Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/tDlmUCPiiqLqtTRxWzVlnRvvTT4.roa
File:                     tDlmUCPiiqLqtTRxWzVlnRvvTT4.roa (raw, json)
Hash identifier:          BDFCadM1fdV/x++vS5U7rT6fUXi+zDYug/g5xqEI844=
Subject key identifier:   B4:39:66:50:23:E2:8A:A2:EA:B5:34:71:5B:35:65:9D:1B:EF:4D:3E
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       09
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/tDlmUCPiiqLqtTRxWzVlnRvvTT4.roa
Signing time:             Thu 14 Sep 2023 01:06:55 +0000
ROA not before:           Thu 14 Sep 2023 01:06:55 +0000
ROA not after:            Fri 30 Aug 2024 02:51:12 +0000
asID:                     18121
IP address blocks:        202.88.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Sep 14 01:06:55 2023 GMT
            Not After : Aug 30 02:51:12 2024 GMT
        Subject: CN=B439665023E28AA2EAB534715B35659D1BEF4D3E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:ef:cb:21:3c:9c:9d:5c:da:1f:9f:2c:43:d2:
                    ce:cb:03:6f:05:2b:82:3a:36:c8:aa:b7:c7:17:33:
                    50:e4:88:21:0a:56:9c:58:3e:6b:65:67:c4:c3:7a:
                    68:cd:73:fb:cf:29:c4:7d:d7:6e:a5:34:55:fb:62:
                    70:fe:1b:ac:02:ef:a7:13:02:c4:2c:a6:86:7e:7c:
                    43:ed:bb:fb:db:83:76:fc:56:22:a0:f4:f0:35:e8:
                    8c:e5:42:60:85:f6:ac:a8:e6:e7:13:60:12:9a:a4:
                    7d:41:64:db:f7:46:8d:3e:95:7b:76:cc:88:3d:d2:
                    91:7f:05:08:39:0f:82:69:d1:e7:06:69:82:6a:c3:
                    88:8f:e2:fc:4d:58:f2:ec:e5:77:4e:7b:9a:f8:84:
                    75:b6:fc:ef:2a:c2:e4:c5:66:5c:ae:68:da:2f:af:
                    3e:16:2d:9a:c6:e7:d7:ce:b1:17:13:5c:bb:38:22:
                    48:57:c0:89:81:53:21:de:da:bb:49:e9:af:7f:a8:
                    18:17:8c:3b:69:32:25:15:59:4d:0a:61:71:87:fe:
                    df:9a:b7:85:27:b0:05:2a:7f:3c:27:de:b8:2e:47:
                    b1:8e:72:2a:a2:d5:72:b0:b4:14:d2:59:ca:54:e2:
                    90:77:6a:ce:ec:31:d3:ab:a1:9f:ef:40:73:cf:1b:
                    f2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:39:66:50:23:E2:8A:A2:EA:B5:34:71:5B:35:65:9D:1B:EF:4D:3E
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/tDlmUCPiiqLqtTRxWzVlnRvvTT4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8b:fc:b2:91:2c:e9:4b:5e:a7:10:0b:dc:74:a9:37:8f:11:fe:
         95:dc:17:46:07:f0:4c:7b:3d:9a:73:92:56:16:69:27:ac:8f:
         cd:7a:14:60:38:13:bf:7d:2e:58:22:1c:d1:91:c2:9e:70:55:
         fc:04:50:4a:f5:87:f6:b2:22:9e:c4:9b:2b:a7:6e:a4:3e:e9:
         3c:a9:4a:94:26:1a:57:50:40:f6:e0:4b:79:e2:8a:c4:37:5f:
         c9:6f:3d:f8:a4:25:32:7d:62:e4:52:c7:c9:6e:f5:38:0d:3c:
         1b:36:cf:d1:35:4c:26:b1:b6:84:4d:98:3a:49:b0:63:83:0d:
         62:6e:ee:10:61:77:9a:fa:b0:ac:fb:da:b0:4e:ff:60:8e:25:
         d6:73:c8:7b:0f:6a:2d:d8:56:bb:39:e7:e2:f3:65:01:24:48:
         08:09:05:5a:3a:f2:01:56:d1:f2:1b:c4:01:d2:7f:52:9a:f5:
         1c:b0:f3:c0:b7:ed:d6:b0:d6:86:95:22:04:02:24:16:a1:19:
         43:12:36:a5:d7:fe:34:61:2a:2c:fe:c3:6e:be:d5:cc:99:05:
         a6:79:09:11:b9:36:55:81:01:7e:df:51:98:f2:52:07:62:56:
         8b:7c:7d:aa:2b:b4:71:cc:89:c6:de:71:65:b2:a8:5b:02:44:
         0d:c8:61:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:53 2024 by rpki-client on console-ams.rpki-client.org