Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/6oU4ek0VX0ffgLC99_G1GbhvZVk.roa
File:                     6oU4ek0VX0ffgLC99_G1GbhvZVk.roa (raw, json)
Hash identifier:          vFf4xlDcKRzYpiCFtobQ4sWoSSEEesQGC+ApFbD+evE=
Subject key identifier:   EA:85:38:7A:4D:15:5F:47:DF:80:B0:BD:F7:F1:B5:19:B8:6F:65:59
Certificate issuer:       /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial:       02
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/6oU4ek0VX0ffgLC99_G1GbhvZVk.roa
Signing time:             Wed 14 Feb 2024 08:10:58 +0000
ROA not before:           Wed 14 Feb 2024 08:10:58 +0000
ROA not after:            Thu 13 Feb 2025 03:32:11 +0000
asID:                     23630
IP address blocks:        210.134.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
        Validity
            Not Before: Feb 14 08:10:58 2024 GMT
            Not After : Feb 13 03:32:11 2025 GMT
        Subject: CN=EA85387A4D155F47DF80B0BDF7F1B519B86F6559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:48:4c:df:9d:56:8d:b5:9a:c3:f8:1c:0a:1e:
                    94:aa:c8:f3:2a:b4:92:03:c5:67:a0:57:d0:37:ad:
                    a3:cd:20:54:55:1e:df:56:71:31:18:7f:67:89:a9:
                    e7:ac:55:ad:63:73:80:4e:41:18:d7:72:5c:b6:f9:
                    50:cb:47:19:c9:22:52:20:6c:31:29:c1:ec:05:69:
                    f9:78:6a:d6:d9:eb:c1:04:d8:4e:6c:14:07:4e:8a:
                    b2:35:44:fd:cf:c4:03:5a:83:c4:fc:cf:d2:55:80:
                    dc:ef:ca:ba:f7:2b:b0:c7:d1:53:3e:6f:a4:0f:2f:
                    c0:15:70:89:97:59:85:2c:c4:61:6b:47:a1:8a:27:
                    d4:13:f0:89:2b:87:db:ea:b7:e1:50:3b:43:6f:1c:
                    b8:80:43:6c:a8:79:8f:72:24:fa:e8:0c:04:16:b7:
                    93:6e:2d:8c:5f:15:cf:35:ae:cb:ee:e9:c7:74:a5:
                    13:07:65:96:fd:d5:fb:f9:84:db:58:56:d1:8f:fb:
                    01:dc:a4:bb:e8:b7:db:8e:bf:1f:63:1e:14:67:c0:
                    86:8e:90:33:5f:12:00:7c:2b:8f:ac:9d:4f:d4:db:
                    54:02:77:cd:99:96:0f:b7:72:c2:14:fe:89:7e:30:
                    3a:b5:fd:4d:51:9a:52:b1:d1:93:0e:a3:3f:63:93:
                    6d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:85:38:7A:4D:15:5F:47:DF:80:B0:BD:F7:F1:B5:19:B8:6F:65:59
            X509v3 Authority Key Identifier:
                keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/6oU4ek0VX0ffgLC99_G1GbhvZVk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.134.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:6e:8d:ab:6c:f6:7f:a8:99:a3:fc:0a:62:d6:13:58:62:33:
         11:55:7d:41:08:eb:5a:07:ea:e9:a0:ac:20:55:83:ff:30:75:
         17:07:bf:1f:22:a0:03:88:09:ec:95:5b:1d:33:84:59:6c:b5:
         71:a0:76:3a:d6:59:45:ce:25:c5:cb:d9:7c:3e:61:3a:9e:27:
         97:39:19:56:96:d2:b2:32:98:e7:61:04:0d:04:44:ef:87:c3:
         00:95:a8:47:d7:c2:5d:0c:df:8e:79:bd:43:20:09:3d:b8:b4:
         5c:c5:c0:16:d8:c2:f4:b4:55:5b:a1:42:a8:ba:c4:ac:0f:92:
         be:eb:7c:16:1a:6e:e8:4a:af:eb:b1:0f:c8:48:0e:3a:3c:0b:
         1c:cc:86:7e:da:91:08:9f:7a:75:b9:cf:c2:8d:02:67:67:bf:
         7c:fa:11:57:c2:a1:a4:51:69:d4:75:1e:a2:00:c8:25:45:db:
         ac:11:9c:90:70:6c:09:ff:74:e0:d0:a1:c3:33:38:25:db:e0:
         1c:6f:53:0b:16:cd:ad:d3:95:10:8e:78:c5:83:34:76:6b:bc:
         28:be:ae:a0:50:11:c7:22:35:b3:23:e2:98:68:43:9b:c5:b6:
         35:ac:c0:d7:50:65:26:e0:54:ea:15:1a:85:42:a6:42:e3:9e:
         9e:ef:76:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org