Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGf6GlDANNAOxSXlzIBxbo_OqNo.roa
File:                     xGf6GlDANNAOxSXlzIBxbo_OqNo.roa (raw, json)
Hash identifier:          DLs2gxpihYode5+58xDumBXnc8ANwm92MErfLPTAyvE=
Subject key identifier:   C4:67:FA:1A:50:C0:34:D0:0E:C5:25:E5:CC:80:71:6E:8F:CE:A8:DA
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       ED
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGf6GlDANNAOxSXlzIBxbo_OqNo.roa
Signing time:             Fri 23 Jun 2023 04:40:05 +0000
ROA not before:           Fri 23 Jun 2023 04:40:05 +0000
ROA not after:            Fri 14 Jun 2024 01:30:02 +0000
asID:                     32787
IP address blocks:        210.148.129.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:32:51 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 237 (0xed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jun 23 04:40:05 2023 GMT
            Not After : Jun 14 01:30:02 2024 GMT
        Subject: CN=C467FA1A50C034D00EC525E5CC80716E8FCEA8DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:09:d1:9c:d7:44:d7:d6:bb:01:98:91:2c:80:
                    f4:75:86:50:f1:13:e9:32:36:ec:9a:47:0f:93:82:
                    7a:49:1b:e9:6f:51:39:d7:cf:0f:56:b4:6f:ae:f1:
                    30:5b:f3:29:41:c5:8f:f6:98:a2:9f:29:33:dc:a9:
                    88:00:11:fb:be:ab:3b:01:86:c1:22:78:f5:3d:a6:
                    4c:02:85:77:dc:c0:2c:ec:da:06:90:4c:53:6d:a0:
                    0f:de:25:cb:e9:5a:e6:9a:5b:db:c9:b9:c9:ce:e6:
                    7c:49:bf:94:6f:b5:71:5d:fa:d3:bc:b8:d9:17:8f:
                    93:6b:90:cf:b6:c1:06:f9:da:5c:ce:f8:86:4e:f0:
                    d7:b2:37:8d:d4:46:de:82:47:72:ca:5c:43:16:0f:
                    83:42:ea:53:66:76:9b:82:96:ee:c8:27:17:96:cc:
                    90:f1:d7:19:16:84:c0:18:00:65:32:1f:b4:8e:28:
                    92:32:2e:3b:97:5e:8a:27:22:53:21:9a:5c:10:65:
                    b9:dd:b9:c5:1d:fe:0b:1c:bd:7b:92:a2:df:e7:23:
                    2d:94:48:9d:fe:36:15:30:22:90:b7:24:15:d3:7e:
                    3f:1a:98:f1:e0:71:a5:f3:4a:ab:38:8c:fe:95:82:
                    f4:44:a9:42:26:9b:00:53:5c:96:33:4a:70:7a:b4:
                    82:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:67:FA:1A:50:C0:34:D0:0E:C5:25:E5:CC:80:71:6E:8F:CE:A8:DA
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/xGf6GlDANNAOxSXlzIBxbo_OqNo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.148.129.0/24

    Signature Algorithm: sha256WithRSAEncryption
         13:1d:1c:b7:52:a6:5c:d6:20:36:06:ff:0e:e3:73:6f:ed:b9:
         1f:57:bf:89:78:aa:1d:da:25:ce:32:54:ed:2d:70:d3:dc:8b:
         d1:93:36:93:19:46:3e:51:00:a2:df:a4:5c:54:e1:21:12:69:
         cc:76:4f:7e:43:fe:59:bb:f3:55:99:17:2d:27:85:8e:4a:f4:
         6a:ce:ec:33:e9:84:69:47:6b:e8:77:80:42:b9:e7:98:b9:09:
         c9:0e:38:d6:a1:87:cf:2c:f5:96:6f:6d:cf:95:80:7a:cb:af:
         b3:5a:e6:05:28:8f:a7:63:82:6b:69:4a:b3:dc:64:e1:48:84:
         0a:a8:bd:b4:d0:97:ff:a4:dc:ce:95:7f:b0:a9:3b:a8:c5:8c:
         5b:80:6f:e2:7e:cd:4e:89:31:f6:7f:e3:bf:e6:12:68:02:1b:
         74:26:26:95:85:50:a6:3a:a7:47:17:f5:79:dd:4f:ac:e4:b4:
         ac:e5:c9:6a:13:03:38:86:9d:e9:a9:97:67:65:ac:72:8d:6e:
         e4:c1:e2:78:dd:48:7b:e7:e1:cb:1f:85:cb:32:2d:0d:5e:e3:
         9b:26:45:84:4d:23:5a:a2:c7:e8:1f:bf:09:53:4f:64:1c:9c:
         4b:2d:6d:f1:e6:e0:a1:1d:ef:5d:6f:43:4c:c2:81:91:04:b4:
         a2:94:7e:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat May 18 11:39:42 2024 by rpki-client on console-fra.rpki-client.org