Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/YPEc2SaMgxc8O3knF4BH7eqKTpU.roa
File:                     YPEc2SaMgxc8O3knF4BH7eqKTpU.roa (raw, json)
Hash identifier:          N/RVRjmvzCczp1vxsjDcftKLPQOsN2YCe6L5znnPak8=
Subject key identifier:   60:F1:1C:D9:26:8C:83:17:3C:3B:79:27:17:80:47:ED:EA:8A:4E:95
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       33
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/YPEc2SaMgxc8O3knF4BH7eqKTpU.roa
Signing time:             Fri 06 Oct 2023 06:05:44 +0000
ROA not before:           Fri 06 Oct 2023 06:05:44 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        203.148.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:44 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=60F11CD9268C83173C3B7927178047EDEA8A4E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:4f:69:01:b4:aa:34:14:87:b4:a2:78:2f:9a:
                    cf:58:7e:ec:0b:fe:85:79:a6:28:1f:6e:3c:df:05:
                    b5:de:a2:86:6e:af:4a:20:ed:6b:43:5a:c0:0f:09:
                    d5:77:0b:6d:6d:ee:bd:df:bf:7b:e8:64:c9:4c:d7:
                    5b:3b:97:2a:aa:98:b4:56:d5:2b:11:ad:f1:ab:84:
                    41:53:17:a7:b5:86:41:72:a1:d9:d4:e9:57:1a:5a:
                    b6:1f:8d:a6:45:7b:7b:02:06:b0:ba:ff:c9:13:1f:
                    33:d7:47:dd:b6:f0:a0:12:f0:2c:a9:d4:e0:10:cd:
                    bc:21:24:a7:f1:19:0f:03:d4:95:c7:08:b5:9f:18:
                    e1:1a:e3:50:1f:51:15:f4:31:7d:ed:37:a4:3d:63:
                    05:9c:e4:81:bc:e0:a4:9e:b9:42:0a:45:77:a6:3f:
                    83:47:dc:fe:0e:ed:11:a4:8f:bc:92:b1:f2:db:72:
                    aa:b7:12:c3:e0:22:fd:4b:f2:7b:0a:4e:5b:00:52:
                    08:81:49:34:df:7f:68:1e:a2:5b:f8:12:8c:3d:c8:
                    38:3c:a9:69:d0:b8:fb:3f:e9:df:90:9b:e9:05:f1:
                    b9:72:fa:09:49:2b:ba:71:84:73:94:9f:79:0f:92:
                    00:a0:c6:f0:89:e2:29:0f:8a:dc:bb:03:c7:52:0c:
                    da:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F1:1C:D9:26:8C:83:17:3C:3B:79:27:17:80:47:ED:EA:8A:4E:95
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/YPEc2SaMgxc8O3knF4BH7eqKTpU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.148.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6e:cf:4e:16:76:92:eb:9d:1f:58:73:2e:fc:0c:0d:e2:da:74:
         45:3b:81:40:54:c4:58:79:f3:c1:e6:7d:d5:e2:68:88:9d:07:
         f2:ea:96:93:2f:65:89:79:02:df:73:fd:40:d6:81:43:3f:03:
         4f:af:48:d6:b6:97:14:ff:40:b1:78:ed:cb:43:84:cd:6e:34:
         55:40:21:68:fb:ae:fb:7b:fd:7e:f0:c6:f5:6a:a2:51:ff:cf:
         6d:db:d5:da:91:22:7c:81:95:9f:d8:68:12:ef:10:c3:a6:db:
         f9:ba:e8:aa:b5:a5:c9:52:97:46:25:49:ac:e3:f3:24:ff:89:
         27:d5:4c:51:92:8c:14:f8:f0:2b:90:7a:b5:d5:fc:40:b3:67:
         d8:1e:54:83:7b:ab:c3:e9:fb:6c:0a:5f:9c:52:df:95:36:9c:
         98:44:4d:47:48:13:0d:75:d9:c6:f1:3f:e9:49:5a:b5:4c:c1:
         18:c9:ab:12:2d:9d:d1:ff:94:86:9a:d2:32:45:e9:93:25:1f:
         64:43:43:0c:97:8a:41:0a:5a:2a:f9:aa:a4:27:fc:88:46:68:
         3e:13:fe:d1:ec:5e:70:02:fb:7b:a0:90:8e:1e:b3:4e:56:6f:
         ba:41:ce:db:bc:85:3f:fe:e4:0a:fa:73:a7:88:fd:75:a4:d0:
         96:0f:44:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org