Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/x-_YN8_mk7LqyoBvOipvke9oCUs.roa
File:                     x-_YN8_mk7LqyoBvOipvke9oCUs.roa (raw, json)
Hash identifier:          L/R8vcM/srKPZuTTtoCg7EeqoglPI9tNPB2wkGMnV78=
Subject key identifier:   C7:EF:D8:37:CF:E6:93:B2:EA:CA:80:6F:3A:2A:6F:91:EF:68:09:4B
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0135
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x-_YN8_mk7LqyoBvOipvke9oCUs.roa
Signing time:             Wed 01 Nov 2023 01:29:31 +0000
ROA not before:           Wed 01 Nov 2023 01:29:31 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     32787
IP address blocks:        210.130.210.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:34:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 309 (0x135)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Nov  1 01:29:31 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=C7EFD837CFE693B2EACA806F3A2A6F91EF68094B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:89:bd:d3:2f:2e:7e:59:72:5d:a1:50:87:1b:
                    33:d5:bd:b4:7d:56:1b:c1:e3:5e:29:71:43:5c:ee:
                    90:68:04:7d:ed:a0:d4:9d:42:a5:dc:79:dd:7e:d8:
                    42:2f:c1:4b:df:4e:05:00:05:ad:12:63:f3:20:10:
                    0a:0c:94:75:4f:56:9a:59:93:c2:f6:a5:6b:4c:a8:
                    59:73:27:e7:f3:c5:71:4e:0b:10:8b:d8:46:73:c2:
                    ac:57:aa:f7:8b:0f:01:c4:8f:39:78:e6:a9:ed:f2:
                    ad:60:dd:70:21:03:d6:eb:0f:86:34:77:e8:50:21:
                    8d:ea:01:a1:9d:08:38:18:64:ab:18:77:f8:aa:2d:
                    0c:1d:22:7d:0a:7b:2d:ff:ef:69:84:f9:bf:b1:4b:
                    21:0e:26:8b:f1:6f:d3:67:47:6f:c7:cb:e8:82:67:
                    3f:92:bf:00:0d:8f:18:d0:df:75:fa:29:4c:0f:fd:
                    06:f2:5a:d9:a6:51:26:e7:42:c9:eb:c5:fc:bb:9d:
                    93:01:62:2d:fa:f4:22:a6:a8:30:45:6b:83:a3:27:
                    f5:6a:2f:8f:da:8e:d7:c9:b9:a3:25:4f:a6:f0:b1:
                    9f:7c:c8:e9:ad:03:59:2d:76:be:ce:5f:06:77:d0:
                    f6:85:d9:44:9a:34:7d:94:b7:80:89:71:64:99:87:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:EF:D8:37:CF:E6:93:B2:EA:CA:80:6F:3A:2A:6F:91:EF:68:09:4B
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x-_YN8_mk7LqyoBvOipvke9oCUs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.210.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1b:ea:fc:60:72:79:c0:90:89:b0:02:6b:b2:4c:f1:0f:16:97:
         48:1e:a9:1d:19:9a:ae:7b:f2:98:dc:4c:ab:15:e6:53:96:c9:
         c7:5b:7c:c3:17:17:d8:9c:eb:c2:5b:98:ae:04:6a:8d:34:2f:
         c2:34:b8:e4:7b:69:d2:36:60:c4:91:6c:b7:35:e6:19:a6:4d:
         1a:fe:ca:77:5b:8c:a9:41:b2:54:8c:94:41:18:b1:c2:79:b1:
         ed:c4:3b:90:85:52:5f:2e:79:57:44:c6:38:62:e0:50:91:37:
         53:52:74:0d:a6:47:4d:81:fe:fd:32:9a:6e:35:ee:af:c8:47:
         3e:b6:e7:37:b5:11:55:a8:52:f4:74:ce:b8:f7:3f:77:c9:50:
         0f:50:3b:ac:a4:0b:25:bd:bf:41:ba:7b:97:53:6c:c0:63:cb:
         26:dd:cf:10:ed:e0:d8:39:d1:27:8c:cb:3a:cb:f9:bc:b7:dd:
         7a:09:6e:cc:1c:e7:a6:dd:a7:16:01:23:b8:59:30:9f:e9:30:
         9c:14:0b:99:5b:88:b8:f6:8d:24:8d:57:68:e2:f5:1c:e4:76:
         ec:ce:5f:8c:58:16:c8:5f:c9:24:f9:6a:5a:bb:e6:d1:a4:b7:
         b9:d1:60:e0:c6:04:c8:1b:98:16:98:f0:cc:8c:0f:f8:b3:8d:
         38:01:cf:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 25 23:57:33 2024 by rpki-client on console-ams.rpki-client.org