Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/NfczLsijjuuxdSviyIkqgVGkYU4.roa
File:                     NfczLsijjuuxdSviyIkqgVGkYU4.roa (raw, json)
Hash identifier:          cm32la3xUOWiW1GhpWG4avGO3phX/MpL8e/MFFlJgl0=
Subject key identifier:   35:F7:33:2E:C8:A3:8E:EB:B1:75:2B:E2:C8:89:2A:81:51:A4:61:4E
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       59
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/NfczLsijjuuxdSviyIkqgVGkYU4.roa
Signing time:             Thu 29 Feb 2024 01:30:51 +0000
ROA not before:           Thu 29 Feb 2024 01:30:51 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        101.55.232.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:51 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=35F7332EC8A38EEBB1752BE2C8892A8151A4614E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:32:86:40:d5:df:63:23:d2:38:e6:bd:50:04:
                    ff:f6:37:be:e3:30:03:9f:6b:bc:6a:13:f1:24:81:
                    e9:16:8c:9f:68:ab:86:cf:8d:89:82:ad:1d:8e:bc:
                    e8:a5:6e:0c:1d:8d:e7:b1:83:68:2e:fc:59:7d:d3:
                    12:ca:c7:00:d4:54:2d:ca:7f:aa:46:ff:70:75:4d:
                    45:94:5a:64:99:cc:bb:98:54:01:a1:16:53:08:ee:
                    b2:74:f8:4c:83:a6:12:49:9c:53:6b:28:8d:d0:32:
                    32:e6:42:7e:f8:39:f2:87:7a:7f:5c:88:75:ed:e3:
                    31:1a:88:e3:12:ad:de:25:98:9f:3b:67:b9:05:a9:
                    fa:c7:8b:38:18:7d:38:ee:21:68:55:8f:00:b9:19:
                    a0:d5:1d:28:4b:bf:19:a3:c4:59:b3:b8:f2:a0:d5:
                    e5:6e:e7:12:77:0c:2c:fd:19:ed:6a:98:e5:92:eb:
                    ca:83:b2:44:5c:30:dc:88:c1:5b:99:5e:37:35:28:
                    ba:76:1a:03:59:3d:94:95:d6:2e:68:61:56:24:00:
                    06:73:bb:04:0c:2a:92:86:68:0b:5d:36:67:40:d9:
                    36:85:89:4d:34:4d:83:f8:50:44:7c:4f:d2:f3:5e:
                    96:43:f4:82:c3:f4:89:c4:a1:4f:d3:30:46:d9:3d:
                    34:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:F7:33:2E:C8:A3:8E:EB:B1:75:2B:E2:C8:89:2A:81:51:A4:61:4E
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/NfczLsijjuuxdSviyIkqgVGkYU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.55.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         29:a1:b7:84:2f:13:38:3d:e5:0e:82:79:87:67:c7:bc:c0:53:
         5f:93:96:2b:2d:df:6e:42:41:23:30:2b:a4:0f:2a:4d:a2:e6:
         22:bc:d7:00:97:49:ed:29:e0:37:ec:3d:72:06:68:34:61:e9:
         45:be:3b:e1:fa:d3:a3:bf:20:f2:69:e0:54:8b:0c:48:30:ad:
         1c:9e:1d:e8:e0:8e:2b:38:7d:f0:94:98:5f:a0:e5:48:84:8b:
         56:d8:a1:2f:e1:27:55:1a:de:ec:19:44:32:fb:43:b9:08:5f:
         a8:91:83:30:d9:8c:ac:04:e1:3d:18:81:0f:16:fb:c5:24:15:
         58:13:01:2e:2e:42:4c:4d:20:63:ab:6a:b9:d9:4e:1e:ba:30:
         a2:92:fc:d5:28:75:6d:1c:69:56:64:92:58:cd:24:ef:fe:34:
         91:14:3c:9d:f1:0c:31:45:41:4b:7a:43:ba:d4:a8:8f:d4:21:
         69:a2:5b:5b:f7:74:45:9a:03:c3:3d:77:2b:67:9a:18:88:22:
         dd:b3:3f:e8:68:a5:de:02:b9:1a:98:ea:62:49:21:e8:24:5f:
         19:73:75:1d:e7:66:b7:ac:b5:3b:3d:b0:d1:52:1d:7c:b0:c9:
         01:88:c4:7b:bb:a0:23:7d:d5:4e:5d:f1:23:6b:7b:c0:87:78:
         6e:5c:eb:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org