Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/512/6sFxGQPl1SMBmRLJ15g-JNvNLtI.roa
File:                     6sFxGQPl1SMBmRLJ15g-JNvNLtI.roa (raw, json)
Hash identifier:          Wz5oITGsmSYmIL7r+hLpMoOQOAaZwlfjSvf+uA8WwAQ=
Subject key identifier:   EA:C1:71:19:03:E5:D5:23:01:99:12:C9:D7:98:3E:24:DB:CD:2E:D2
Certificate issuer:       /CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
Certificate serial:       16
Authority key identifier: BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/6sFxGQPl1SMBmRLJ15g-JNvNLtI.roa
Signing time:             Wed 27 Sep 2023 04:29:51 +0000
ROA not before:           Wed 27 Sep 2023 04:29:51 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     55376
IP address blocks:        202.6.68.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BAED0E35A7B58DAC2159F7F1CD740A54B9E8B407
        Validity
            Not Before: Sep 27 04:29:51 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=EAC1711903E5D523019912C9D7983E24DBCD2ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ec:81:0f:e6:d9:45:08:7e:22:a9:c3:db:d8:
                    7f:b7:b7:10:e8:79:8c:48:34:5c:0e:7a:e7:5d:a5:
                    10:5d:26:43:36:1d:d4:55:e1:dc:79:e5:a5:41:03:
                    77:dd:ed:43:38:48:7a:b3:78:eb:85:58:08:64:dd:
                    8d:95:8a:9b:e7:c6:45:94:09:fb:7d:7f:ae:2e:6b:
                    aa:f6:fa:00:4a:fa:d7:b4:65:b6:c5:0b:3a:0a:22:
                    42:fa:6f:26:6c:f1:90:a4:35:09:79:ad:d2:66:80:
                    21:5f:13:ec:8c:cd:c2:8f:9a:83:ab:64:1a:6b:37:
                    d1:25:16:c8:73:4f:95:bd:d6:f3:03:59:34:bc:db:
                    59:c7:8f:f1:53:8d:e7:11:1e:13:ef:c5:9e:a2:bb:
                    ac:ba:ea:13:d8:3b:84:6f:ea:31:90:43:4f:ef:1a:
                    09:ee:c1:33:0b:bd:ef:ed:a4:e1:64:ec:66:18:c3:
                    40:4b:95:fe:39:87:a6:a3:ba:1b:08:72:9b:98:de:
                    05:2a:60:50:10:c8:10:73:2e:6e:a2:7a:71:94:b3:
                    c9:f5:86:ba:53:a0:93:15:fc:5e:7b:79:5d:41:55:
                    7c:f9:9b:28:0d:09:d7:fe:1d:2e:99:3c:8a:65:97:
                    7a:85:c1:26:5f:b1:c0:d2:4c:fd:b2:fa:f9:76:ca:
                    2c:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:C1:71:19:03:E5:D5:23:01:99:12:C9:D7:98:3E:24:DB:CD:2E:D2
            X509v3 Authority Key Identifier:
                keyid:BA:ED:0E:35:A7:B5:8D:AC:21:59:F7:F1:CD:74:0A:54:B9:E8:B4:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/uu0ONae1jawhWffxzXQKVLnotAc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uu0ONae1jawhWffxzXQKVLnotAc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/512/6sFxGQPl1SMBmRLJ15g-JNvNLtI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.6.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:e0:04:9d:1b:a9:98:e6:98:28:78:6a:78:d3:23:eb:bf:ef:
         d8:13:71:ed:bc:56:b3:6a:c2:07:8d:c0:6a:72:e1:dc:e3:b0:
         79:28:a4:b8:19:06:37:ce:5d:30:0f:e9:b3:3f:98:fd:52:91:
         7f:65:e4:6c:42:dd:a8:4c:7c:19:77:b9:97:c3:36:df:97:80:
         a5:c9:d2:19:93:b3:f4:e0:60:52:83:01:88:2d:04:77:ce:e0:
         e5:f4:4b:8d:19:9f:24:94:cf:ad:68:71:bf:48:2a:28:48:84:
         51:36:e9:d8:eb:c8:de:53:18:17:87:15:39:41:d9:b3:ae:80:
         13:10:68:9d:62:48:b4:51:57:e9:2d:90:a0:05:b7:88:ed:93:
         fd:e3:ab:32:5a:6c:21:bd:30:2b:ef:c4:f6:d6:98:76:ca:55:
         ef:6a:44:12:8c:ac:6b:5e:d4:1c:08:27:84:03:d6:e3:b1:3c:
         fe:76:49:68:08:2c:7c:f8:45:f8:e1:ca:08:ee:33:aa:b0:0e:
         a9:6f:b7:4a:cb:00:3b:e3:03:79:22:45:18:7f:af:13:02:3c:
         90:8c:bb:54:22:46:dd:8b:a2:ee:eb:3d:cb:71:ed:a2:37:2e:
         f7:87:88:3e:16:26:5b:b0:a1:d6:e5:99:fd:5a:bd:09:72:63:
         ee:0e:76:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:55 2024 by rpki-client on console-fra.rpki-client.org