Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/h79-EbD5yxM8AVTjmiIcti9r6dw.roa
File:                     h79-EbD5yxM8AVTjmiIcti9r6dw.roa (raw, json)
Hash identifier:          DxUTclYHiTNcEOqmg56GHtdqg9NIMd7DcIe/6Qw4Jwg=
Subject key identifier:   87:BF:7E:11:B0:F9:CB:13:3C:01:54:E3:9A:22:1C:B6:2F:6B:E9:DC
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       30
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/h79-EbD5yxM8AVTjmiIcti9r6dw.roa
Signing time:             Fri 15 Sep 2023 06:46:41 +0000
ROA not before:           Fri 15 Sep 2023 06:46:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18144
IP address blocks:        110.74.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Sep 15 06:46:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=87BF7E11B0F9CB133C0154E39A221CB62F6BE9DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:d5:9b:0f:23:71:5b:15:57:a0:e7:9e:a3:23:
                    7e:9b:7b:80:20:39:a1:22:e9:d8:c4:b3:69:6b:37:
                    6f:45:97:18:a0:45:dc:a5:07:ac:37:89:37:75:38:
                    8f:3f:14:1d:70:7d:82:89:be:dc:fd:7d:6e:9c:22:
                    dc:1b:34:46:f9:24:f4:28:3d:51:1e:42:af:c1:10:
                    69:cc:d6:4a:11:a7:41:eb:b2:0b:3e:c1:c4:a7:af:
                    65:87:86:4c:30:06:b1:ca:92:aa:c5:32:05:ae:6c:
                    74:ce:c7:1f:c3:99:66:dd:ab:4d:40:10:94:bc:d9:
                    99:07:98:f1:89:1b:ba:06:65:dd:ca:d6:d5:9c:da:
                    69:e0:1b:65:80:ab:ab:60:8c:7f:5f:95:61:73:b2:
                    51:79:5b:42:19:6d:91:5c:a0:25:9d:d9:40:8e:4a:
                    73:ce:5a:f1:cb:59:9e:e6:2b:bc:cf:1f:83:be:a1:
                    d9:ae:48:e1:98:3f:3d:44:fd:6b:f7:a9:f1:35:4a:
                    18:df:4d:ac:4b:2e:1f:af:a4:19:c5:2f:94:f2:31:
                    f8:82:a7:44:47:68:1b:63:89:73:78:74:73:50:c0:
                    51:bb:b4:5f:13:a7:84:6b:46:22:fc:55:3c:dc:f5:
                    f0:2a:e9:82:1b:b5:d4:a0:f7:8c:d0:9d:e8:0a:48:
                    a5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:BF:7E:11:B0:F9:CB:13:3C:01:54:E3:9A:22:1C:B6:2F:6B:E9:DC
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/h79-EbD5yxM8AVTjmiIcti9r6dw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         bb:68:e5:b9:26:8d:09:43:6a:cd:13:ef:a2:d4:81:a9:fb:4c:
         5f:18:47:f9:cf:6f:13:23:6e:26:6e:be:1d:00:56:82:be:5f:
         79:97:06:61:fe:12:41:7a:fe:58:27:b0:30:a9:06:d0:24:ef:
         44:06:96:94:29:4c:c9:ef:75:46:b2:48:70:de:25:fd:ab:c4:
         82:29:bb:f9:f7:4b:41:05:a8:4a:4e:bf:4d:e9:fe:f3:c6:d0:
         e9:ec:74:ac:36:5f:34:97:e4:f0:28:1a:91:18:f4:65:0b:e6:
         f9:5c:ce:2b:09:5e:d1:13:4a:af:97:a0:a1:61:72:07:3c:83:
         84:7d:39:67:51:fd:f2:eb:04:60:b0:09:45:64:1d:84:1d:c9:
         c6:2c:b8:fe:35:99:78:62:b4:f2:63:5a:a9:92:be:86:5f:77:
         8d:d8:15:d4:ca:f2:7c:6e:9b:e2:6b:94:f7:f2:10:0f:0f:5c:
         f3:3d:7a:44:e2:ad:db:6b:67:14:7e:11:9d:bd:f6:4f:60:54:
         75:24:80:28:53:f6:c7:a6:06:ab:1a:6c:85:69:01:34:78:1d:
         06:48:d9:ad:ba:45:2d:e7:71:6d:08:96:37:62:70:ef:e6:5a:
         f0:03:35:13:bc:10:61:84:66:b1:17:42:3c:33:6c:ab:12:0d:
         02:a4:83:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org