Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/aSIRF3hOdG3GSraGb__Te3VoiBM.roa
File:                     aSIRF3hOdG3GSraGb__Te3VoiBM.roa (raw, json)
Hash identifier:          ZwhkRDvwvwKV2YEooqJ2ozCl/VZtEeKR3bhWjs/PLa8=
Subject key identifier:   69:22:11:17:78:4E:74:6D:C6:4A:B6:86:6F:FF:D3:7B:75:68:88:13
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       F6
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aSIRF3hOdG3GSraGb__Te3VoiBM.roa
Signing time:             Fri 01 Dec 2023 01:29:45 +0000
ROA not before:           Fri 01 Dec 2023 01:29:45 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        114.31.80.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 246 (0xf6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Dec  1 01:29:45 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=69221117784E746DC64AB6866FFFD37B75688813
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:7a:3e:c9:fd:c2:09:ec:8d:28:b7:4e:7c:
                    03:39:4e:2e:05:b7:e2:0a:2e:00:e8:05:a2:28:2c:
                    4a:01:dd:c1:04:4c:d2:ec:51:a3:2d:54:77:f7:15:
                    85:7a:93:3d:2f:f0:3f:37:a6:f1:23:8c:3e:52:42:
                    02:68:f7:3c:2a:f8:52:42:b1:04:37:ba:b9:f9:f9:
                    7c:35:29:22:cf:ca:a8:05:3a:94:f3:8c:b6:14:21:
                    78:79:62:18:17:7f:03:a2:05:83:e9:dc:82:2c:9f:
                    63:d7:f9:84:47:84:46:01:ea:82:4a:bf:e6:e8:a0:
                    b9:5f:32:f0:0c:18:95:17:e5:44:4e:f7:97:5e:e3:
                    7a:a4:96:f9:ad:2a:a7:d5:68:0e:f3:5b:66:f7:45:
                    19:4e:44:b9:11:7a:04:62:ed:b6:4a:fe:a7:aa:5d:
                    98:3d:e9:4a:e7:ad:ef:e6:4a:df:10:e2:32:ca:e5:
                    bf:34:4f:3c:5f:3d:a8:15:c9:82:9d:9f:63:ca:d0:
                    81:3c:e6:be:0d:44:11:74:b2:23:0c:4d:98:e4:45:
                    b3:f3:6e:cc:42:17:55:14:bf:1a:51:cc:e5:dd:67:
                    c8:00:03:58:a0:73:da:f5:b6:ec:ae:bd:53:c1:ba:
                    6c:46:3d:db:0d:00:44:ac:18:0d:7e:87:c5:27:15:
                    74:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:22:11:17:78:4E:74:6D:C6:4A:B6:86:6F:FF:D3:7B:75:68:88:13
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/aSIRF3hOdG3GSraGb__Te3VoiBM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         ae:36:a0:77:d4:30:1e:ea:3e:9a:f6:f5:d1:a0:9b:10:87:66:
         e9:44:ba:e6:73:13:c0:da:b8:29:72:66:f3:8a:1c:f5:3d:4e:
         49:65:3a:f9:7a:78:80:f4:b6:79:a0:f4:8a:f8:73:b2:a5:44:
         91:4b:d8:b4:62:da:e5:c7:fe:b6:79:15:a3:91:bb:26:18:52:
         f5:b4:cf:d4:d3:84:f7:82:0d:84:9f:0c:25:b4:bf:bf:a5:cb:
         5b:31:b1:e9:0e:83:f2:b2:0d:3c:85:b2:ea:f1:4c:5b:52:07:
         14:01:17:1d:2d:25:2e:17:90:34:4f:7a:9e:e1:40:80:44:32:
         d4:21:00:e1:ef:ff:a5:dd:a6:e0:91:82:fe:52:1f:10:69:ff:
         e0:7b:a8:85:0a:d8:8b:0f:da:bd:f2:86:2b:14:7b:2f:fa:4a:
         07:c2:82:88:71:95:e8:41:84:db:37:d5:5b:73:2b:2c:52:ad:
         4d:16:e9:7b:5c:a1:fa:34:7e:47:fb:97:f3:b6:ca:f7:36:84:
         1e:92:3b:b8:41:a4:d4:43:a0:8b:02:53:99:0e:fe:2c:45:c5:
         31:3f:cf:7b:b3:09:65:aa:c7:97:a3:59:e5:33:0e:9f:f4:a0:
         d1:a1:1b:09:c2:a6:7b:d3:f3:3f:36:b0:52:6c:2a:bd:f1:0b:
         42:04:13:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 03:14:27 2024 by rpki-client on console-ams.rpki-client.org