Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
File:                     vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa (raw, json)
Hash identifier:          skXBlOY+/34pA+biXx0rtIQBSRMLNbEDHConMcgVITI=
Subject key identifier:   BD:98:FE:78:F0:EC:F9:10:94:7F:42:7E:9D:10:0F:A9:F2:82:D8:4D
Certificate issuer:       /CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
Certificate serial:       32
Authority key identifier: 66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
Signing time:             Wed 01 Nov 2023 01:29:51 +0000
ROA not before:           Wed 01 Nov 2023 01:29:51 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     3491
IP address blocks:        203.170.52.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 50 (0x32)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6676F69140635CF4AD2A3A9CF5EF25BADD2DC72D
        Validity
            Not Before: Nov  1 01:29:51 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=BD98FE78F0ECF910947F427E9D100FA9F282D84D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:92:af:7e:5c:ce:e3:b0:fe:16:d2:ee:1e:77:
                    87:df:ae:f9:ea:0e:8a:39:ac:be:93:ae:c9:94:8e:
                    f0:ce:04:d8:da:90:a2:cb:27:f5:0c:f0:8a:8f:40:
                    5c:29:3f:21:99:35:74:0c:f3:7f:ea:a7:3c:da:9d:
                    7e:af:a2:27:c1:41:42:22:33:d0:06:16:91:0a:a2:
                    da:e6:f6:c6:ff:0d:5a:1e:84:15:b0:a1:6c:83:6b:
                    da:ac:44:b1:b6:ca:f0:06:4c:e7:22:80:b1:10:5b:
                    7d:01:d5:3c:05:82:99:62:98:97:66:98:6a:e0:f4:
                    6c:04:08:2e:6a:e2:60:82:74:e1:04:3f:ad:27:fe:
                    45:6c:60:d2:f5:3a:4f:6d:20:61:eb:b6:12:46:6f:
                    36:98:56:42:80:ba:04:33:c3:65:04:d4:ec:6b:71:
                    66:0b:30:35:53:cc:72:65:40:c0:1f:de:22:ea:49:
                    2d:6a:29:a6:00:e9:07:54:c2:24:50:92:78:9c:08:
                    30:07:dd:6f:f6:c7:bd:ac:00:8b:2b:67:32:0b:08:
                    50:fc:68:f4:e5:e7:5a:09:44:43:16:f9:66:8f:9a:
                    78:23:72:16:55:d4:65:ed:f1:e1:fe:20:ec:72:6e:
                    3f:31:22:40:b6:2d:23:f4:e8:c6:98:71:5a:9b:e7:
                    89:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:98:FE:78:F0:EC:F9:10:94:7F:42:7E:9D:10:0F:A9:F2:82:D8:4D
            X509v3 Authority Key Identifier:
                keyid:66:76:F6:91:40:63:5C:F4:AD:2A:3A:9C:F5:EF:25:BA:DD:2D:C7:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/Znb2kUBjXPStKjqc9e8lut0txy0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Znb2kUBjXPStKjqc9e8lut0txy0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/964/vZj-ePDs-RCUf0J-nRAPqfKC2E0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.170.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         34:5c:2e:87:d8:75:b6:04:6c:61:cd:3c:0e:1d:76:60:8a:e0:
         9e:ee:6c:14:f3:14:af:a5:ca:e1:d4:0e:36:69:8b:db:0a:03:
         a0:3d:d3:9a:2d:1a:71:ad:2d:fc:1a:67:f1:99:1d:d9:73:c6:
         a5:1d:20:ba:e6:ca:c4:1c:fa:07:21:1d:3a:54:d8:28:71:c0:
         73:40:80:13:0b:28:96:e5:a3:0a:e2:ec:50:80:9d:d8:38:a6:
         46:ee:9d:d3:80:3b:74:d9:53:92:c2:ba:67:02:d0:e3:54:14:
         39:85:08:83:e1:58:93:1e:1a:3d:a6:11:f3:84:b4:b8:77:2f:
         e2:76:04:4a:0d:0c:e4:d2:23:c1:52:da:32:79:d1:e8:89:3e:
         27:1e:fa:37:8c:0c:e2:26:29:eb:00:50:4d:1c:d7:4b:80:f4:
         2a:89:68:ec:ea:fe:13:2a:c2:18:3f:22:6c:f3:3f:7f:0f:91:
         dc:74:fb:f3:32:d7:6a:30:41:09:34:c3:2d:85:ee:04:58:76:
         2a:48:bf:ca:77:c7:d8:d0:af:04:44:75:6f:f9:04:63:ed:fd:
         80:34:51:0c:e1:6d:0d:94:da:60:5d:6b:79:63:ce:9f:2f:e6:
         e1:70:57:c6:2e:6b:72:54:6c:aa:e7:41:6c:d1:3b:44:37:ef:
         06:77:14:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org