Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/qXtHl_7N_i5Rl353gE-l9e-2dyA.roa
File:                     qXtHl_7N_i5Rl353gE-l9e-2dyA.roa (raw, json)
Hash identifier:          Xi+WEj80SypqQwUhJ6VQsYtQw+bmi2ajOBCtN+gfEas=
Subject key identifier:   A9:7B:47:97:FE:CD:FE:2E:51:97:7E:77:80:4F:A5:F5:EF:B6:77:20
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       30
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/qXtHl_7N_i5Rl353gE-l9e-2dyA.roa
Signing time:             Fri 06 Oct 2023 06:05:43 +0000
ROA not before:           Fri 06 Oct 2023 06:05:43 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        202.165.112.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:43 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A97B4797FECDFE2E51977E77804FA5F5EFB67720
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a2:36:e9:14:4f:27:32:ef:d7:ca:57:35:f4:
                    a5:94:01:c1:c5:f9:01:6c:82:a3:c1:f9:87:79:2b:
                    ed:4b:b4:16:e6:b2:1a:a3:18:04:70:46:26:38:3c:
                    1c:23:d8:ce:97:f3:bd:96:9c:35:5d:e3:6f:30:97:
                    1c:6c:87:d4:a4:40:52:1f:d6:e1:6a:7f:e8:32:83:
                    bd:5d:17:1a:76:09:d7:49:fc:d4:d0:59:04:a3:49:
                    5f:50:03:ab:8e:72:92:cd:5a:cb:91:53:8c:cc:4f:
                    9a:82:f9:88:b1:d0:ad:03:e7:0e:a6:bc:62:05:b0:
                    63:f6:5c:b9:b0:8c:fc:22:ff:50:c6:f9:2b:a6:3c:
                    7e:3c:91:f0:6d:ba:f3:eb:6d:72:a9:9f:bd:c6:52:
                    34:eb:2d:89:06:8d:1a:e0:10:39:4a:90:33:82:61:
                    96:92:ad:8b:d3:0c:0d:ce:04:26:4a:ca:a0:1b:b9:
                    17:3b:bf:ee:ba:68:c7:4a:43:55:ae:1d:c4:51:d4:
                    ae:5b:55:09:17:e5:c8:9c:e3:b5:28:fc:49:e7:31:
                    57:67:a5:98:15:d1:31:0b:63:f5:89:3c:8e:b0:3b:
                    54:01:ae:2c:e9:ee:d0:42:25:24:e2:6c:1e:8c:4a:
                    e5:70:d8:40:10:12:7d:cf:1c:73:20:95:fe:5e:19:
                    73:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:7B:47:97:FE:CD:FE:2E:51:97:7E:77:80:4F:A5:F5:EF:B6:77:20
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/qXtHl_7N_i5Rl353gE-l9e-2dyA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.165.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         4b:f2:f1:be:82:c3:88:be:1f:7a:4b:e8:a4:b4:1f:a9:39:e7:
         e4:6f:64:bc:4d:ed:38:8c:2a:1b:a1:3f:67:27:84:41:dd:cc:
         a9:25:ae:06:bf:c8:43:88:9e:d8:1b:f3:84:90:4d:c3:1e:88:
         63:d9:6c:8e:fc:0b:c4:76:0d:e0:d8:e6:e2:c6:9f:48:6a:e7:
         f4:06:23:c0:08:ab:b5:49:49:85:a0:45:ae:0d:35:c5:6b:b8:
         57:bc:92:ab:0d:b7:ea:ac:5c:05:9a:6b:02:e6:ba:ae:e4:90:
         49:de:68:ef:d6:3f:8b:21:e4:ab:9f:b1:b3:85:06:aa:9f:b2:
         ad:e9:7e:bf:e1:a7:13:6c:53:ce:7b:72:16:73:f2:d4:bc:68:
         ac:98:4a:f1:c9:48:e1:a4:25:65:16:24:fe:f7:f6:59:d7:c9:
         08:8f:13:9d:7a:5f:a1:d1:b7:fe:57:e3:00:50:90:fd:e0:d9:
         7a:a7:9f:4a:09:c4:49:ff:1d:32:74:25:e0:25:e1:d3:1d:19:
         e8:37:48:48:d0:c8:c3:85:7a:f4:be:35:66:09:50:a7:dc:51:
         a9:35:4f:90:23:d0:3e:cf:bc:25:59:d7:88:4c:ec:4d:e6:03:
         7c:44:f8:a2:ab:a5:7b:31:3f:27:4a:b4:81:44:a9:fb:01:d4:
         33:df:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org