Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/668/Dz5rRi_WzN7EvBkS02ys19EPf5I.roa
File:                     Dz5rRi_WzN7EvBkS02ys19EPf5I.roa (raw, json)
Hash identifier:          O4FNGlAb6Lj2vp5biQcmfElmAolIfv1i4YAMXjVWGhM=
Subject key identifier:   0F:3E:6B:46:2F:D6:CC:DE:C4:BC:19:12:D3:6C:AC:D7:D1:0F:7F:92
Certificate issuer:       /CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
Certificate serial:       3E
Authority key identifier: F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/Dz5rRi_WzN7EvBkS02ys19EPf5I.roa
Signing time:             Thu 29 Feb 2024 01:31:53 +0000
ROA not before:           Thu 29 Feb 2024 01:31:53 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     17948
IP address blocks:        203.145.120.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F556EC334102047BEDBA0C0DDB4DC930E07A9058
        Validity
            Not Before: Feb 29 01:31:53 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=0F3E6B462FD6CCDEC4BC1912D36CACD7D10F7F92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:19:03:24:d9:26:93:e2:4e:2e:fb:51:40:81:
                    96:4d:41:07:9a:37:73:2c:97:19:4e:45:e5:7b:4b:
                    1c:44:de:3a:1b:b9:61:8f:a8:b1:8f:35:a9:9f:0f:
                    55:3c:7c:63:ea:30:3e:66:23:80:06:d5:a4:ff:6e:
                    ea:36:24:25:b4:a5:81:c2:2a:7e:17:62:d9:d5:56:
                    57:d3:13:a8:e1:c4:53:d7:0d:03:ed:45:02:2e:38:
                    20:ee:d9:60:44:67:9b:90:56:09:60:f4:9b:e7:74:
                    dc:aa:1f:90:2c:fa:ed:51:5d:f2:ac:83:f8:3a:40:
                    28:51:47:3e:36:26:c0:d4:f8:3d:a1:42:b1:f1:62:
                    36:f3:86:8d:2d:f3:a5:c4:c2:6f:f1:52:cd:a7:c9:
                    18:0d:e9:fe:8d:4e:be:0b:01:35:6b:f0:8d:03:14:
                    86:1f:5b:5f:b0:19:14:16:e6:50:e7:22:4f:76:d2:
                    08:09:8b:24:f3:2a:00:fc:55:37:af:a2:aa:ee:68:
                    98:4e:81:47:6b:29:8c:47:23:83:35:d8:6b:0b:ce:
                    8e:cf:00:e6:b1:bb:42:30:82:f2:ef:8e:ab:2b:32:
                    c4:15:96:af:a0:83:06:94:49:a1:d1:85:ff:54:6f:
                    1a:a2:f7:85:f4:6e:7e:47:b4:d6:08:85:46:16:a9:
                    a3:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3E:6B:46:2F:D6:CC:DE:C4:BC:19:12:D3:6C:AC:D7:D1:0F:7F:92
            X509v3 Authority Key Identifier:
                keyid:F5:56:EC:33:41:02:04:7B:ED:BA:0C:0D:DB:4D:C9:30:E0:7A:90:58

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/9VbsM0ECBHvtugwN203JMOB6kFg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9VbsM0ECBHvtugwN203JMOB6kFg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/668/Dz5rRi_WzN7EvBkS02ys19EPf5I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         41:7a:51:04:8c:c5:35:c5:89:10:a4:77:d6:4a:f9:df:21:05:
         7e:27:a9:c1:0e:70:05:27:01:7b:fd:3c:7d:53:55:77:96:6d:
         53:57:49:7a:46:00:40:d0:da:b5:ec:37:1d:1b:cc:82:8c:dc:
         18:95:44:12:91:45:8d:93:f5:d2:f7:88:33:68:5c:bb:42:39:
         0e:30:05:7b:de:6c:93:cb:f9:8d:2e:19:55:a0:58:da:6f:5f:
         e3:b6:5f:93:b6:56:23:6b:51:fa:18:57:be:61:29:3a:29:3e:
         df:e6:22:1f:0e:ed:4a:17:e8:bf:b7:35:6b:26:65:43:e2:aa:
         4c:27:10:b3:93:66:97:b9:cf:06:61:d8:aa:32:c5:05:26:51:
         5e:57:37:ea:1b:55:43:b7:6a:6a:1a:cb:a9:ad:6f:40:61:15:
         95:44:ea:d1:37:58:5b:4e:b5:b5:ec:7e:82:2e:08:96:bc:67:
         59:11:11:67:41:dc:f7:6b:c8:77:b8:8b:7e:80:b6:1b:cf:be:
         e2:89:04:17:28:68:fe:34:f3:e8:eb:17:55:e6:ab:e7:43:8d:
         87:fb:59:f9:a3:0e:11:47:72:0d:f1:7c:21:7f:ae:ee:46:4b:
         ba:56:e0:a0:ed:a6:60:92:2e:6e:15:c6:f4:31:2b:9f:35:57:
         f0:f7:ce:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:48 2024 by rpki-client on console-ams.rpki-client.org