Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/DUYAgSQ1Bvjkgdhqrgn8tb6gHaw.roa
File:                     DUYAgSQ1Bvjkgdhqrgn8tb6gHaw.roa (raw, json)
Hash identifier:          +N0uOuOEWF/OR+pTn/LiJdnNiN+abhH86MCBGh79/no=
Subject key identifier:   0D:46:00:81:24:35:06:F8:E4:81:D8:6A:AE:09:FC:B5:BE:A0:1D:AC
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       12
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/DUYAgSQ1Bvjkgdhqrgn8tb6gHaw.roa
Signing time:             Tue 15 Aug 2023 00:56:47 +0000
ROA not before:           Tue 15 Aug 2023 00:56:47 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     38628
IP address blocks:        115.124.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:32:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Aug 15 00:56:47 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=0D460081243506F8E481D86AAE09FCB5BEA01DAC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:e0:f9:f5:39:1d:46:d6:2a:9a:e1:5b:60:79:
                    3f:81:8f:42:3d:f9:98:66:68:4a:98:83:8c:c6:44:
                    10:0d:b3:aa:63:ac:2c:88:89:bf:21:49:73:ec:58:
                    73:d4:09:0a:ed:22:71:86:14:fa:83:15:0d:4f:c0:
                    fd:20:ce:73:9a:26:cd:b4:ce:3c:6f:70:76:04:e7:
                    79:60:83:60:e4:19:c5:3a:d5:d3:28:d1:b7:b3:ce:
                    7a:27:a9:dc:02:4e:25:79:14:d5:c3:0f:f3:b2:20:
                    68:69:fd:6c:53:80:17:e2:5f:eb:7d:8e:d0:c8:e9:
                    a4:76:87:7b:14:03:c1:86:88:48:76:4d:a2:e9:f1:
                    18:1b:ca:c5:76:14:d0:86:2c:13:87:5c:c0:5e:73:
                    0b:cb:b5:ba:a0:86:1f:3f:4a:56:56:28:9c:38:b2:
                    c0:53:a9:30:7f:5d:df:de:d8:0b:b8:c4:29:61:59:
                    66:43:80:0a:80:82:26:5b:80:16:8c:8f:e7:e6:23:
                    60:64:2e:a4:31:a5:ff:e4:78:c6:9b:bf:d0:1e:2b:
                    45:d2:6d:4d:0a:4a:d9:b5:c0:c1:25:d6:90:98:3d:
                    94:ed:64:8a:d3:5c:98:1f:3f:c1:47:2f:80:01:32:
                    a1:8c:39:ca:f3:63:85:97:21:33:d4:88:dd:d7:75:
                    63:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:46:00:81:24:35:06:F8:E4:81:D8:6A:AE:09:FC:B5:BE:A0:1D:AC
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/DUYAgSQ1Bvjkgdhqrgn8tb6gHaw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1e:be:1c:df:3c:50:35:f7:56:56:5a:f1:4b:7e:da:34:90:d0:
         a0:2c:35:ba:1d:df:c4:46:12:4b:2f:17:dc:84:1c:82:10:16:
         8c:10:9a:aa:46:7c:9f:cb:58:f0:d3:74:17:2d:34:72:c6:69:
         8c:5d:39:98:32:49:fe:ac:f9:b0:46:f0:51:93:4f:51:d3:53:
         24:6c:e4:04:ae:d0:e9:e7:3b:2d:53:09:eb:90:b8:c0:fa:83:
         bf:2a:8f:69:b0:2f:bf:af:ef:8c:f4:db:8b:15:a1:b3:39:6f:
         51:c2:37:c7:2f:05:29:02:d3:5f:03:19:3a:e6:cf:b7:af:2f:
         81:96:43:a5:ee:a9:0a:47:e3:91:f5:58:47:ed:0c:1d:36:af:
         a5:4c:ba:09:14:e4:44:3a:f8:be:74:58:0d:d2:89:10:19:23:
         c8:b2:02:58:bb:9c:d2:ea:7f:9f:2f:b9:fd:4a:4a:5a:36:a3:
         18:10:dd:a3:c7:0f:4e:c2:77:e6:65:40:a3:ca:61:b4:fe:de:
         85:45:88:d5:78:e1:94:c5:79:eb:ab:e1:34:d2:7e:5c:57:5c:
         92:3f:a5:4f:9e:f7:b5:3b:8d:99:d9:38:b1:fb:76:01:78:ca:
         13:d9:b1:6c:82:0f:66:ac:61:1f:31:42:29:b4:6b:ec:87:13:
         f6:a9:a0:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:42:01 2024 by rpki-client on console-ams.rpki-client.org