Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/7yedpWLkJoXnBBweuYHm7h7YwXg.roa
File:                     7yedpWLkJoXnBBweuYHm7h7YwXg.roa (raw, json)
Hash identifier:          nRLn2CHR/aXZrb6YjtR/+F0fmHI3pUeFIaPmPetgLbA=
Subject key identifier:   EF:27:9D:A5:62:E4:26:85:E7:04:1C:1E:B9:81:E6:EE:1E:D8:C1:78
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0170
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7yedpWLkJoXnBBweuYHm7h7YwXg.roa
Signing time:             Wed 31 Jul 2024 01:34:16 +0000
ROA not before:           Wed 31 Jul 2024 01:34:16 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        202.214.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 368 (0x170)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:16 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=EF279DA562E42685E7041C1EB981E6EE1ED8C178
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:05:76:02:61:1a:a9:5a:05:23:78:76:36:9b:
                    5d:2c:4e:a1:5b:67:97:97:08:23:72:dc:f0:e1:0e:
                    cc:6b:8c:9a:5a:6e:a5:13:b0:2a:ba:30:b4:bf:06:
                    b8:96:2f:04:a5:d8:83:dc:c9:bd:d6:3e:6b:04:a4:
                    35:d2:7c:ff:08:92:62:96:bf:64:28:ec:33:45:63:
                    35:37:84:b5:f6:08:1f:dc:37:6a:ce:44:d4:8b:70:
                    a6:57:33:f9:e2:16:6a:a1:27:29:8b:3f:0b:d8:27:
                    6d:84:bd:61:f1:51:19:31:ec:16:d4:16:8e:87:b4:
                    26:e1:14:a3:a3:ae:47:df:ac:ad:ab:4d:59:7c:0a:
                    21:c8:f8:2d:b2:ab:f6:09:91:4c:43:38:f7:57:98:
                    34:47:df:7c:a7:2b:a1:25:a5:46:6a:be:d7:b1:67:
                    4b:30:07:cd:0a:a3:29:2c:5f:4b:a1:14:a9:97:47:
                    e9:ed:82:9f:1b:3b:30:fd:40:50:4f:87:60:4b:7e:
                    56:a5:62:1d:44:77:7c:17:f3:a1:82:53:ec:a8:9e:
                    fd:b8:6e:52:34:21:8b:9c:b7:db:80:a4:0a:de:96:
                    3d:d7:a0:b5:db:8b:a9:6d:ef:b6:f9:58:3a:18:a2:
                    4d:79:43:41:75:23:b7:be:3b:a9:4e:e1:4b:f2:2c:
                    9b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:27:9D:A5:62:E4:26:85:E7:04:1C:1E:B9:81:E6:EE:1E:D8:C1:78
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/7yedpWLkJoXnBBweuYHm7h7YwXg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.214.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         68:02:98:a9:3e:42:66:da:7c:a6:95:7b:1a:91:37:b2:68:2b:
         0b:ac:5d:38:f0:54:6e:ca:c1:d4:41:af:cf:d1:53:15:1c:8e:
         f8:60:e8:99:15:98:c9:f1:0f:47:5d:0c:8e:f7:96:0b:cb:a3:
         f7:7d:1e:14:7c:54:62:4d:f0:4a:27:5f:b4:23:4c:13:7d:6e:
         bf:9f:0f:91:d3:39:47:3e:3a:ed:1c:b8:37:e3:ba:d0:ba:18:
         f8:8d:84:44:f6:99:09:4e:de:50:0c:ba:8d:35:24:a3:98:06:
         29:33:fc:66:2f:33:96:2c:23:18:31:f8:46:b0:12:43:61:13:
         0e:d9:e4:c5:98:85:78:31:2c:5a:db:ed:68:15:bb:67:4b:cf:
         7b:e4:a0:c8:b7:cf:53:3d:dc:a1:9c:eb:fc:40:b3:d6:93:ee:
         cc:98:1f:b0:b7:a6:8f:79:7d:27:3d:1d:c3:b2:97:1a:c9:10:
         16:f3:73:bf:0d:53:77:6b:79:c7:35:74:13:2d:a7:c9:32:7e:
         aa:6d:22:0b:57:b8:58:58:0e:19:25:b0:d4:b9:14:c8:e9:a1:
         5a:af:e2:f3:9d:4c:c2:e0:78:34:cf:05:1f:9e:16:04:81:10:
         c0:a0:49:c8:76:21:ed:60:18:e6:22:55:10:b8:50:c9:0f:88:
         8d:66:71:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org