Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/897/gAjzM-YWurv55eYXEnxhmIg-aoM.roa
File:                     gAjzM-YWurv55eYXEnxhmIg-aoM.roa (raw, json)
Hash identifier:          Ha94xYMAW/qgXKqlFVnt2MVwacLjBm29KwSCY/rmOQg=
Subject key identifier:   80:08:F3:33:E6:16:BA:BB:F9:E5:E6:17:12:7C:61:98:88:3E:6A:83
Certificate issuer:       /CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
Certificate serial:       63
Authority key identifier: AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gAjzM-YWurv55eYXEnxhmIg-aoM.roa
Signing time:             Sun 01 Oct 2023 01:29:02 +0000
ROA not before:           Sun 01 Oct 2023 01:29:02 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9621
IP address blocks:        218.40.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 14 Jun 2024 14:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA08097C6060710280CDAAA4E7E06C1F13CD16F2
        Validity
            Not Before: Oct  1 01:29:02 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8008F333E616BABBF9E5E617127C6198883E6A83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:b8:25:0f:4f:e6:cc:e6:03:1b:0f:56:d3:7b:
                    89:05:df:86:d9:aa:1c:83:32:2c:cb:ce:5a:4d:09:
                    1e:01:cd:da:6a:c7:b4:6a:31:73:48:b9:75:d6:f4:
                    0b:65:4d:69:d6:ae:02:65:c9:79:a8:75:bf:64:27:
                    8e:47:07:3a:1d:6a:19:f1:79:83:88:ae:b6:2f:df:
                    21:1d:02:78:d8:c8:34:e6:92:a6:d1:a6:da:2c:2a:
                    77:34:11:79:18:6e:a3:2e:30:2e:de:4f:10:9c:92:
                    00:49:2f:37:12:03:28:8a:a3:2c:ec:1d:06:9a:31:
                    eb:7d:65:78:56:fc:d9:e6:c0:5b:24:f3:12:3d:fe:
                    81:0e:f0:96:5f:24:c1:26:7e:cc:06:9b:b7:a6:45:
                    17:62:44:46:10:5a:75:bb:31:c4:b4:83:ec:63:c7:
                    94:7a:40:dc:6a:6d:fd:3f:3f:32:38:0e:1e:e2:70:
                    22:c3:a4:a9:26:fe:21:e4:ea:80:f9:c5:5f:d6:47:
                    30:b7:9f:6d:06:ff:7c:c5:16:83:31:b4:71:06:27:
                    f5:ba:ad:4d:87:0d:10:ef:fb:66:76:ac:4a:a7:b8:
                    99:7f:92:15:18:80:6c:bf:cb:48:62:28:3f:85:07:
                    bc:d1:5d:f9:4f:ce:11:a8:e0:8d:fd:07:56:f7:65:
                    60:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:08:F3:33:E6:16:BA:BB:F9:E5:E6:17:12:7C:61:98:88:3E:6A:83
            X509v3 Authority Key Identifier:
                keyid:AA:08:09:7C:60:60:71:02:80:CD:AA:A4:E7:E0:6C:1F:13:CD:16:F2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/qggJfGBgcQKAzaqk5-BsHxPNFvI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qggJfGBgcQKAzaqk5-BsHxPNFvI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/897/gAjzM-YWurv55eYXEnxhmIg-aoM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:48:f7:c5:6e:c8:cf:6c:98:a4:07:56:17:00:99:a3:ac:48:
         dd:cb:fc:96:b7:b1:23:e2:8e:67:d3:cb:d2:5f:03:f3:e3:14:
         39:0c:83:3f:e2:10:66:28:19:b3:bf:b9:08:1c:75:df:fb:55:
         04:df:14:27:b1:02:69:a1:1e:27:97:6c:a7:25:53:0c:c9:e9:
         f1:c6:6f:a3:45:c2:62:90:7d:af:a0:50:67:5c:26:e6:af:4b:
         eb:bb:0f:2a:16:73:c3:9e:3f:6b:94:10:19:cc:b8:31:a0:a0:
         44:ed:bd:38:bb:cb:92:ce:06:70:03:3e:16:cf:d8:f2:47:f9:
         c2:98:5c:05:cf:6b:8b:c4:5a:30:55:16:16:7d:55:21:58:4c:
         ba:07:b4:5c:54:ab:32:85:2b:de:9c:df:8e:9d:92:62:f7:45:
         a5:50:99:6a:36:1b:fb:98:cd:f8:2f:0a:34:07:85:3c:3c:3d:
         a7:f1:a9:35:63:86:14:24:34:eb:bd:68:47:14:5f:c9:9e:d4:
         dd:f9:d1:9e:c6:79:22:95:3c:f1:b3:89:b3:6d:fc:24:16:1b:
         49:74:94:a2:0f:14:08:1d:63:8f:74:33:36:2f:f4:10:e2:33:
         9e:d4:3b:5d:09:ae:c4:2c:7d:68:12:fe:7c:1e:55:32:77:e6:
         6d:a6:bb:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 7 15:25:08 2024 by rpki-client on console-fra.rpki-client.org