Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/cllGBGAvRNJeufzcGu6ZFSYRgEw.roa
File:                     cllGBGAvRNJeufzcGu6ZFSYRgEw.roa (raw, json)
Hash identifier:          PEUJV8fpmAyOfoK6UHHquok9gZWt05tMLZ3dEBApi2Y=
Subject key identifier:   72:59:46:04:60:2F:44:D2:5E:B9:FC:DC:1A:EE:99:15:26:11:80:4C
Certificate issuer:       /CN=AEEB992E910DD690365E5E9B86B6ED210578721C
Certificate serial:       02
Authority key identifier: AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/cllGBGAvRNJeufzcGu6ZFSYRgEw.roa
Signing time:             Tue 03 Oct 2023 07:20:35 +0000
ROA not before:           Tue 03 Oct 2023 07:20:35 +0000
ROA not after:            Wed 18 Sep 2024 07:00:52 +0000
asID:                     24255
IP address blocks:        64.33.0.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AEEB992E910DD690365E5E9B86B6ED210578721C
        Validity
            Not Before: Oct  3 07:20:35 2023 GMT
            Not After : Sep 18 07:00:52 2024 GMT
        Subject: CN=72594604602F44D25EB9FCDC1AEE99152611804C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:e1:bf:d6:95:a4:3b:4e:ad:60:3d:60:22:77:
                    6f:d7:f2:9c:19:2d:42:ae:73:16:61:17:55:e2:cc:
                    89:97:dd:11:0d:7f:7f:44:59:af:da:5f:70:99:be:
                    6e:bf:be:81:11:0c:83:6f:c6:06:34:80:20:f4:19:
                    46:68:43:09:de:86:50:1e:10:57:b2:41:48:ac:93:
                    0f:b1:d3:33:02:63:36:70:2b:2b:d2:2a:a1:a3:91:
                    3c:30:2a:74:00:ee:cf:d4:b8:aa:d9:fc:fb:a6:c9:
                    64:9d:3d:40:3e:57:e0:34:9e:f3:9d:cc:74:ae:cf:
                    63:06:f9:1d:f8:9b:79:c7:98:43:aa:14:2c:b3:d7:
                    ec:6d:af:09:de:da:8c:71:14:58:37:27:f3:7a:ba:
                    a6:e1:d2:31:23:9a:fa:f5:de:68:27:f3:32:59:f6:
                    0d:3e:2b:12:55:6c:f8:2a:2f:72:bb:6e:70:91:03:
                    8c:0c:71:ac:81:5e:b4:41:4f:78:63:c2:af:fa:16:
                    0c:68:75:2e:ac:4f:ad:63:b9:2a:eb:20:21:bd:a7:
                    56:8f:e1:de:14:db:84:4b:c1:0b:a7:4d:72:bd:59:
                    e9:83:69:06:27:38:2c:e9:20:fe:23:76:6f:24:d7:
                    90:5b:37:89:9f:a8:3c:dc:9b:47:24:69:36:e8:c5:
                    eb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:59:46:04:60:2F:44:D2:5E:B9:FC:DC:1A:EE:99:15:26:11:80:4C
            X509v3 Authority Key Identifier:
                keyid:AE:EB:99:2E:91:0D:D6:90:36:5E:5E:9B:86:B6:ED:21:05:78:72:1C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/ruuZLpEN1pA2Xl6bhrbtIQV4chw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ruuZLpEN1pA2Xl6bhrbtIQV4chw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/cllGBGAvRNJeufzcGu6ZFSYRgEw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.33.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ad:b0:c6:24:be:bb:1c:da:5a:d0:25:f3:1c:90:e6:1b:5b:a4:
         7e:b3:96:e6:34:93:9a:bd:f6:4d:40:f7:53:e9:28:cc:8f:2d:
         00:90:6e:ba:e4:1a:51:da:dd:e2:c2:d1:65:5b:39:14:62:ea:
         ea:6e:d1:32:8a:d4:a1:04:7f:82:70:9d:32:f1:a7:58:08:81:
         48:6c:75:c8:c2:ef:36:a5:bb:b8:d5:ef:54:86:ed:46:7d:be:
         8e:56:f8:fa:be:ab:2f:da:d7:99:7f:cf:e8:fd:09:9b:b1:e0:
         4d:60:3e:59:54:f5:02:d3:a4:c5:6b:26:6f:d8:fc:f8:25:82:
         8c:0d:9e:57:29:52:01:26:08:8b:b1:4e:13:e1:19:04:20:b0:
         8b:86:e3:c4:93:e0:07:a9:4a:3c:de:5b:ce:42:68:72:52:fc:
         e9:22:88:f9:83:da:41:1b:f4:11:01:76:3e:5e:30:38:65:cf:
         45:cc:fd:7b:9b:5b:35:b4:d3:7c:bc:08:93:59:2c:c1:b5:f1:
         53:e9:5f:b4:53:4b:3c:ec:c1:d2:bf:1d:00:bc:be:f0:8b:9a:
         72:cd:97:71:3b:47:07:89:bf:ea:67:89:a8:c4:1e:09:83:fd:
         e5:f4:38:7a:6c:a0:96:d5:1f:2d:ca:f3:83:42:74:4f:bc:8e:
         7e:6a:3b:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org