Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
File:                     kJnrecAy44-aH5_NZ7uLprG_cTc.roa (raw, json)
Hash identifier:          nlJVoSVqWnOi5bAMYABUYh2Eyq+48IozBjs6LtnmiyI=
Subject key identifier:   90:99:EB:79:C0:32:E3:8F:9A:1F:9F:CD:67:BB:8B:A6:B1:BF:71:37
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       6B
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
Signing time:             Wed 01 Nov 2023 01:29:45 +0000
ROA not before:           Wed 01 Nov 2023 01:29:45 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     2527
IP address blocks:        209.17.64.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:51:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Nov  1 01:29:45 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=9099EB79C032E38F9A1F9FCD67BB8BA6B1BF7137
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:a7:0a:86:2b:6d:11:75:cb:47:09:e6:80:e9:
                    65:62:c5:df:5e:a7:c0:a9:1c:93:ec:be:6a:cd:b1:
                    bf:70:13:fa:f0:40:6a:ff:24:1d:28:9b:f2:6a:3b:
                    df:2e:df:58:3f:2d:2b:45:03:12:3a:4f:70:69:2a:
                    6c:eb:39:44:fa:86:92:75:f5:dd:a9:b8:ca:c4:eb:
                    06:cf:c0:db:e7:01:29:ce:d8:39:6e:1d:61:e3:7a:
                    44:83:a4:24:d4:e9:41:43:51:70:3b:14:69:1b:3c:
                    81:9f:c5:15:3b:25:3b:47:97:87:66:05:3c:33:2c:
                    9a:ec:dc:6a:2f:15:53:6e:f2:2f:65:32:f2:55:47:
                    ff:7e:8f:76:b2:58:5b:aa:f3:41:4f:fc:77:60:97:
                    2a:1b:8d:55:96:7d:be:ae:e8:99:fb:03:90:b1:1f:
                    db:94:b1:7d:54:95:c4:ac:cf:b9:2b:69:5f:d8:f0:
                    2a:dc:ca:73:26:5e:d9:f8:a1:64:dc:ab:e2:14:3a:
                    76:30:41:b7:ef:d1:7f:d1:f0:14:6a:fe:aa:5f:c9:
                    a6:01:94:2b:f7:93:16:7c:b8:9f:e4:70:9a:fb:fe:
                    af:a5:2b:a1:46:b0:f3:e3:15:34:26:b9:ad:8f:85:
                    ad:fd:0c:1e:4a:f2:d5:d5:d9:c1:cb:d7:ff:cb:ef:
                    5e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:99:EB:79:C0:32:E3:8F:9A:1F:9F:CD:67:BB:8B:A6:B1:BF:71:37
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/kJnrecAy44-aH5_NZ7uLprG_cTc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  209.17.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         86:f5:0d:3b:e4:53:fe:c5:aa:ec:b8:c6:e6:cf:66:fa:ac:a4:
         3b:1c:25:da:90:7f:f2:51:cf:af:83:7b:b7:fa:bf:33:2f:3c:
         c0:b9:60:b0:12:57:4d:8c:cd:2d:69:98:13:2d:39:b7:e2:db:
         41:bb:58:ac:48:bc:73:af:ec:9e:b1:3d:ee:6b:ae:02:f6:36:
         30:7b:d9:03:3b:0b:e7:71:dd:5a:9c:b1:e0:d7:d8:2f:9e:ef:
         56:40:bd:3e:66:1b:1d:95:62:d6:99:58:68:07:b4:46:87:44:
         23:dd:18:49:e3:34:c6:1f:d4:49:30:71:f8:4d:64:45:ad:df:
         dd:31:bf:c3:50:91:d4:49:ea:5c:cc:2c:81:f9:c1:bd:94:75:
         00:13:75:92:67:39:38:bf:05:45:ab:17:16:6d:66:4c:37:f5:
         91:5c:f6:42:03:94:a9:d0:a9:2c:57:cc:a3:d7:c8:7a:fc:62:
         54:db:fb:94:4b:4c:75:fc:84:82:4a:57:62:0d:ab:3e:6a:0e:
         44:3d:95:3b:de:a0:9e:31:8d:dc:e1:41:48:bd:cf:83:d8:78:
         c7:5d:44:f0:34:92:1b:bd:1f:28:85:68:18:c7:5a:64:c8:82:
         b3:19:3b:65:48:86:35:05:0d:4c:a0:41:53:0b:d0:97:6b:65:
         f3:75:30:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 28 04:55:52 2024 by rpki-client on console-fra.rpki-client.org