Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
File:                     nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa (raw, json)
Hash identifier:          HQkAhZ1Isl6NDolkR4nSXGMnXzQJlftmjNm4wKxPY0k=
Subject key identifier:   9C:4E:57:B7:BA:4D:3D:5D:F3:20:9B:E8:82:1F:1D:C5:C6:52:54:A5
Certificate issuer:       /CN=DFBEE141DC34E893640343A7F312A702EF91A698
Certificate serial:       03
Authority key identifier: DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
Signing time:             Wed 14 Feb 2024 08:14:57 +0000
ROA not before:           Wed 14 Feb 2024 08:14:57 +0000
ROA not after:            Thu 13 Feb 2025 03:32:11 +0000
asID:                     23630
IP address blocks:        210.156.112.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DFBEE141DC34E893640343A7F312A702EF91A698
        Validity
            Not Before: Feb 14 08:14:57 2024 GMT
            Not After : Feb 13 03:32:11 2025 GMT
        Subject: CN=9C4E57B7BA4D3D5DF3209BE8821F1DC5C65254A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:92:53:9a:06:2b:97:1a:6e:20:4b:d7:a5:0b:
                    32:9a:20:79:db:7b:13:be:74:49:bf:ba:38:b2:b3:
                    9f:b7:49:27:22:8a:48:02:c8:cb:27:55:02:53:a8:
                    d5:ad:21:87:95:75:9d:4c:60:d0:b0:77:59:a6:96:
                    44:b1:b6:92:eb:c8:53:28:8a:c6:56:70:a7:38:49:
                    9d:fb:1d:91:36:7c:8c:52:64:8c:5a:28:58:51:c2:
                    71:e3:7a:43:d4:05:02:d3:f4:e7:36:05:3c:0c:ae:
                    bd:33:e7:6c:60:4b:4f:d8:9e:3d:b1:cd:13:01:81:
                    42:4f:29:d8:15:9b:bb:21:41:11:c2:0c:6c:aa:22:
                    2f:7c:bc:73:49:6b:5c:9a:b2:c9:2f:fb:9f:c0:65:
                    6f:ea:2f:eb:82:a3:bf:f3:6c:14:42:45:59:26:07:
                    0a:b8:bb:2d:5d:28:f1:67:02:11:ad:3c:d6:bd:58:
                    c5:d8:ce:70:c5:f7:69:75:0b:2c:a0:8a:bb:a4:28:
                    1f:87:0e:e3:6f:e5:b5:b4:7e:41:1c:ae:31:3e:67:
                    88:82:f5:59:aa:57:c2:17:f9:f4:75:8e:b8:7e:91:
                    2a:19:f1:6a:e4:a4:8e:fc:3b:fc:2e:5b:65:41:55:
                    58:40:db:86:8c:aa:4c:62:a7:53:3c:4d:f0:0a:4a:
                    8b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:4E:57:B7:BA:4D:3D:5D:F3:20:9B:E8:82:1F:1D:C5:C6:52:54:A5
            X509v3 Authority Key Identifier:
                keyid:DF:BE:E1:41:DC:34:E8:93:64:03:43:A7:F3:12:A7:02:EF:91:A6:98

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/377hQdw06JNkA0On8xKnAu-Rppg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/377hQdw06JNkA0On8xKnAu-Rppg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/834/nE5Xt7pNPV3zIJvogh8dxcZSVKU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.156.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:19:76:df:6f:46:1a:ed:51:17:ef:55:20:28:3e:aa:67:85:
         77:4b:35:a4:9d:df:bc:27:15:bd:23:90:0d:a9:3f:72:92:ad:
         e0:dc:4f:fd:4f:05:09:2d:e3:22:53:23:ea:0f:a3:0d:87:be:
         b6:ac:9e:71:e8:aa:f9:d3:92:7f:80:19:7f:68:7c:74:41:fb:
         d6:c2:ff:82:58:f9:bc:3b:01:f9:b5:1e:eb:26:39:24:74:d1:
         26:23:9c:10:7d:19:37:5c:9b:0e:6b:7e:10:8b:76:87:44:b7:
         12:4d:4d:94:04:74:3b:2b:64:d0:64:31:83:bb:25:d8:a9:14:
         9e:ac:cd:a4:d9:07:cf:d6:00:7e:8a:ae:43:f9:db:da:b6:a7:
         e8:04:5c:43:96:af:b5:46:d2:90:5f:c1:cb:99:7d:91:f8:1d:
         43:c7:cd:50:20:6e:2a:24:af:79:31:fe:5c:0a:c5:8c:bf:f8:
         bb:e6:5e:98:9f:e6:c5:9a:75:33:05:18:e9:5b:43:c4:bd:d8:
         59:8b:d2:3f:3d:9a:c3:50:9a:84:a9:56:b9:06:98:98:b0:5b:
         ba:fb:89:b7:1e:10:a1:ff:b8:1c:81:c1:32:33:8e:65:d2:cf:
         42:e1:7c:be:53:e8:d5:12:b8:31:98:af:75:25:e6:84:63:a0:
         9b:5e:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:53 2024 by rpki-client on console-fra.rpki-client.org