Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/u35DPDuUp-xncGRpoyQ0dtjFrqI.roa
File:                     u35DPDuUp-xncGRpoyQ0dtjFrqI.roa (raw, json)
Hash identifier:          QuPKOaLe3CYN6corXMWHKxMtLJ8WiTVob9hBKcX74p4=
Subject key identifier:   BB:7E:43:3C:3B:94:A7:EC:67:70:64:69:A3:24:34:76:D8:C5:AE:A2
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       5B
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/u35DPDuUp-xncGRpoyQ0dtjFrqI.roa
Signing time:             Thu 29 Feb 2024 01:30:52 +0000
ROA not before:           Thu 29 Feb 2024 01:30:52 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        119.30.8.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:52 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=BB7E433C3B94A7EC67706469A3243476D8C5AEA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9a:e9:f0:2e:1a:f4:b6:fb:d5:3f:06:72:18:
                    78:e4:1a:d8:21:fe:b6:9f:ed:5a:11:0e:a3:b4:cc:
                    36:ac:b5:40:f6:08:9b:65:8e:40:d8:05:f5:44:c7:
                    a5:02:a0:a1:15:a2:63:f7:76:1d:86:dc:77:f4:04:
                    58:7a:53:06:f0:d4:7a:3c:fe:f7:c7:9f:b1:6e:c2:
                    fd:eb:ec:5f:6b:b9:cb:1a:4e:f5:35:74:1c:d0:08:
                    30:f1:85:ca:fd:e9:cd:74:89:5a:b2:46:4e:23:43:
                    f2:9c:73:1a:56:67:f5:b8:97:71:4a:85:ec:e0:3e:
                    3a:6e:bb:07:4b:97:6e:e7:e9:74:14:84:5b:5f:18:
                    ac:94:95:6b:7e:dc:9e:6a:42:3c:af:e8:98:ab:d1:
                    d6:75:ed:de:1e:8a:61:e0:26:7f:aa:bc:c0:99:0d:
                    18:01:e4:98:df:ab:5f:dd:02:aa:1f:64:a8:dd:3d:
                    44:09:2a:98:d0:6d:9c:64:c9:a7:31:ca:8e:e5:b8:
                    a1:d7:3e:23:18:ea:81:13:cb:38:db:88:f5:8b:60:
                    82:4d:30:dd:8d:7b:c2:81:24:ef:89:77:a1:e9:4e:
                    bc:49:97:71:a3:95:36:05:c8:c7:6e:25:6d:a7:19:
                    6d:68:63:a5:89:d1:70:16:0e:d5:a8:2a:5d:65:24:
                    37:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:7E:43:3C:3B:94:A7:EC:67:70:64:69:A3:24:34:76:D8:C5:AE:A2
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/u35DPDuUp-xncGRpoyQ0dtjFrqI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.8.0/22

    Signature Algorithm: sha256WithRSAEncryption
         39:92:6f:44:8d:a6:20:31:f4:42:f2:7d:44:d6:7f:87:7c:16:
         79:31:da:01:a0:37:2d:9b:23:55:8f:3b:e0:61:ca:70:cd:d8:
         46:70:b9:5e:42:1d:d4:ae:d0:b6:a4:1f:a3:71:9c:8b:ef:5e:
         24:a7:2c:fa:d5:f9:a0:d8:44:f0:7d:8e:4c:48:06:71:42:07:
         17:a4:b3:7b:0d:8d:e9:35:65:af:f5:2c:32:4b:83:8f:d6:ae:
         5b:ec:6d:f4:33:13:38:66:f6:7e:01:30:06:48:25:92:33:5e:
         18:22:8c:80:0d:55:2a:d2:74:67:3b:40:65:c0:c0:62:5f:b0:
         33:3b:be:91:84:8c:e4:90:a0:14:97:1b:a0:90:b0:8a:2d:44:
         c7:9c:11:86:0a:1f:4b:78:ba:e3:12:7a:40:14:ae:f6:49:2e:
         e7:79:c9:3a:cf:b4:0b:62:4a:7f:43:fc:f5:4e:d9:df:6f:16:
         04:94:bc:08:14:2b:44:86:e9:1a:92:fe:49:39:83:c7:17:83:
         63:7f:5f:d7:5b:9a:16:69:85:29:87:1b:34:cd:00:3f:ce:3d:
         28:df:2a:18:c5:cf:bd:49:3b:ec:1d:d3:5a:27:af:e6:73:1c:
         85:f5:29:3e:84:c9:9a:d0:4b:ed:67:10:01:18:5a:49:2a:3d:
         95:44:ad:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org