Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/UhV7AKYHClghVf5_R11P9BlWhCs.roa
File:                     UhV7AKYHClghVf5_R11P9BlWhCs.roa (raw, json)
Hash identifier:          gKMNPMefhs5AuI6ROCs5poMTPSdzDvo6qIsCWXQN/4o=
Subject key identifier:   52:15:7B:00:A6:07:0A:58:21:55:FE:7F:47:5D:4F:F4:19:56:84:2B
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       D0
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/UhV7AKYHClghVf5_R11P9BlWhCs.roa
Signing time:             Tue 01 Aug 2023 01:30:40 +0000
ROA not before:           Tue 01 Aug 2023 01:30:40 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     7530
IP address blocks:        210.231.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:49:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 208 (0xd0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Aug  1 01:30:40 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=52157B00A6070A582155FE7F475D4FF41956842B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:3a:3c:32:00:0b:fa:18:6c:7b:a5:30:c7:02:
                    d7:ef:6f:72:4a:88:82:1c:4f:f0:87:15:86:61:b7:
                    00:18:7a:85:35:2c:60:34:d3:17:b1:3d:7d:85:4b:
                    cc:c4:8e:89:d7:1a:16:22:c6:d4:f8:43:f3:b3:35:
                    74:39:c9:13:92:4e:71:70:ed:23:09:fa:dc:a9:04:
                    a5:54:d5:15:46:b1:e8:2b:53:e6:2d:ba:8f:02:a1:
                    e7:7a:3d:80:1b:c0:6f:e0:17:7d:37:df:b8:2b:72:
                    f1:d6:fc:1a:51:56:63:1a:c5:8c:59:28:33:d5:35:
                    fc:a6:41:5d:d1:a7:ca:03:a0:95:d7:0b:10:05:ed:
                    c7:00:c0:c0:62:5a:61:f5:c6:35:16:94:b6:ac:3c:
                    5b:0d:cd:e3:a0:0d:cb:cb:75:eb:76:83:a2:bd:19:
                    0d:74:b0:8b:15:2d:eb:71:ea:fd:74:ba:f9:92:84:
                    de:e4:32:42:9d:e3:c0:77:19:bc:01:3f:11:a5:38:
                    33:12:a0:16:89:2b:8a:b5:50:5d:2f:c3:b6:79:1a:
                    4f:99:11:b2:27:ad:5f:9f:c2:40:03:ae:20:9b:a5:
                    57:ff:68:ea:51:de:5d:43:0e:87:26:89:99:45:de:
                    c7:22:8a:6b:6b:c0:b2:c5:c5:39:07:7b:47:95:68:
                    bc:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:15:7B:00:A6:07:0A:58:21:55:FE:7F:47:5D:4F:F4:19:56:84:2B
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/UhV7AKYHClghVf5_R11P9BlWhCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.231.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         0a:c9:87:7e:cf:13:e4:ed:0d:6b:fa:2d:cd:5f:b4:45:61:b6:
         a1:7a:9e:f0:1e:7e:bd:05:7e:64:1e:9d:33:f2:17:c5:e4:27:
         ca:44:73:45:d5:da:15:d6:de:f3:3e:ca:0b:e6:6f:a3:0e:a6:
         07:60:b4:76:36:cb:a4:22:33:44:70:4d:0b:c3:76:b2:35:9c:
         84:f8:3c:86:29:5b:18:61:fb:76:17:31:05:69:fe:06:84:f7:
         4c:67:5d:e5:57:82:8b:70:0a:e1:cd:f2:a0:fa:97:30:63:d7:
         6d:7b:63:41:3f:e4:44:ce:06:79:18:bc:ab:90:b3:a9:f7:4a:
         bd:1c:3f:f6:dc:d6:18:8b:75:51:45:b7:50:25:0b:9c:e8:63:
         6a:ca:09:36:8b:3c:af:71:b3:40:91:d9:67:84:6a:1c:b6:8a:
         4e:67:17:97:b5:bc:84:2c:cf:33:63:e6:f4:d0:d8:a8:89:b2:
         ec:24:2b:03:c2:ea:5c:a4:d0:0a:64:1c:ba:38:3b:81:72:ca:
         c9:ac:ce:96:8f:b7:54:b8:a3:9e:57:3a:75:c0:7d:ce:c4:08:
         46:63:6a:cd:aa:95:86:19:89:86:51:78:dc:7d:b9:7d:ec:3f:
         4f:36:03:39:8e:cd:aa:8a:83:85:be:13:ec:f1:8f:93:b4:ff:
         d4:bb:35:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 05:29:00 2024 by rpki-client on console-ams.rpki-client.org