Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/64tk8G_VT5gJCiIZzCMnKDVka5c.roa
File:                     64tk8G_VT5gJCiIZzCMnKDVka5c.roa (raw, json)
Hash identifier:          7a2enK5Df49olwCoDOVmPLxpznGnEFTOgZ8JDP9ITS4=
Subject key identifier:   EB:8B:64:F0:6F:D5:4F:98:09:0A:22:19:CC:23:27:28:35:64:6B:97
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       34
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/64tk8G_VT5gJCiIZzCMnKDVka5c.roa
Signing time:             Wed 14 Feb 2024 07:11:57 +0000
ROA not before:           Wed 14 Feb 2024 07:11:57 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     9354
IP address blocks:        210.158.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Feb 14 07:11:57 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=EB8B64F06FD54F98090A2219CC23272835646B97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:31:69:44:c5:37:7c:6b:2d:b7:50:52:bb:c0:
                    78:86:8a:c1:29:2c:14:0a:20:ce:84:a4:47:36:b2:
                    c4:13:b9:03:8c:f5:d8:2b:d3:f6:85:be:ce:32:a4:
                    fa:8c:43:6b:58:f7:23:5f:87:9f:d0:f1:5c:bf:de:
                    55:af:04:3b:76:aa:1a:bf:f5:3e:a7:8e:21:5b:74:
                    eb:96:52:0a:90:60:37:9e:f5:2e:88:79:3a:19:f4:
                    4c:18:02:e9:82:0e:e1:44:3b:07:b6:aa:d2:62:00:
                    7c:2d:20:42:72:49:83:6b:d8:1d:15:03:d5:f7:bb:
                    fc:09:3e:55:37:f5:d2:e6:90:7d:14:f6:fc:08:f9:
                    01:22:08:0b:2f:5e:9f:50:03:c8:b2:dd:e3:b7:ba:
                    80:8e:06:88:16:e1:5e:91:9f:0a:64:42:a2:3d:7d:
                    65:71:bf:19:a3:e2:82:3c:31:e1:e0:62:8f:d7:80:
                    b2:e0:89:96:25:d5:95:79:0b:14:78:12:9f:af:e9:
                    5d:3d:0a:e4:fb:06:3f:25:a4:20:b2:45:8b:85:b2:
                    49:e1:f5:6b:37:e8:df:e9:ab:2d:74:a6:50:84:4e:
                    9f:cd:c5:b7:d7:e9:d5:ee:08:44:bc:ca:a1:72:a3:
                    73:e0:c3:36:d3:f1:2b:78:ab:03:ab:10:77:97:60:
                    17:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:8B:64:F0:6F:D5:4F:98:09:0A:22:19:CC:23:27:28:35:64:6B:97
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/64tk8G_VT5gJCiIZzCMnKDVka5c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         39:ed:0c:86:04:4a:c5:6e:c9:b1:43:0d:ad:c3:2e:9d:db:5e:
         6a:3d:44:68:94:b4:b1:3e:5f:ee:be:4d:9f:df:8d:c3:1b:cc:
         6e:a4:80:39:39:d0:80:3e:e1:30:01:97:7d:67:64:e8:a3:85:
         ee:e5:fb:56:ef:f0:e0:14:a4:54:b4:5c:f6:8d:a5:08:eb:33:
         3e:8e:d9:7c:aa:08:b0:96:94:ab:aa:26:e2:73:e4:9c:13:2f:
         e7:ed:7e:76:59:d2:29:63:23:86:27:55:5f:05:1e:73:60:06:
         30:27:94:9f:94:c8:0c:63:5d:52:cf:9f:1b:7a:fd:60:6a:67:
         ab:05:87:34:c6:34:d8:7d:0c:59:45:45:75:d1:e8:4b:21:5d:
         41:99:a5:e3:a8:e3:ba:10:ce:38:2c:25:d7:f9:f1:62:d2:d6:
         75:ba:48:9b:41:64:6e:db:67:12:ac:72:51:f4:b3:fc:20:a3:
         d8:5d:dd:99:07:a9:ba:3b:45:d4:fc:2c:03:13:cb:1c:32:ef:
         19:9c:86:cc:b8:03:a6:f3:81:a3:9b:3c:04:21:41:23:b4:50:
         34:7a:42:8c:bd:b8:67:35:47:b5:e5:bd:bb:e3:73:84:0f:31:
         95:75:4c:07:e3:eb:fb:92:c2:04:5f:77:c0:ff:8e:0b:34:9e:
         75:c6:9b:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org