Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/uCXL4sVyklyXrGwEOlwfAvHGc1Q.roa
File:                     uCXL4sVyklyXrGwEOlwfAvHGc1Q.roa (raw, json)
Hash identifier:          u9KUPhWlH7T96lUnlMG1cpCbrEWTNrjCFPtCMxoeky4=
Subject key identifier:   B8:25:CB:E2:C5:72:92:5C:97:AC:6C:04:3A:5C:1F:02:F1:C6:73:54
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       5E
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/uCXL4sVyklyXrGwEOlwfAvHGc1Q.roa
Signing time:             Thu 29 Feb 2024 01:30:53 +0000
ROA not before:           Thu 29 Feb 2024 01:30:53 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18260
IP address blocks:        210.141.208.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Feb 29 01:30:53 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=B825CBE2C572925C97AC6C043A5C1F02F1C67354
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:40:85:d4:b6:e3:3c:a8:da:eb:47:dc:21:a9:
                    22:f7:52:3e:bd:a3:bc:92:f8:f4:7a:94:eb:59:97:
                    2d:38:ab:23:9e:34:d1:d0:0f:e2:78:a1:f6:17:b5:
                    de:fe:90:ab:b4:e5:b1:ac:45:20:1b:c1:83:45:2d:
                    bb:e9:78:5c:13:d1:db:44:e0:8a:51:9a:8f:d2:fc:
                    d8:59:1f:70:b2:e3:b4:c4:b6:14:6a:df:9f:eb:db:
                    39:7e:b1:ac:03:fb:0d:ad:06:43:aa:7f:d8:d1:b4:
                    80:c8:42:05:cf:0f:19:df:6b:50:f8:5c:b1:4e:63:
                    60:17:cf:6d:e9:2b:0b:4f:7a:11:2e:3c:47:04:5e:
                    7a:f3:04:f9:b2:7d:cc:c4:68:9e:fb:62:c8:89:68:
                    28:84:c8:f3:42:cc:8f:9e:78:0e:46:76:0f:27:9b:
                    5c:36:ca:f3:18:ba:07:0d:d1:70:a3:79:47:ce:84:
                    c2:2b:bb:6c:53:57:7d:4e:41:f1:04:d2:00:a8:f1:
                    79:4b:a9:09:3b:8b:de:44:1a:1f:06:3e:ff:a7:9e:
                    d9:0b:a9:0a:80:6a:7a:82:f0:f2:c0:5a:12:dc:22:
                    03:bd:cc:b6:86:e4:79:ac:dc:73:15:51:d7:d7:af:
                    62:f0:7b:2f:b0:d1:01:ee:aa:0b:3f:cf:8f:44:8d:
                    2b:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:25:CB:E2:C5:72:92:5C:97:AC:6C:04:3A:5C:1F:02:F1:C6:73:54
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/uCXL4sVyklyXrGwEOlwfAvHGc1Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         3e:d4:78:6f:f3:0c:b7:8e:46:73:ca:81:23:22:98:9a:f3:ed:
         b6:c6:d5:70:7c:88:a4:af:84:22:75:3b:8e:23:9d:a2:a0:c3:
         45:18:a5:5f:e5:74:52:60:0e:f7:80:17:f0:a0:e9:97:2b:a4:
         28:b9:cb:07:91:e1:14:3b:a6:d2:d7:64:c0:d0:05:3f:16:09:
         cc:70:44:0b:08:5b:32:d1:cf:7b:ee:59:38:37:83:49:3a:b0:
         53:a0:24:c8:e0:38:37:82:ee:5f:a3:52:18:ca:79:b4:19:a7:
         c7:2c:67:6f:df:17:b0:4d:94:eb:28:f5:ea:64:0c:b0:e7:53:
         41:3a:18:8f:14:36:6a:f6:05:4f:4e:5d:30:29:50:26:a3:26:
         16:61:e4:5c:1d:97:69:a1:b1:6f:50:63:5f:e5:3f:49:75:8b:
         49:64:16:ea:5d:d8:30:b2:f4:12:ee:cb:04:35:bb:e2:e4:7a:
         19:5a:18:8a:9a:91:c1:ea:34:2c:25:20:6f:9b:bd:97:55:50:
         e2:b9:20:0e:dd:ba:00:66:bc:19:6f:99:8a:2f:82:e9:b3:23:
         3b:08:5b:95:97:af:33:80:32:83:e4:06:08:45:ed:b5:eb:1a:
         77:41:6a:d9:48:0f:ee:0c:88:94:20:52:f9:f3:8d:43:4b:f1:
         9d:b1:f6:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org