Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa
File:                     G9r7j7wlcs81lVNQD3Gofacvrzk.roa (raw, json)
Hash identifier:          6LCGocC204gHbgexALcjd1kMNLATczGi2+uX1gI8pFc=
Subject key identifier:   1B:DA:FB:8F:BC:25:72:CF:35:95:53:50:0F:71:A8:7D:A7:2F:AF:39
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       56
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa
Signing time:             Tue 30 Jan 2024 09:18:33 +0000
ROA not before:           Tue 30 Jan 2024 09:18:33 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     32787
IP address blocks:        203.169.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jan 30 09:18:33 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=1BDAFB8FBC2572CF359553500F71A87DA72FAF39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fe:6f:14:ce:88:08:4a:d4:4f:fe:44:89:19:
                    9b:01:4b:29:45:45:fb:c7:0b:69:26:3d:4b:c9:60:
                    26:88:31:9e:93:96:1b:e0:1b:4d:5f:f2:7d:29:94:
                    73:74:9b:f3:f5:3b:e4:95:73:28:7d:aa:54:6b:50:
                    79:c6:e4:7b:6b:fb:29:ff:4c:97:cb:6a:8d:a6:6e:
                    dc:17:86:a7:a6:b4:9f:15:c8:e5:d2:04:0d:0e:2a:
                    4e:97:56:0b:57:53:d1:27:11:bc:e3:29:f1:a7:a9:
                    04:e5:ad:f0:05:9e:40:ce:c2:eb:53:6c:8c:b9:ca:
                    c9:4e:68:3e:06:06:ee:a0:3a:95:c5:37:fd:c5:b5:
                    14:f5:df:f7:ef:2f:d0:ed:6c:c1:cf:9c:7e:34:86:
                    5c:21:8b:0f:58:21:b7:0e:40:15:e4:df:17:25:f9:
                    39:c3:23:b2:d4:70:a9:f6:39:f4:16:a4:0e:71:6f:
                    39:6f:3e:9f:2d:91:08:71:ef:b4:58:32:53:91:ac:
                    f3:2a:c7:57:37:1d:16:92:18:04:ae:db:a0:fc:c9:
                    55:66:d9:67:e9:9d:5d:d7:62:dc:71:8a:4b:cd:83:
                    e1:c0:3c:ea:f4:ea:ec:28:51:8e:20:33:20:12:51:
                    93:1c:53:f3:b1:a4:f1:3d:88:af:83:a7:60:56:f8:
                    04:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:DA:FB:8F:BC:25:72:CF:35:95:53:50:0F:71:A8:7D:A7:2F:AF:39
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/G9r7j7wlcs81lVNQD3Gofacvrzk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         83:87:0b:dd:3d:af:05:84:69:6f:3c:17:dd:10:f9:37:81:e1:
         23:ec:6b:e9:2f:46:c7:61:f1:6d:b2:82:17:41:24:2c:6c:3f:
         01:c3:29:b1:47:ff:4d:46:61:0a:32:08:b5:d6:05:5a:67:54:
         d2:e6:da:60:8d:1f:11:37:f3:fc:47:6e:19:c2:ee:dd:ac:c2:
         e3:f4:13:26:28:eb:8f:3b:a0:69:c3:e4:a2:9c:7b:6b:3f:7c:
         97:dc:44:07:da:e3:b5:33:9c:fb:d1:64:dc:4e:61:26:78:50:
         54:88:3c:6c:b4:66:44:bf:e4:fc:c8:90:5a:39:97:8b:08:ac:
         bc:9b:fc:b5:57:84:6f:5a:c1:9e:63:59:77:70:8a:7a:c5:b3:
         72:dc:73:db:82:51:da:7d:8c:09:72:81:d6:98:dc:78:1b:bd:
         11:8a:fd:f6:7e:e9:83:f9:83:75:3c:00:82:47:b6:75:a2:41:
         b1:00:c6:01:7a:2a:4f:ac:6e:ea:8c:59:be:82:c4:ec:19:cf:
         58:b3:fe:8c:d8:cb:43:99:62:f9:9e:44:dc:f7:66:53:48:c0:
         63:14:fa:13:84:20:f8:e0:d9:b9:b2:1a:bf:08:5c:88:b5:2b:
         0f:a6:1c:bf:1d:8d:93:f4:f1:7d:34:9f:41:cb:72:cd:91:a5:
         9b:49:28:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:33 2024 by rpki-client on console-ams.rpki-client.org