Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
File:                     QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa (raw, json)
Hash identifier:          cL5eJ3tA/enjNEWR6R+EC6wI2CIaNUK2Ts1GTAKFrcc=
Subject key identifier:   43:0B:D2:C9:75:8B:41:8E:65:F0:C7:97:21:E4:8F:DF:15:F8:14:28
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0157
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
Signing time:             Wed 31 Jul 2024 01:31:19 +0000
ROA not before:           Wed 31 Jul 2024 01:31:19 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        220.208.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 343 (0x157)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:19 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=430BD2C9758B418E65F0C79721E48FDF15F81428
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b2:c4:de:a8:81:9d:03:53:01:73:6c:3c:df:
                    98:1c:6a:f7:c0:dc:28:0e:5a:19:55:ed:05:17:0e:
                    c9:52:b2:1b:b9:7f:24:76:3b:02:da:c1:dc:96:52:
                    92:ae:00:9b:5d:48:3b:6b:c9:9d:24:e2:c9:07:99:
                    94:20:1b:47:56:f8:30:cd:b4:68:5f:14:d9:46:b9:
                    c5:17:70:ec:39:ad:80:72:6c:c0:b2:de:5d:9d:90:
                    6b:4e:74:24:3a:69:28:8a:cd:e5:06:d7:5e:2c:2d:
                    9c:21:f1:bb:69:08:d7:f0:ec:71:84:c9:bc:dd:8a:
                    55:fc:4e:13:aa:ea:7c:16:ea:24:4e:ed:9e:1f:af:
                    84:5d:94:fc:2e:92:b5:53:9e:30:ab:a8:4d:76:78:
                    c5:5f:24:65:cc:15:36:84:b1:28:80:6d:86:f1:54:
                    78:98:2c:e0:9f:eb:fa:09:a1:66:7a:7e:b9:0f:d5:
                    56:d2:16:47:dc:7b:6c:9f:a3:6a:ba:1b:3a:a4:4c:
                    3b:ad:d4:7c:76:6e:d0:cd:b2:83:64:50:69:59:91:
                    e3:af:d8:e1:44:51:d5:bf:50:27:6e:ad:05:fc:db:
                    9c:99:68:4f:6a:0f:ef:9d:46:94:15:3d:f8:f7:12:
                    a3:c0:eb:fa:39:86:e8:06:8c:2b:2b:6a:da:a5:e8:
                    d6:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:0B:D2:C9:75:8B:41:8E:65:F0:C7:97:21:E4:8F:DF:15:F8:14:28
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/QwvSyXWLQY5l8MeXIeSP3xX4FCg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.208.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0e:a1:10:54:1a:bb:9b:26:af:70:ce:eb:74:a1:f1:cf:64:a3:
         11:22:dd:9d:cc:de:f8:af:f1:d7:b1:a2:2c:3a:18:ee:4d:e3:
         7b:98:7e:7e:84:b4:39:28:7b:dd:70:32:e6:a8:7b:e5:ff:24:
         3f:74:2d:ee:ed:e5:fe:f7:cd:9d:72:a1:b9:e3:82:40:52:13:
         80:82:b8:12:ac:d7:f4:56:98:f2:ad:a6:91:ac:e3:80:d6:03:
         8a:cd:5f:50:b7:65:7c:4a:2d:aa:60:8a:b1:02:74:bf:69:bc:
         1f:0e:21:9a:25:21:9a:42:60:49:8e:0f:3a:fa:f3:f4:fd:c1:
         f0:cc:65:0f:c6:82:e3:83:ca:1e:6f:20:2c:41:38:71:64:c9:
         b6:15:59:7a:36:45:d1:e5:f6:db:eb:2f:21:1f:22:68:4a:8f:
         6d:3e:60:b2:db:84:8f:1b:bb:04:9b:81:a1:6e:04:3f:ae:3e:
         be:df:1b:8b:28:22:cc:35:c2:76:d4:44:fc:5a:11:e3:bc:82:
         4d:c9:29:df:5b:21:0f:d3:d1:86:99:ba:1e:d5:7f:3a:b6:7d:
         0e:65:35:00:8e:94:18:6d:09:99:fc:e9:d3:e9:08:b9:f2:1e:
         83:84:77:b6:18:2a:7b:58:c9:0b:de:61:89:fd:98:2a:8a:41:
         c9:f8:56:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org