16:58:f9:7d:9b:62:b0:6d:90:40:27:dd:15:
                    65:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:A4:35:DA:D9:37:99:E3:67:C2:BD:3E:CF:5A:B8:1E:B0:16:23:AE
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/sqQ12tk3meNnwr0-z1q4HrAWI64.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.56.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         66:b3:a7:b5:cb:d9:64:14:5f:90:11:9b:b0:67:1a:44:16:2a:
         61:dd:95:11:fe:fa:d1:5e:4a:d6:c2:1b:38:a7:f2:4c:68:50:
         5f:2d:af:59:5e:cb:0a:fe:f3:c6:6d:5b:46:85:8b:08:a9:13:
         a0:e7:22:f4:7a:94:f2:ef:01:61:9c:a2:b4:07:5c:59:cb:17:
         dd:3e:3b:fe:23:df:13:17:b0:03:09:72:0a:34:0f:50:79:56:
         8b:5c:9f:39:7e:33:7b:26:27:53:52:7e:44:e4:9a:b5:39:8e:
         6b:73:8f:ca:ee:a5:9e:79:f4:e5:74:b5:80:71:a5:4e:e1:7c:
         26:d2:cd:cd:ad:e8:d5:2d:dc:00:ce:3d:ba:e4:3d:7b:56:03:
         66:2c:23:bf:51:08:ff:37:a9:cb:60:40:01:04:5f:40:81:39:
         4e:b8:73:ba:29:c4:1f:c2:66:9b:5b:e3:d0:cc:ea:2c:f9:34:
         1d:8d:69:fc:9c:57:c5:5d:ae:56:57:02:c0:3d:4f:0f:21:31:
         69:d2:54:5f:aa:fe:30:61:bc:b3:e3:d2:d8:de:12:5a:47:80:
         ab:bd:56:67:91:01:00:1c:da:72:79:01:bd:d0:5e:5a:8b:a0:
         f0:96:bf:e9:56:df:f5:08:ab:7a:db:a1:55:05:5f:a6:96:5b:
         70:d2:fc:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:45 2024 by rpki-client on console-ams.rpki-client.org