Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/699/paNGzP2Px1RsvgVJDbSNH6LxNdY.roa
File:                     paNGzP2Px1RsvgVJDbSNH6LxNdY.roa (raw, json)
Hash identifier:          +eskQa6D5XP8YWWH8AxcH5moAZu/DcTMypZbZdM9h+w=
Subject key identifier:   A5:A3:46:CC:FD:8F:C7:54:6C:BE:05:49:0D:B4:8D:1F:A2:F1:35:D6
Certificate issuer:       /CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
Certificate serial:       3230
Authority key identifier: 65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/paNGzP2Px1RsvgVJDbSNH6LxNdY.roa
Signing time:             Thu 29 Feb 2024 01:29:50 +0000
ROA not before:           Thu 29 Feb 2024 01:29:50 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7671
IP address blocks:        222.231.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12848 (0x3230)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6522E2C3EF4D93F13E758A807A40A8E1BF9AB130
        Validity
            Not Before: Feb 29 01:29:50 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A5A346CCFD8FC7546CBE05490DB48D1FA2F135D6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c6:9b:e2:c9:ac:39:98:9e:bd:5f:48:70:c0:
                    25:4e:45:02:f2:1f:68:e6:95:df:37:8c:4a:d6:01:
                    50:eb:f2:15:d3:17:4e:66:b2:e5:42:95:5a:d3:13:
                    43:ca:a6:d1:f9:b2:66:87:78:ae:42:81:fa:b3:2a:
                    94:22:cd:bc:81:4c:e0:5a:83:eb:94:e7:64:53:91:
                    39:6d:a1:13:99:03:ca:20:b0:62:a0:c5:61:da:cf:
                    c9:73:9d:c2:4e:8e:2b:8c:9a:dc:7f:59:8a:d4:42:
                    a3:4a:18:36:73:d1:3a:fe:60:d4:23:f2:29:8c:1c:
                    c2:69:4a:92:e4:77:ea:02:ae:15:e6:82:81:f5:b8:
                    bc:99:c3:a1:fb:7e:d1:df:cd:79:51:6d:8a:f9:a7:
                    84:f3:e8:65:bd:0e:79:db:5d:fc:de:0b:7c:5e:f0:
                    59:e6:eb:f1:1f:25:49:a0:2d:9c:63:96:a1:0e:6f:
                    5d:49:fd:fc:85:a2:6e:ea:a1:7d:9b:1c:65:ea:41:
                    2d:b7:60:5f:0c:f3:30:a0:0f:87:45:0b:a7:3a:80:
                    55:bb:9a:78:25:2f:2f:73:3d:a8:81:36:7e:f1:71:
                    6a:d9:00:2d:a3:ae:50:9b:89:f7:f7:7d:21:20:21:
                    af:49:c2:54:cd:4f:c1:a9:c7:04:8a:5a:89:6c:a3:
                    7d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:A3:46:CC:FD:8F:C7:54:6C:BE:05:49:0D:B4:8D:1F:A2:F1:35:D6
            X509v3 Authority Key Identifier:
                keyid:65:22:E2:C3:EF:4D:93:F1:3E:75:8A:80:7A:40:A8:E1:BF:9A:B1:30

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/ZSLiw-9Nk_E-dYqAekCo4b-asTA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZSLiw-9Nk_E-dYqAekCo4b-asTA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/699/paNGzP2Px1RsvgVJDbSNH6LxNdY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.231.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         11:f7:1c:00:34:4c:0c:88:2b:18:55:93:dd:c2:b9:63:e7:8c:
         1e:cc:9d:9b:b0:53:8e:47:6a:ec:65:37:dc:66:c1:3f:a5:28:
         03:5a:a3:fb:f8:75:61:f2:03:e0:39:e0:90:46:bc:6d:17:82:
         37:5e:69:03:58:b8:8b:55:f6:09:e6:44:07:30:72:9a:22:c2:
         77:28:20:d6:5e:5f:b2:3b:2d:ed:40:97:6b:db:bf:f4:26:5e:
         b0:64:a8:35:b9:4c:a9:d2:c3:ef:3f:3c:9b:8b:6d:82:63:e0:
         a2:2e:dd:0a:6e:e3:34:cf:de:e6:32:18:97:99:a7:26:af:80:
         2d:3b:82:1d:be:10:58:24:84:48:67:c6:76:e1:df:51:c0:a8:
         ae:cc:74:cd:1b:72:f0:34:4a:52:73:3c:47:aa:83:7c:e1:ce:
         98:00:d9:ac:64:0e:01:c6:ff:b4:85:3f:85:5a:77:49:a7:16:
         dc:3f:b0:b7:85:48:c2:0b:c6:ba:87:c7:d2:a8:df:5e:f1:86:
         a8:27:0a:a7:bd:cf:34:4d:c6:fd:31:31:0e:71:5a:ea:28:92:
         f9:c2:0c:b3:bf:5b:62:c8:53:aa:77:d0:92:46:09:c7:79:99:
         0d:22:a0:8c:a7:4f:15:d1:e9:39:e0:cc:bb:ce:a8:70:41:9d:
         2c:37:c0:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org