Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/8tBOFglYHT4tSx244mNllWhciCM.roa
File:                     8tBOFglYHT4tSx244mNllWhciCM.roa (raw, json)
Hash identifier:          5PClXBf5DUF235ogfiIs1ziTiDNiH9hqNucobIDD5hI=
Subject key identifier:   F2:D0:4E:16:09:58:1D:3E:2D:4B:1D:B8:E2:63:65:95:68:5C:88:23
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       C5
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8tBOFglYHT4tSx244mNllWhciCM.roa
Signing time:             Tue 01 Aug 2023 01:30:35 +0000
ROA not before:           Tue 01 Aug 2023 01:30:35 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     23816
IP address blocks:        124.147.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 197 (0xc5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:35 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F2D04E1609581D3E2D4B1DB8E2636595685C8823
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:ab:00:5a:5a:ed:64:90:28:0a:98:7d:7b:35:
                    e3:bc:91:45:4e:cd:2c:e5:42:71:da:1f:e7:7d:0e:
                    9d:fa:d6:e9:c6:09:45:4d:3b:f7:4e:26:a0:1f:b9:
                    72:f1:c3:d6:87:7c:1c:53:d1:68:a0:6c:68:f4:d5:
                    17:b0:86:e8:d6:2e:f7:11:42:0c:51:ff:aa:c5:a4:
                    6e:22:3c:38:17:d9:b0:cc:4f:9f:08:2f:07:25:97:
                    ed:3c:d1:3c:f0:e0:2a:6b:9f:8a:55:eb:51:33:47:
                    a4:f6:43:08:61:d1:ea:a7:dd:26:e8:a8:22:8e:a7:
                    11:60:e0:a8:c7:3a:7f:44:bd:05:7a:89:91:47:41:
                    27:90:7b:c9:10:93:02:45:08:cb:08:d6:31:f1:f1:
                    28:8b:d8:47:77:72:13:40:04:de:a8:31:79:07:62:
                    4f:a9:cc:e0:aa:de:03:09:fe:c4:c1:9c:30:3c:6b:
                    7b:ba:16:0d:b7:45:2b:35:b2:b0:1d:ba:82:93:01:
                    c7:6c:c5:8c:cd:9a:e6:41:a0:7f:78:30:b6:49:74:
                    ed:08:92:bb:90:c5:0a:9a:73:27:12:cf:94:bf:5a:
                    8b:8d:b5:69:ab:57:a2:b0:b3:e4:6a:da:81:6b:1a:
                    6d:66:49:68:77:05:ce:b0:67:76:b1:f0:34:9b:25:
                    dd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:D0:4E:16:09:58:1D:3E:2D:4B:1D:B8:E2:63:65:95:68:5C:88:23
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8tBOFglYHT4tSx244mNllWhciCM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a0:14:9e:19:51:82:e6:78:83:75:5d:aa:00:5a:f7:49:03:c4:
         12:b1:df:5e:b4:e0:62:5a:e2:69:e5:cf:61:41:db:7f:18:3d:
         cd:8d:d4:5b:46:3f:3d:44:1a:0c:ca:26:7a:e0:49:23:1d:77:
         cc:78:0f:65:7d:5f:ae:5f:22:40:0c:0b:7f:e5:89:78:58:3f:
         8c:d6:2e:f1:44:e8:e9:13:15:bc:1c:c7:c5:ae:4a:08:ba:06:
         0b:d8:7f:28:f4:a6:55:ca:5d:bd:67:b1:ca:86:22:95:26:3d:
         bb:71:1a:b5:3b:dd:32:d8:5e:34:15:92:db:d6:98:67:58:8a:
         25:09:cb:e0:3b:93:92:10:9c:d5:6d:b8:0a:4b:25:59:44:10:
         2d:bc:02:dc:41:75:d9:fc:64:56:fe:51:c9:18:be:7c:a1:53:
         e7:fa:d5:55:59:7d:b3:32:a4:3e:19:16:3b:32:32:cb:f4:65:
         1b:07:7c:d9:76:ca:93:54:08:07:d4:04:04:d1:c0:f9:66:cf:
         a8:fd:66:97:c8:5c:01:3a:9e:8f:8f:35:0a:40:52:7a:b6:77:
         fa:08:ab:1f:be:20:5e:ed:6e:f0:e6:e7:8c:5a:1e:dc:19:b2:
         86:b8:58:b1:89:de:c9:fb:5a:f4:22:0a:8f:4c:02:16:18:f6:
         12:d1:da:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org