Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/AOFhkipnxKTAp6Y0XGszOGLsf6E.roa
File:                     AOFhkipnxKTAp6Y0XGszOGLsf6E.roa (raw, json)
Hash identifier:          x9h3xZpgrJWQRStm5lG5TxdPd5yqULuAs1H6X4b6nGs=
Subject key identifier:   00:E1:61:92:2A:67:C4:A4:C0:A7:A6:34:5C:6B:33:38:62:EC:7F:A1
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       69
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/AOFhkipnxKTAp6Y0XGszOGLsf6E.roa
Signing time:             Wed 31 Jul 2024 01:31:15 +0000
ROA not before:           Wed 31 Jul 2024 01:31:15 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        157.65.192.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 15:59:50 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul 31 01:31:15 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=00E161922A67C4A4C0A7A6345C6B333862EC7FA1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c2:88:b0:ca:bf:ce:77:bb:78:34:a8:fd:e7:
                    56:7b:37:3b:31:17:86:6b:1a:94:7c:80:b2:84:c3:
                    19:9d:17:9e:d7:ec:3a:3e:ce:a9:4e:26:0f:37:d6:
                    ed:c7:32:1f:9b:1a:4b:ec:69:d4:47:66:6e:be:aa:
                    f5:51:b4:a2:b6:44:38:c4:cd:35:f9:27:65:83:d5:
                    9c:ae:b3:7d:e4:ff:21:e7:2f:18:89:9b:71:57:ca:
                    fa:8a:68:f2:91:c3:0e:3c:f3:87:97:aa:09:f6:e1:
                    e9:55:fc:34:c7:50:d5:56:31:78:8e:bf:51:f7:7c:
                    53:c6:0f:9b:45:66:04:0c:fb:b6:6a:5c:3b:3e:49:
                    f1:17:56:a8:ae:08:ce:4f:12:81:cd:ae:b4:52:db:
                    fb:0b:72:e2:26:26:99:f4:42:5d:68:a4:a8:3e:64:
                    a3:19:54:c9:23:33:aa:3c:59:fb:37:fe:cb:2c:07:
                    0c:9f:95:6f:79:1e:01:9d:86:83:d4:2b:da:30:fc:
                    61:83:d2:a3:5f:73:e5:54:b6:c3:74:c7:60:fd:91:
                    64:fb:b7:b8:44:30:84:6f:17:f9:a4:d9:d3:59:8f:
                    6a:7b:59:72:99:a8:1d:4a:bc:c9:3c:2e:6c:02:e1:
                    c8:c5:6d:d9:af:b9:91:6e:41:8d:b2:7e:46:56:ac:
                    7d:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E1:61:92:2A:67:C4:A4:C0:A7:A6:34:5C:6B:33:38:62:EC:7F:A1
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/AOFhkipnxKTAp6Y0XGszOGLsf6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.192.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a1:27:3c:7c:dc:2b:91:32:60:41:32:b1:73:17:35:5f:49:bd:
         1a:f8:a3:7b:3e:90:9a:ab:71:d2:86:5d:0d:db:91:7b:87:4b:
         59:cc:0e:2a:a4:80:ae:41:be:e2:53:e2:86:50:59:08:18:81:
         0d:45:b3:cf:f2:51:b1:6a:d3:01:c9:e4:09:38:49:71:b8:f7:
         93:d2:90:15:05:bd:74:2b:e1:20:50:07:5e:71:c6:be:f9:52:
         d9:2b:b7:4a:00:41:8c:8b:f9:ba:e7:52:e7:5a:e9:40:05:21:
         b1:75:81:38:5a:44:d0:c7:b1:08:5c:a2:b7:00:c4:cd:a0:0d:
         8a:e2:cb:98:1e:80:cd:9d:8d:eb:da:54:df:f2:7c:81:9f:96:
         88:0d:7c:6a:bf:3d:10:27:5b:f7:13:c8:4c:30:1c:3d:a8:7d:
         88:79:aa:25:81:40:7f:f0:2e:d7:bd:d9:bb:6f:85:33:ad:92:
         b6:0e:b9:65:f3:4d:ef:fb:b9:53:91:30:3a:33:58:ed:ea:f1:
         a8:65:76:7f:75:28:96:eb:5b:37:c3:7a:e1:03:80:72:fb:ef:
         fd:0b:a7:98:6a:57:e4:bf:74:47:50:07:37:f2:45:42:3c:58:
         53:20:5c:c4:b2:16:53:d0:b1:45:86:60:94:9c:06:92:df:4f:
         3e:f5:a0:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 22:04:18 2024 by rpki-client on console-fra.rpki-client.org