Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/881/DH_aurD4D5d82PLbhtL7stnbaIg.roa
File:                     DH_aurD4D5d82PLbhtL7stnbaIg.roa (raw, json)
Hash identifier:          IqRbV1/1wHGx8/+QrsSKXxM4W4fSx8chPVEBo+Mskys=
Subject key identifier:   0C:7F:DA:BA:B0:F8:0F:97:7C:D8:F2:DB:86:D2:FB:B2:D9:DB:68:88
Certificate issuer:       /CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
Certificate serial:       36
Authority key identifier: D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/DH_aurD4D5d82PLbhtL7stnbaIg.roa
Signing time:             Sun 01 Oct 2023 01:29:46 +0000
ROA not before:           Sun 01 Oct 2023 01:29:46 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     23805
IP address blocks:        202.76.192.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D00E08393688B04737874ECD63DD8BE78E5EF2D0
        Validity
            Not Before: Oct  1 01:29:46 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=0C7FDABAB0F80F977CD8F2DB86D2FBB2D9DB6888
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:6e:4d:75:c3:9a:78:5a:d1:44:4e:3a:11:
                    6f:df:f9:28:26:6c:47:68:f7:df:d9:e9:4b:55:ad:
                    16:09:ab:bc:45:34:0a:5e:16:75:7e:4f:54:12:39:
                    3e:f8:5c:c7:41:ab:03:26:04:4f:b6:f7:ed:cc:1e:
                    63:12:51:af:5e:d4:92:6f:32:4f:f6:52:03:33:67:
                    70:d7:e9:81:e5:2d:eb:46:29:e4:31:da:29:42:9f:
                    4e:5c:80:8f:9f:3f:9f:b1:41:d2:92:d7:72:a6:6e:
                    4e:7e:12:5c:34:6e:d0:fd:ec:5c:a9:82:5b:f8:2d:
                    d5:22:75:f0:0c:47:c7:ce:03:f1:1a:33:5a:ce:ee:
                    fa:cb:ad:ff:1a:3e:9b:b6:ae:19:40:80:eb:0c:43:
                    f5:85:0c:34:83:78:65:23:f8:7b:34:52:8f:4b:24:
                    b7:05:03:fa:2c:43:81:17:ce:34:68:c1:45:d9:23:
                    bc:c8:65:9e:5b:8f:7b:3e:81:cc:e7:20:5a:90:61:
                    f8:33:63:9b:20:d0:67:c2:82:91:7d:d9:f9:4b:4f:
                    2f:9c:0a:0f:f6:98:95:a9:41:c8:57:43:45:4c:9d:
                    a7:e4:7d:9f:e2:27:25:2c:62:a6:49:00:a9:8c:a9:
                    a4:4d:88:2f:55:4a:24:1e:0f:26:37:17:65:db:43:
                    9f:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:7F:DA:BA:B0:F8:0F:97:7C:D8:F2:DB:86:D2:FB:B2:D9:DB:68:88
            X509v3 Authority Key Identifier:
                keyid:D0:0E:08:39:36:88:B0:47:37:87:4E:CD:63:DD:8B:E7:8E:5E:F2:D0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/0A4IOTaIsEc3h07NY92L545e8tA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0A4IOTaIsEc3h07NY92L545e8tA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/881/DH_aurD4D5d82PLbhtL7stnbaIg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.76.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a9:78:81:cf:ac:06:03:15:b4:17:bd:e8:2d:47:ab:10:58:59:
         b3:d7:39:9a:96:22:d3:2a:b1:3b:c1:7b:04:00:59:17:88:af:
         63:35:0b:82:c2:7d:3e:24:e4:23:58:5e:66:95:c0:2c:ac:de:
         cc:04:6e:12:60:31:17:5b:d5:49:29:d2:89:16:4f:2e:c5:bc:
         40:6c:38:c7:4f:ae:0c:13:3e:3b:fc:e9:0a:09:c9:19:e3:46:
         52:d0:c3:e2:ea:cd:69:81:95:0e:74:88:3d:f0:6d:f7:f5:32:
         3e:48:5c:ec:eb:ce:11:10:cc:f0:ff:fd:15:32:27:0c:24:b1:
         30:4b:a7:49:14:2d:fd:90:6a:4b:d9:ed:99:29:98:f2:62:8c:
         e8:c1:d7:8b:55:55:7b:7c:53:27:ad:59:9b:03:12:58:d2:cb:
         9c:4f:30:92:e4:5f:7d:c5:ba:47:21:32:f1:80:3d:19:53:73:
         b8:b2:d7:85:de:f2:0c:80:be:fa:33:c2:e2:3f:33:94:d7:9a:
         82:cd:d9:4a:fd:07:3c:a6:8a:a1:df:28:44:e2:1e:5c:3f:c1:
         ba:3c:65:07:36:0d:4d:5d:40:e9:45:ce:4d:7d:d4:9c:cb:cd:
         b4:4d:82:3f:d1:68:f6:37:49:71:5e:e0:87:76:6b:99:c5:b9:
         98:73:07:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:32:01 2024 by rpki-client on console-ams.rpki-client.org