Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/yqtNUoOyonu1C5MMmd4YCXVjCJg.roa
File:                     yqtNUoOyonu1C5MMmd4YCXVjCJg.roa (raw, json)
Hash identifier:          j2Oxwc84gGOqTO37r9l3wGSk041Xv8w1gfrPm6vAX/U=
Subject key identifier:   CA:AB:4D:52:83:B2:A2:7B:B5:0B:93:0C:99:DE:18:09:75:63:08:98
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       1E
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/yqtNUoOyonu1C5MMmd4YCXVjCJg.roa
Signing time:             Fri 11 Aug 2023 07:39:17 +0000
ROA not before:           Fri 11 Aug 2023 07:39:17 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9615
IP address blocks:        203.141.112.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 11 07:39:17 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=CAAB4D5283B2A27BB50B930C99DE180975630898
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:65:81:52:ce:77:8d:60:37:2e:7a:aa:90:63:
                    fa:d7:c0:37:2f:74:b8:52:53:0a:d3:e7:4a:22:09:
                    0d:dd:1c:83:c1:ad:de:fc:9f:22:bd:7e:f0:70:81:
                    75:9d:6c:47:2a:30:39:05:df:4e:30:e5:1f:91:dd:
                    e2:f3:1e:30:2c:9a:7e:2b:77:3a:2c:fe:ee:f8:86:
                    22:04:93:95:fb:c6:9e:25:65:ab:61:21:8e:78:ab:
                    79:e4:41:30:88:2e:d0:80:fa:51:80:de:b7:76:a9:
                    9e:f3:09:79:02:63:c9:9c:d4:fa:e3:3e:bc:5e:5a:
                    38:85:c7:1b:0c:4b:85:b4:1f:69:0b:e2:a7:c4:c3:
                    de:b4:8a:16:fa:9c:59:cc:86:7d:a3:1e:74:e4:ac:
                    36:4f:73:56:cd:5e:d3:08:1f:bd:01:29:a7:cf:f6:
                    9d:cb:e9:52:3e:f5:a8:c1:b5:fb:59:9a:29:01:ba:
                    d2:a4:f4:ab:18:96:a7:53:93:95:8d:ed:18:36:9a:
                    c4:b9:0d:1d:76:0b:34:55:58:95:93:ab:c1:4b:1c:
                    05:3d:e2:38:e3:e4:42:70:73:80:eb:15:93:84:c8:
                    77:3d:6e:42:68:17:46:0a:37:16:62:85:57:b0:48:
                    d1:2e:54:60:db:7d:f8:62:3e:95:49:3b:00:69:79:
                    5f:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:AB:4D:52:83:B2:A2:7B:B5:0B:93:0C:99:DE:18:09:75:63:08:98
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/yqtNUoOyonu1C5MMmd4YCXVjCJg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         10:c6:ae:f4:2f:ad:5d:b8:4e:78:76:04:9a:56:a1:eb:3b:73:
         5a:19:a3:72:36:cc:3e:3d:89:bf:c6:1c:2a:78:67:e2:7e:4b:
         e6:83:a7:ff:59:17:6e:98:51:6a:3e:6d:d4:4d:b0:23:f0:18:
         1f:4f:4d:98:40:67:df:8a:9f:e5:de:1b:10:46:50:51:7e:ed:
         b7:fc:b7:b5:23:25:43:77:80:ba:77:87:87:e5:68:3b:60:05:
         c9:52:2e:ab:bd:c2:b0:a8:0f:15:3b:17:b4:fd:b3:28:0a:ef:
         74:a6:c4:a8:01:02:aa:28:c4:8d:b5:c5:42:f7:e2:ab:06:eb:
         37:68:28:04:4f:90:48:d9:1c:e6:38:1c:10:d6:de:b9:0c:47:
         30:5f:8e:1e:a0:aa:f7:78:71:0f:d4:c5:03:3d:04:01:50:79:
         07:1d:4d:3c:9c:f5:a2:1e:7c:79:81:48:c7:1d:d3:e9:85:a3:
         9a:8d:fa:cd:c2:f0:85:3e:9e:e5:2b:6e:fe:22:cd:47:30:b3:
         e2:22:19:b3:6d:65:dd:39:d7:bf:84:89:7e:5e:96:5f:c7:ef:
         d4:a0:7b:50:9f:23:a0:37:27:16:24:93:4d:22:a0:ae:c0:8d:
         8a:fd:35:5e:f8:93:22:d5:b9:80:31:9c:74:6a:b6:ac:68:9f:
         bf:4e:87:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:43 2024 by rpki-client on console-ams.rpki-client.org