Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ydb7jyOVed_J_BSfSB3_Exoju5Q.roa
File:                     ydb7jyOVed_J_BSfSB3_Exoju5Q.roa (raw, json)
Hash identifier:          DDwFFoT2NZKhlBGyQSbd1EmpIUsbzH3V+IZXWx4HKcI=
Subject key identifier:   C9:D6:FB:8F:23:95:79:DF:C9:FC:14:9F:48:1D:FF:13:1A:23:BB:94
Certificate issuer:       /CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
Certificate serial:       0E
Authority key identifier: 3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ydb7jyOVed_J_BSfSB3_Exoju5Q.roa
Signing time:             Sat 14 Oct 2023 08:53:03 +0000
ROA not before:           Sat 14 Oct 2023 08:53:03 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     2516
IP address blocks:        202.236.182.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3B44E014A7E9AB8245E165B10E8AD325F3E69FFB
        Validity
            Not Before: Oct 14 08:53:03 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=C9D6FB8F239579DFC9FC149F481DFF131A23BB94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:53:36:52:36:ae:e2:19:93:3f:03:f9:94:64:
                    7f:1a:b8:14:88:4d:f6:58:1c:09:4e:59:84:56:e1:
                    3e:09:8d:06:e4:b6:3f:27:18:b0:f9:57:3f:7a:2d:
                    24:57:80:f1:e8:f7:f9:ba:b4:17:ed:68:c1:b9:db:
                    d0:63:d8:dc:73:d4:ff:5a:9c:33:10:01:5b:31:8e:
                    c3:13:b6:47:6e:65:f9:db:56:a9:05:41:23:1a:85:
                    5e:03:ef:b9:ce:1e:6e:7a:6c:e6:b2:45:ce:d0:fd:
                    60:27:f0:37:88:46:44:f9:ee:f4:aa:03:aa:b2:ff:
                    46:da:9f:ea:72:dc:fb:f2:cc:d9:38:f2:df:7d:91:
                    e3:03:a3:57:fb:27:75:4e:d4:83:4b:4b:57:14:8f:
                    b5:e8:01:0f:9e:4a:6c:fb:23:c2:b0:1b:52:ee:57:
                    3e:b4:7d:b8:1f:44:35:aa:eb:b4:4e:f6:a6:5e:7a:
                    41:57:c2:b1:48:c5:c7:c4:2b:39:3b:cb:f4:f6:c8:
                    76:b2:08:48:14:95:43:17:5a:64:f5:f0:0c:1b:28:
                    51:fa:ed:b4:eb:d9:fd:df:4d:d9:94:de:14:1f:d6:
                    13:fc:16:51:42:cb:c4:a5:06:9c:a5:9c:bb:18:85:
                    cc:b7:c2:cc:19:5d:11:c6:23:f1:20:a4:57:16:de:
                    78:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:D6:FB:8F:23:95:79:DF:C9:FC:14:9F:48:1D:FF:13:1A:23:BB:94
            X509v3 Authority Key Identifier:
                keyid:3B:44:E0:14:A7:E9:AB:82:45:E1:65:B1:0E:8A:D3:25:F3:E6:9F:FB

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/O0TgFKfpq4JF4WWxDorTJfPmn_s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/O0TgFKfpq4JF4WWxDorTJfPmn_s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3795/ydb7jyOVed_J_BSfSB3_Exoju5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.236.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         97:62:83:e3:81:0b:d4:9e:1a:82:5d:a0:94:a2:bc:71:ba:78:
         a9:c0:7e:50:ee:3e:fb:c5:67:94:99:47:5d:4a:a5:41:4d:7d:
         8e:f7:cc:6b:2d:65:f0:89:96:21:52:72:88:e8:cb:48:de:7f:
         26:f1:f4:c8:81:7f:b2:ff:bb:14:da:1d:a7:e2:c0:08:30:88:
         fe:4a:c8:ca:3d:7c:9d:e6:df:6c:1b:4b:0d:5d:49:7c:28:01:
         d1:6d:6a:9d:df:a0:68:eb:1d:6d:dd:96:d4:e0:5b:fa:6c:dc:
         84:a6:e8:ef:5e:b9:e4:03:5e:67:a7:1b:c5:5c:4d:54:72:a8:
         74:98:97:c9:b9:0c:38:4f:54:06:74:68:01:8b:4a:67:3d:01:
         ab:a3:ed:82:a2:4a:9d:03:3d:c8:6f:19:c7:78:81:72:bc:00:
         ca:7f:9a:21:fa:b0:11:51:7e:fa:c8:a2:57:91:4f:ab:d0:98:
         37:0b:80:94:ea:d5:fe:4b:78:e1:dd:18:3f:f6:d8:db:83:dd:
         7d:a1:47:bd:7c:e2:a6:91:95:5e:c9:71:f7:46:59:81:98:a0:
         11:88:d0:6c:b3:cb:87:f3:10:0c:12:23:5d:65:00:e5:25:8a:
         cb:7f:39:fc:7c:1f:4e:91:88:c5:da:73:08:fe:3e:25:ce:cf:
         c4:a0:dd:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:56 2024 by rpki-client on console-ams.rpki-client.org