Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/99CfOWxeVMTR-AsZ6U49V1uo408.roa
File:                     99CfOWxeVMTR-AsZ6U49V1uo408.roa (raw, json)
Hash identifier:          O4O0AUd6oTcmPipmttjuk23gEUwlMacky3S1YEih4j8=
Subject key identifier:   F7:D0:9F:39:6C:5E:54:C4:D1:F8:0B:19:E9:4E:3D:57:5B:A8:E3:4F
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       74
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/99CfOWxeVMTR-AsZ6U49V1uo408.roa
Signing time:             Fri 01 Dec 2023 01:31:49 +0000
ROA not before:           Fri 01 Dec 2023 01:31:49 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        143.189.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 116 (0x74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Dec  1 01:31:49 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=F7D09F396C5E54C4D1F80B19E94E3D575BA8E34F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:69:08:91:b0:d8:d5:07:77:fc:d0:8c:9d:16:
                    6c:98:c7:fa:af:50:cd:a6:cf:d8:c4:e6:51:d9:8a:
                    06:01:ab:5d:01:3f:60:f3:f2:9c:51:ec:85:cd:6b:
                    d8:36:1a:41:77:b8:4b:c6:44:1c:d0:ae:96:dc:9f:
                    6b:b9:72:d1:b7:21:e6:ed:2b:8b:91:96:b2:ed:b4:
                    36:fa:e8:b8:7b:f5:0c:d8:e3:00:f2:c2:39:c6:90:
                    3d:2d:f4:75:07:c4:1e:2c:f4:0f:87:da:78:53:a9:
                    00:51:82:a3:5c:d3:c4:6b:67:ea:ba:db:26:b4:a0:
                    cb:61:13:db:85:7a:da:06:cd:6f:6b:aa:38:05:c8:
                    08:76:b3:18:a2:13:31:fa:44:3a:7a:6a:3b:28:81:
                    b1:3c:fa:4a:e9:a4:d8:28:8e:34:c2:d5:35:1d:2d:
                    8d:b4:2b:f8:ed:41:c0:0b:25:66:d5:db:2a:ed:b5:
                    8f:0d:c5:2a:60:f6:d9:f7:9d:13:f3:bd:81:c2:3b:
                    f0:73:eb:4f:38:2e:7f:db:58:a7:8e:1f:f0:fe:e2:
                    8a:8d:7a:5f:6a:ba:45:ed:3c:e3:cb:21:7d:dd:a0:
                    89:5f:1c:1f:a2:6a:13:d2:85:7f:d6:9a:f7:a8:db:
                    cc:c2:1b:bc:14:4d:90:92:0b:fb:2d:3e:b0:6e:0e:
                    05:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:D0:9F:39:6C:5E:54:C4:D1:F8:0B:19:E9:4E:3D:57:5B:A8:E3:4F
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/99CfOWxeVMTR-AsZ6U49V1uo408.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bb:0f:66:48:02:cf:fb:59:16:68:36:65:80:f9:9b:22:27:44:
         6b:bd:2a:5c:f4:39:b9:b8:8c:50:4a:ca:3c:c3:a9:5d:e8:04:
         07:3a:54:b0:4c:c0:64:79:ea:b3:7c:45:71:aa:22:56:ca:58:
         aa:ec:27:6c:de:4b:83:67:50:f8:41:82:f7:6d:5e:be:3f:8f:
         24:6e:50:0a:c5:b1:94:1a:86:05:c3:b6:58:a8:08:dc:5a:77:
         49:9f:96:4c:be:a6:5f:af:83:df:79:30:25:36:dc:a1:12:9a:
         f2:03:67:9c:4e:87:b9:a8:30:62:3a:9a:11:2c:3d:69:88:08:
         9e:8e:ff:6b:9e:d3:d1:92:a5:2c:4b:9a:32:c4:0c:cb:18:c6:
         ac:2a:0a:34:78:39:d3:5c:b9:97:89:f3:a6:67:89:3f:c5:a2:
         35:f0:72:f6:4d:92:b6:1a:c5:f1:19:78:71:2c:ee:d0:e2:74:
         d2:8d:2c:78:a5:52:78:2c:b5:ea:f2:0a:b8:c7:0c:b0:ac:ea:
         ff:40:57:87:eb:06:a9:0b:4b:82:ab:19:6c:61:68:12:21:91:
         c8:e6:53:8e:bc:e8:f7:b8:a0:c0:02:e0:4e:1d:25:bc:ea:d6:
         81:17:50:d2:67:5b:9a:90:56:d9:a5:da:05:5b:35:b2:64:b5:
         f2:bf:8c:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org