Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/lyMNVLojk9HTy4NpDlg3Mn2goS4.roa
File:                     lyMNVLojk9HTy4NpDlg3Mn2goS4.roa (raw, json)
Hash identifier:          /uamLj1fftuMKKFX2Pgp4FjNgUK9DWZJUknvcnrumpw=
Subject key identifier:   97:23:0D:54:BA:23:93:D1:D3:CB:83:69:0E:58:37:32:7D:A0:A1:2E
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       1A
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/lyMNVLojk9HTy4NpDlg3Mn2goS4.roa
Signing time:             Fri 26 Jan 2024 05:25:04 +0000
ROA not before:           Fri 26 Jan 2024 05:25:04 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     23614
IP address blocks:        210.158.181.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Jan 26 05:25:04 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=97230D54BA2393D1D3CB83690E5837327DA0A12E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:0c:99:a3:fe:a4:24:06:20:cb:2c:84:ea:28:
                    93:f0:45:4d:67:38:4f:ff:79:57:f9:fd:cc:fb:b5:
                    9a:4e:af:2e:4e:f1:a2:c5:ac:1e:e5:e7:92:57:0e:
                    1f:e3:86:c0:78:3d:31:21:84:1f:99:08:82:ef:72:
                    70:af:71:c4:1b:ea:4f:ec:82:50:3f:79:c6:b4:4d:
                    42:91:22:43:b3:26:b2:62:c9:b3:8c:d3:de:80:4f:
                    53:08:06:5f:a8:92:42:d5:3c:4e:27:39:d8:d5:28:
                    fe:66:db:24:18:03:7a:72:8e:5b:89:88:9a:e1:30:
                    72:01:3c:37:38:54:80:3c:01:7d:42:f8:03:8d:33:
                    09:d1:c7:03:c4:bf:49:d2:43:6f:40:4f:3e:15:67:
                    e5:5e:50:79:67:02:2a:0d:fc:b9:8b:d8:70:a3:a5:
                    62:a1:ad:af:a2:ff:83:cb:d3:d4:40:e3:13:03:ff:
                    63:6f:55:59:45:3b:f2:a4:88:e2:2f:ab:db:9a:b5:
                    6e:48:be:77:2e:ef:34:1e:5c:f4:3a:d8:80:45:ab:
                    be:54:0f:39:c1:6a:7f:23:4e:2f:81:e1:1f:6e:0f:
                    ba:ab:41:eb:b8:6c:92:44:32:0d:39:2c:4a:a8:7f:
                    a4:15:65:ee:aa:51:e3:ef:da:b1:0a:67:70:b6:a5:
                    73:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:23:0D:54:BA:23:93:D1:D3:CB:83:69:0E:58:37:32:7D:A0:A1:2E
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/lyMNVLojk9HTy4NpDlg3Mn2goS4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.181.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c7:ec:52:4c:15:04:ac:88:79:52:f9:cc:10:94:77:32:d9:0d:
         a3:3b:6e:39:b7:8e:63:97:53:c2:64:ca:ed:d9:51:40:84:6e:
         bd:c2:5e:2e:7f:d2:c0:e8:6e:cf:a5:5e:51:71:e4:f0:bb:93:
         57:a7:00:1d:bd:3f:a9:da:e7:46:23:89:4e:8b:e3:1d:aa:4c:
         e8:86:46:e5:48:a0:e0:19:5f:af:1e:0e:75:62:f9:07:a2:18:
         f1:22:c8:c7:04:83:bf:95:8e:e8:f0:7a:75:f4:37:73:b7:a9:
         43:ef:70:f4:b7:91:06:0e:eb:60:f3:a2:9d:3e:b8:60:d7:80:
         e6:e2:2c:df:ce:d0:be:4a:63:49:9e:d0:10:b5:9c:90:ec:a0:
         ea:5d:d5:7e:5b:84:2c:cc:3b:95:b7:38:88:5b:b2:e1:50:5b:
         86:c4:84:1c:2a:3b:ee:4b:15:e7:5c:4d:30:3b:16:1c:d2:c1:
         24:6b:3d:c6:7b:28:d0:40:58:41:f3:b6:df:f3:b2:20:e7:e8:
         71:18:49:af:05:02:d2:54:e2:80:79:f8:35:9a:5d:19:aa:75:
         84:0f:6e:3f:f1:b7:11:39:ed:9d:9f:ce:b1:59:4d:14:97:d0:
         fd:ac:bb:8b:ed:fc:ef:36:c8:c2:5c:8e:d1:f5:d5:c9:dd:5b:
         7a:a2:d6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org