Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/694/eWm1xX4ERXni9EIBlps2-1EDD18.roa
File:                     eWm1xX4ERXni9EIBlps2-1EDD18.roa (raw, json)
Hash identifier:          abpi4gtkOXX1kl6JzK62HHsTCzltTHB2beP3kknVxyE=
Subject key identifier:   79:69:B5:C5:7E:04:45:79:E2:F4:42:01:96:9B:36:FB:51:03:0F:5F
Certificate issuer:       /CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
Certificate serial:       02
Authority key identifier: 2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/eWm1xX4ERXni9EIBlps2-1EDD18.roa
Signing time:             Tue 12 Dec 2023 02:11:25 +0000
ROA not before:           Tue 12 Dec 2023 02:11:25 +0000
ROA not after:            Wed 11 Dec 2024 02:02:58 +0000
asID:                     7511
IP address blocks:        202.79.0.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:44:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DD3FD68BD774CF9C2B99D670ADA9CAD9F963A5D
        Validity
            Not Before: Dec 12 02:11:25 2023 GMT
            Not After : Dec 11 02:02:58 2024 GMT
        Subject: CN=7969B5C57E044579E2F44201969B36FB51030F5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:97:63:49:d7:3e:24:ac:54:35:79:b5:f5:d8:
                    bd:f2:7d:6e:39:96:15:80:e1:87:09:0d:d0:a0:a5:
                    6f:17:26:3f:a3:84:89:ef:45:0e:63:6d:3a:fa:69:
                    fb:58:7f:05:0a:46:67:76:0b:7a:f1:e2:35:28:3a:
                    8d:f1:20:e4:e1:e8:c5:07:d7:45:cc:fe:c4:6d:97:
                    5b:f7:c0:bf:92:bf:4d:dc:2b:76:b7:4c:be:98:7f:
                    7c:2d:d7:0f:23:0c:85:08:b1:d4:94:a2:04:ad:ef:
                    ec:11:6c:ba:62:29:32:23:05:68:54:0b:b0:39:0a:
                    3d:73:ca:58:9a:42:3f:64:75:16:38:bd:1b:9f:2b:
                    72:f2:56:b8:61:50:e1:96:6b:c7:85:8d:43:56:75:
                    92:88:bf:30:8c:62:f7:5e:a4:db:21:ea:08:96:68:
                    6a:5f:44:0f:cb:98:ec:79:22:fb:c0:a5:d9:bb:c8:
                    d0:c9:df:6d:d1:17:15:37:d8:b3:47:b8:4a:3c:7e:
                    14:5e:48:9a:d4:e4:ff:03:ce:11:9c:76:ef:9d:d9:
                    6b:f9:78:56:b4:34:c8:22:96:33:50:82:93:dd:60:
                    cd:b8:85:5b:c1:c3:37:72:61:3f:a9:ff:98:15:cb:
                    e3:5e:a1:5f:4e:63:f5:4b:b5:de:8e:e0:f7:6a:18:
                    44:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:69:B5:C5:7E:04:45:79:E2:F4:42:01:96:9B:36:FB:51:03:0F:5F
            X509v3 Authority Key Identifier:
                keyid:2D:D3:FD:68:BD:77:4C:F9:C2:B9:9D:67:0A:DA:9C:AD:9F:96:3A:5D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/LdP9aL13TPnCuZ1nCtqcrZ-WOl0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/694/eWm1xX4ERXni9EIBlps2-1EDD18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.79.0.0/22

    Signature Algorithm: sha256WithRSAEncryption
         36:b3:f7:ad:b0:66:1f:93:eb:b6:1a:2c:b0:64:b9:97:ca:1a:
         b3:e9:54:08:87:e1:10:e4:fe:29:d6:26:67:6b:31:34:34:38:
         1a:85:15:ea:33:6b:37:56:07:ab:e8:e1:e4:d5:b1:16:55:6b:
         3d:10:96:3c:f6:bc:a3:1a:03:0a:50:ef:bd:75:f2:f9:b2:85:
         a0:fb:ac:80:67:0f:87:59:3e:58:5c:7b:b6:6a:37:33:f7:0e:
         62:b3:11:e5:a4:9d:7b:8d:af:82:b2:b8:0c:cf:e3:27:3f:d1:
         0d:e9:95:ed:95:61:cd:fa:6a:42:69:76:26:4d:83:2f:f4:3a:
         c9:04:eb:0f:28:88:c2:f1:e1:60:70:d2:7a:98:be:b9:79:40:
         72:5e:44:1e:90:43:ae:34:51:aa:03:83:96:ea:f7:7e:ef:b1:
         a8:aa:24:16:55:c6:3e:5b:cc:b5:3d:fd:d6:7a:de:66:6b:f6:
         22:f3:2b:71:b7:a0:55:c2:e8:55:89:b2:f2:fd:00:d5:21:f3:
         a0:eb:ca:08:80:01:45:bb:0d:79:b5:ca:7b:14:73:3a:2f:72:
         93:6b:34:c4:38:2b:f2:e6:99:6f:bb:8a:20:b8:e4:bb:46:ae:
         66:ec:c0:c0:60:69:38:de:fb:ee:bb:2f:09:dc:c0:6f:51:5c:
         da:d8:94:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:53:39 2024 by rpki-client on console-ams.rpki-client.org