Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/fL9da5kIxe9avcGOTjN2clQvbbU.roa
File:                     fL9da5kIxe9avcGOTjN2clQvbbU.roa (raw, json)
Hash identifier:          IkncbPymyrlc/A20I2KmO8Prrrc/i9UgPp9MR60dk4Q=
Subject key identifier:   7C:BF:5D:6B:99:08:C5:EF:5A:BD:C1:8E:4E:33:76:72:54:2F:6D:B5
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       07
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/fL9da5kIxe9avcGOTjN2clQvbbU.roa
Signing time:             Fri 12 Apr 2024 06:15:35 +0000
ROA not before:           Fri 12 Apr 2024 06:15:35 +0000
ROA not after:            Sat 12 Apr 2025 05:59:48 +0000
asID:                     18129
IP address blocks:        202.238.16.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Apr 12 06:15:35 2024 GMT
            Not After : Apr 12 05:59:48 2025 GMT
        Subject: CN=7CBF5D6B9908C5EF5ABDC18E4E337672542F6DB5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:bb:dd:41:c7:b7:3a:d1:0a:0f:9d:85:77:11:
                    be:f4:38:8c:89:ad:3c:3f:a8:10:c3:7a:1d:e3:e7:
                    76:a0:d6:cb:46:2f:6d:5a:81:fb:ac:69:c6:94:fb:
                    bf:a0:96:5d:53:f7:73:9c:8d:8e:78:e8:30:71:4e:
                    72:ad:9f:ce:d9:a0:f9:ba:be:e8:75:44:aa:e0:29:
                    2b:24:bf:bb:33:7a:c0:cb:84:91:b7:a6:c1:99:32:
                    f0:68:7e:85:6d:74:2c:a7:73:b7:47:47:00:79:d9:
                    01:40:0f:a5:14:3b:3f:33:ff:45:73:a1:6b:41:9e:
                    c5:d7:7d:08:bc:8b:1c:76:19:ae:4d:39:26:7a:80:
                    b8:15:a7:82:27:a6:40:d4:d2:1c:56:0e:82:c4:77:
                    a8:25:fe:8f:df:6f:64:1e:77:7d:1b:41:c9:12:aa:
                    b3:8f:fc:5e:fd:51:0b:dd:e2:3c:f7:b6:23:7a:cd:
                    7a:d5:55:22:9a:2d:2b:86:66:24:de:53:8a:b4:32:
                    0d:a8:60:62:8b:bd:1e:8c:f8:bc:81:ab:a5:54:97:
                    02:af:3f:38:48:1e:43:5e:69:15:24:63:15:81:ab:
                    dd:f3:52:24:ac:47:56:30:e2:f8:72:92:2c:72:a7:
                    c3:79:b1:32:5a:5a:f9:79:f0:7b:ed:9b:4e:55:1b:
                    de:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:BF:5D:6B:99:08:C5:EF:5A:BD:C1:8E:4E:33:76:72:54:2F:6D:B5
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/fL9da5kIxe9avcGOTjN2clQvbbU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         12:1e:cf:80:7a:50:a4:e6:a8:42:fb:74:52:8e:42:cf:7f:aa:
         75:21:b7:15:a9:01:e6:41:1b:35:89:7d:9d:aa:28:a7:83:1b:
         5d:3c:87:b3:25:98:be:af:72:79:62:f7:90:92:76:9e:46:06:
         30:ac:a1:ca:17:48:8d:97:ea:43:94:11:75:32:a2:05:5e:33:
         ba:99:58:5e:e9:5a:2d:33:67:27:ed:6c:b9:67:8b:98:3b:a5:
         b0:7e:b9:69:66:83:88:84:86:09:c2:06:8b:e2:cf:b5:57:9a:
         e5:15:74:10:77:75:0c:12:10:6a:a4:49:57:62:ab:f9:7d:24:
         fc:34:92:8f:db:a0:19:2d:58:fd:2f:89:25:d8:e6:e7:9b:57:
         38:18:00:d1:fc:53:3a:d4:68:9e:3b:86:86:aa:a9:e8:e0:38:
         c9:52:fe:e0:34:62:4b:5b:16:f2:8b:f1:89:77:6c:06:c0:aa:
         ab:6f:c8:1f:ee:2c:cf:a8:b3:4a:4a:45:a1:91:66:76:e5:3c:
         40:7b:84:7e:e4:4b:95:23:05:55:06:3a:a6:07:20:68:fd:82:
         e9:28:7e:9d:41:10:b3:69:3c:12:55:e4:10:aa:9e:e1:43:9a:
         7c:8e:dd:49:81:9f:ed:98:a4:29:fc:64:93:87:bb:8d:05:ff:
         ee:a1:6d:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org