Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/-iZBPCctEpXolsGvT7SprdXeASs.roa
File:                     -iZBPCctEpXolsGvT7SprdXeASs.roa (raw, json)
Hash identifier:          u3+WjtSRA+Lv87E1h4o0qFZMKnlbAJldS68AX7auqww=
Subject key identifier:   FA:26:41:3C:27:2D:12:95:E8:96:C1:AF:4F:B4:A9:AD:D5:DE:01:2B
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       1C
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/-iZBPCctEpXolsGvT7SprdXeASs.roa
Signing time:             Fri 11 Aug 2023 07:39:16 +0000
ROA not before:           Fri 11 Aug 2023 07:39:16 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9615
IP address blocks:        202.224.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 11 07:39:16 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=FA26413C272D1295E896C1AF4FB4A9ADD5DE012B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:93:ef:0a:41:60:df:44:51:c4:5b:4b:35:ec:
                    9a:94:93:5f:28:ea:22:49:67:7e:ea:62:8f:45:ba:
                    e0:39:81:8b:fd:fa:21:ce:53:af:67:06:a5:68:8b:
                    04:fd:05:60:71:74:50:b2:71:8a:be:69:68:79:9b:
                    ef:8c:44:8b:21:02:1b:a9:b2:69:b1:21:0e:dc:59:
                    74:0f:3a:a9:e9:2d:b1:1c:62:43:a3:dc:ae:19:4a:
                    72:81:a8:ea:55:2c:e8:92:f1:64:a2:e0:53:36:9f:
                    81:01:6f:0f:4d:46:9a:0d:b4:5c:37:30:b4:03:9c:
                    57:16:f0:4a:57:2e:29:99:f6:fb:9d:17:6c:35:31:
                    55:fe:54:eb:96:ac:5f:3d:6a:fe:0b:e9:1b:79:bc:
                    6b:61:ec:cf:8e:ed:dc:26:86:06:03:6b:ba:fb:ba:
                    a5:7f:39:71:79:51:fb:43:5c:71:89:1d:18:a9:f5:
                    d4:57:c2:51:38:5c:5d:58:16:29:e8:5e:7b:c8:1b:
                    a4:17:5c:94:11:df:f0:36:63:c3:79:b4:3f:c2:ff:
                    9e:b8:ef:9a:8e:c3:bf:e7:56:46:e7:aa:4b:e6:1a:
                    4b:39:73:fd:be:7c:42:b0:cb:b9:3a:55:7d:03:22:
                    93:cf:a9:9f:ee:f2:e4:63:2d:a8:9d:2d:63:f5:2d:
                    22:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:26:41:3C:27:2D:12:95:E8:96:C1:AF:4F:B4:A9:AD:D5:DE:01:2B
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/-iZBPCctEpXolsGvT7SprdXeASs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b5:e9:95:eb:8f:14:14:4e:4d:b7:da:cb:18:6e:cb:63:f5:6c:
         da:56:a4:67:c4:90:a5:96:53:94:77:19:83:d2:5b:26:00:08:
         49:3f:01:58:ac:c6:d3:72:1c:ca:ab:8f:13:4f:63:48:67:ea:
         ad:85:05:11:77:f4:d9:0c:6e:c8:3c:6e:91:ec:2c:d5:15:27:
         b0:e5:44:14:8a:0b:f9:de:73:22:ab:2a:80:6d:a6:56:3c:b0:
         4d:f0:66:90:74:1a:5f:ef:be:82:5d:e9:3f:b5:6a:cc:5a:02:
         b3:9a:82:6d:6d:e1:e4:f9:cd:23:a0:6c:71:9a:f8:3a:bf:69:
         e5:08:c3:eb:f8:f9:60:07:d0:35:49:1d:f7:12:3b:b0:24:3b:
         48:04:cf:a1:e7:79:5a:63:8a:cc:fe:a2:1f:8b:8d:26:97:3a:
         ff:08:68:2d:ec:5a:85:aa:19:9d:f8:d2:9a:18:d8:ea:b8:ca:
         fb:22:9a:83:65:b5:21:f3:fd:bd:bb:55:11:54:25:f8:3e:31:
         fb:a6:12:6b:eb:5e:d4:a9:0a:ca:25:e1:eb:28:dd:ee:7f:95:
         54:13:75:b3:31:54:e6:48:da:a1:d7:c2:85:6e:ad:81:06:b1:
         34:c9:ca:64:99:a7:b9:39:df:46:6b:e2:5a:31:30:74:c2:7a:
         0f:c6:79:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:20 2024 by rpki-client on console-fra.rpki-client.org