Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/PO2W_IoeYgih_27jsfiPNMm6vrQ.roa
File:                     PO2W_IoeYgih_27jsfiPNMm6vrQ.roa (raw, json)
Hash identifier:          6a3GDjggqCPOa7vZ87xWkzNMKABvaMNLmolFpH0H3p0=
Subject key identifier:   3C:ED:96:FC:8A:1E:62:08:A1:FF:6E:E3:B1:F8:8F:34:C9:BA:BE:B4
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0171
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PO2W_IoeYgih_27jsfiPNMm6vrQ.roa
Signing time:             Wed 31 Jul 2024 01:34:16 +0000
ROA not before:           Wed 31 Jul 2024 01:34:16 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        210.128.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 369 (0x171)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:16 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=3CED96FC8A1E6208A1FF6EE3B1F88F34C9BABEB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:79:38:ed:4a:66:a4:3d:8a:81:cb:f2:3a:ea:
                    e2:4c:18:8b:98:f1:a1:05:9a:43:ec:8c:3a:1f:6a:
                    4b:e9:9e:b9:7a:79:1b:6a:03:3a:00:ed:9c:70:1b:
                    17:5e:cd:bb:a0:87:ff:b1:58:df:40:bb:6d:67:a7:
                    9b:a9:17:98:6b:4d:25:d4:91:98:f9:96:30:73:c5:
                    13:1a:fc:1f:3e:56:e8:54:f8:f9:e2:93:cd:61:6b:
                    98:ad:30:0f:20:df:b7:45:88:b3:68:d4:2d:0d:ef:
                    66:a1:bc:8e:e0:94:0a:e9:a9:fc:68:14:5b:d3:01:
                    2d:33:f5:19:85:16:21:13:32:06:09:16:6d:82:76:
                    be:75:fd:b1:6a:86:7e:3e:7d:25:db:10:e0:10:3e:
                    fc:14:ed:95:ca:a1:fa:84:df:23:75:aa:0d:dd:79:
                    15:ba:a0:3f:35:1b:fe:39:0c:f2:1b:18:bf:68:ac:
                    76:a8:e8:22:c0:c0:41:40:7c:69:1a:c2:2c:90:97:
                    e9:71:ee:34:5c:bc:c7:dc:33:0d:50:a2:56:38:08:
                    af:03:4e:3d:2a:25:12:d7:7f:10:ba:1f:ed:f1:09:
                    ae:e8:ab:bf:97:05:84:c7:98:67:60:cc:78:78:09:
                    85:44:da:f5:a2:4c:9f:0d:12:8f:89:eb:ee:41:59:
                    98:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:ED:96:FC:8A:1E:62:08:A1:FF:6E:E3:B1:F8:8F:34:C9:BA:BE:B4
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/PO2W_IoeYgih_27jsfiPNMm6vrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.128.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a6:38:47:81:1c:ee:d9:5c:9f:3c:0b:97:df:8c:c7:41:71:1d:
         39:f2:46:be:08:fe:92:09:96:3a:52:8d:8b:4f:83:d3:e8:83:
         15:d8:2f:72:69:8a:e5:63:0f:66:7d:be:8c:df:ab:2b:80:ab:
         d6:29:b3:a0:0f:1b:34:53:0a:08:22:5a:03:43:de:bf:ab:a6:
         ae:90:cf:d6:a0:6f:b7:3e:ee:57:de:de:9f:b8:63:7d:f0:86:
         86:46:e4:f2:7f:09:b2:97:11:69:47:c3:86:42:b8:94:48:ff:
         b5:7f:46:12:15:e0:c4:48:01:8d:d1:17:02:eb:93:6c:7c:9d:
         ed:db:46:61:dc:fb:00:5c:1e:0b:5b:b9:e3:eb:46:08:18:4b:
         30:56:b5:e5:65:d9:5e:59:bf:18:68:f5:e0:bf:aa:d9:96:3c:
         2c:16:79:e0:de:89:bb:3e:a1:3d:be:1d:08:1f:64:e4:16:0e:
         53:34:23:f8:ba:ec:ec:a8:51:d6:0a:3c:be:e3:14:dd:28:d2:
         73:00:d8:29:3b:38:d9:43:e0:db:5a:76:97:9a:68:2d:1f:ba:
         bb:92:bf:7c:99:53:b1:3a:ce:c0:b6:87:57:65:ac:9d:00:78:
         b1:b8:90:5d:81:d5:9a:9d:e3:7d:f8:17:f4:e9:6f:77:f0:88:
         f3:48:74:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org