Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/E6jxvNqWTObq68fLGRS1iKY7hXY.roa
File:                     E6jxvNqWTObq68fLGRS1iKY7hXY.roa (raw, json)
Hash identifier:          kFTOPNy5e0InQizzVPIgQJR4ojIHfNAnAwH498nPY6M=
Subject key identifier:   13:A8:F1:BC:DA:96:4C:E6:EA:EB:C7:CB:19:14:B5:88:A6:3B:85:76
Certificate issuer:       /CN=7EECCB87C1EAB7372BC31505E682DC581055A52F
Certificate serial:       02
Authority key identifier: 7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/E6jxvNqWTObq68fLGRS1iKY7hXY.roa
Signing time:             Wed 02 Aug 2023 02:05:46 +0000
ROA not before:           Wed 02 Aug 2023 02:05:46 +0000
ROA not after:            Thu 01 Aug 2024 01:47:14 +0000
asID:                     24259
IP address blocks:        157.120.120.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 19:38:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7EECCB87C1EAB7372BC31505E682DC581055A52F
        Validity
            Not Before: Aug  2 02:05:46 2023 GMT
            Not After : Aug  1 01:47:14 2024 GMT
        Subject: CN=13A8F1BCDA964CE6EAEBC7CB1914B588A63B8576
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:47:f2:9d:66:46:f2:26:82:8e:14:2c:9e:74:
                    8e:bd:bb:ca:b3:89:9e:72:d7:c7:e0:16:0e:5b:01:
                    ed:95:d7:29:07:43:1f:f7:b5:ad:37:2e:40:8c:1d:
                    d2:69:c9:83:10:33:88:08:7a:5a:65:3c:5e:1f:c2:
                    bb:be:7b:c5:46:44:da:f4:09:d9:c0:3a:ac:0c:f7:
                    25:08:19:67:0f:9f:6b:5a:63:03:43:5f:9a:24:99:
                    d2:22:99:9b:15:33:77:ca:41:ca:47:f4:2b:48:89:
                    07:29:00:49:cb:6c:67:ef:88:d1:e7:5f:ea:84:58:
                    93:25:d2:9a:ae:d5:c1:e6:98:2e:b2:39:47:7e:38:
                    ca:df:c0:4b:1d:3d:88:ba:ef:c2:fb:02:4e:57:2e:
                    47:93:3c:0b:81:6c:6e:67:43:87:ff:f8:0a:3a:59:
                    84:b1:2f:2c:11:95:4c:c0:55:75:3d:45:07:b5:c5:
                    88:cc:f8:d5:45:40:14:07:ab:0e:8d:67:9d:dd:5a:
                    c3:3a:d4:3d:0d:ef:a7:a1:8f:62:75:c3:a2:37:a2:
                    88:2e:d4:88:cd:1b:cd:fb:77:e7:2f:53:66:34:6d:
                    7e:86:4f:ae:d1:48:4c:82:7e:6a:9c:9f:10:c4:23:
                    ef:e0:0c:f1:cb:ab:80:2b:0f:e6:a9:da:2c:00:e8:
                    a5:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:A8:F1:BC:DA:96:4C:E6:EA:EB:C7:CB:19:14:B5:88:A6:3B:85:76
            X509v3 Authority Key Identifier:
                keyid:7E:EC:CB:87:C1:EA:B7:37:2B:C3:15:05:E6:82:DC:58:10:55:A5:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/fuzLh8HqtzcrwxUF5oLcWBBVpS8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fuzLh8HqtzcrwxUF5oLcWBBVpS8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/E6jxvNqWTObq68fLGRS1iKY7hXY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.120.120.0/22

    Signature Algorithm: sha256WithRSAEncryption
         10:f4:56:fe:63:c3:00:84:9b:b4:a3:40:3a:fe:b2:7e:65:e8:
         03:32:d7:7b:58:2b:a9:23:3a:ba:24:7d:59:ea:cb:2e:2b:55:
         eb:b8:71:8d:55:ee:5e:75:5b:6c:28:60:5a:9d:4d:21:2b:7b:
         b3:f4:23:67:17:d7:70:53:a9:9d:ca:cc:4f:ad:c8:ca:2f:61:
         55:a5:e1:57:2b:77:0a:3b:df:ef:60:f1:46:63:3c:a4:14:d3:
         2d:5f:e8:bd:2c:28:87:29:32:72:42:eb:a4:49:1f:a2:a6:75:
         07:fb:a0:fd:29:ee:15:ad:6a:cd:7f:77:6e:8e:b7:3b:b7:d6:
         db:2d:2a:a4:4a:5e:38:b9:7d:da:b6:fd:29:8e:30:15:f9:a9:
         c0:2c:2a:db:6a:a5:91:4a:21:17:68:7f:0b:38:f5:4e:13:7b:
         60:5b:43:26:6d:ac:6e:c2:7e:1c:e0:0d:bd:f6:e1:8a:9f:b1:
         13:e9:18:a1:76:2e:22:25:9f:cc:b6:85:ba:51:1a:1f:3f:7d:
         ed:68:d2:d5:15:84:78:82:ea:64:3f:88:a3:32:bf:e8:01:ff:
         4c:ce:23:22:f2:4b:88:4b:23:8d:ff:a5:2c:2d:75:9e:8a:23:
         ee:10:06:46:e7:34:fb:35:77:1a:d4:ce:5a:b3:aa:d7:a4:d4:
         ce:4a:f7:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:47 2024 by rpki-client on console-fra.rpki-client.org