Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/gNqeDWFw7JqjdjtNOUKxyY7klik.roa
File:                     gNqeDWFw7JqjdjtNOUKxyY7klik.roa (raw, json)
Hash identifier:          He0uM/ndzURuaTnSj11C3zLqUXmD/zxODu0h9KX2bQU=
Subject key identifier:   80:DA:9E:0D:61:70:EC:9A:A3:76:3B:4D:39:42:B1:C9:8E:E4:96:29
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       26
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/gNqeDWFw7JqjdjtNOUKxyY7klik.roa
Signing time:             Fri 15 Sep 2023 06:20:34 +0000
ROA not before:           Fri 15 Sep 2023 06:20:34 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        1.0.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:39:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:20:34 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=80DA9E0D6170EC9AA3763B4D3942B1C98EE49629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b7:8e:00:19:94:a5:3e:41:f8:af:2a:f4:95:
                    5f:a4:81:7e:3b:80:ca:be:bb:76:1f:b1:48:12:8c:
                    77:ce:8c:ee:95:66:db:38:be:33:8b:6f:a9:02:d2:
                    8b:1b:9c:2b:49:ec:d1:48:5d:d6:b4:6e:f9:75:84:
                    7d:e9:80:3e:9d:a2:5b:e9:e6:44:af:bf:83:fc:aa:
                    86:4c:56:e8:af:f8:4f:36:c4:c1:24:b9:13:c6:63:
                    72:89:4c:80:4e:77:70:dc:c6:53:c5:a5:bf:67:fe:
                    63:fd:8b:68:47:06:fa:9f:e3:ec:dd:a5:95:58:ae:
                    16:30:80:1b:a5:b1:2c:a7:2b:a2:a5:a6:95:3d:da:
                    02:a9:dd:b3:c9:53:15:a0:e1:e5:cc:bf:2e:81:e5:
                    7f:bd:53:5c:4e:11:25:80:d4:0d:bb:b2:a2:c4:12:
                    92:8e:0d:76:7f:ec:1b:8e:41:02:d4:a4:50:95:aa:
                    08:e1:70:41:7b:39:be:21:b3:88:b5:2c:ce:39:91:
                    89:0f:cc:40:84:f7:c7:73:54:df:cc:4f:92:bf:e6:
                    55:d1:ab:ed:d3:f2:99:7a:81:f5:85:85:1f:77:e6:
                    52:57:b0:08:9f:93:2d:32:8e:da:e4:8d:75:9e:35:
                    4e:f5:01:42:e1:f2:93:f0:ab:ad:82:38:42:85:49:
                    64:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:DA:9E:0D:61:70:EC:9A:A3:76:3B:4D:39:42:B1:C9:8E:E4:96:29
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/gNqeDWFw7JqjdjtNOUKxyY7klik.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.0.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         b7:52:ce:15:12:65:5f:5e:40:c8:30:46:77:99:a4:5d:53:16:
         25:5e:34:ed:6c:6f:f7:55:a1:b3:5d:50:5e:c4:81:f0:8a:61:
         32:53:4a:fd:be:eb:fe:69:9a:4c:25:9d:dc:83:13:f9:f4:8b:
         0e:d1:83:4a:97:a5:53:e8:0e:3f:67:c4:f2:0c:7b:73:d5:49:
         e3:ed:cb:cf:b9:3d:d7:86:37:29:7f:e6:a4:21:8f:7e:af:87:
         c2:5e:43:be:2c:c0:cc:f9:83:44:d0:4b:59:0c:aa:73:ce:10:
         75:bd:1e:46:15:d3:4e:a9:61:e2:83:19:0b:09:4a:e5:5f:a4:
         d8:12:71:d3:48:e4:9d:d6:c4:ac:44:75:c5:e6:b4:fc:be:6f:
         9a:16:fa:31:ea:34:a9:cc:1f:a2:bb:28:0f:8c:46:99:41:a1:
         44:14:76:88:9c:13:ef:c0:84:01:5d:c8:8c:c0:3d:5f:eb:8a:
         3b:a7:cb:78:74:51:47:98:9f:dd:ed:51:7c:16:52:84:dc:d2:
         17:a8:50:ab:53:18:3d:96:79:22:ba:30:a3:46:0b:af:59:e5:
         36:c4:2a:21:74:3f:30:98:f0:6d:0a:f5:e1:ab:e4:33:e8:02:
         7c:82:52:ab:28:0b:f3:6a:af:99:6d:e1:fd:9b:db:91:8a:e9:
         31:d8:ba:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 14:59:06 2024 by rpki-client on console-fra.rpki-client.org