Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/966/PWjdKCeW4coUdKmzhWMqNwrB60s.roa
File:                     PWjdKCeW4coUdKmzhWMqNwrB60s.roa (raw, json)
Hash identifier:          4okTcRsGeJscOz1aD3ZQYYqdkQhrZM9gkyLZWls0M7g=
Subject key identifier:   3D:68:DD:28:27:96:E1:CA:14:74:A9:B3:85:63:2A:37:0A:C1:EB:4B
Certificate issuer:       /CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
Certificate serial:       04
Authority key identifier: 0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/PWjdKCeW4coUdKmzhWMqNwrB60s.roa
Signing time:             Thu 16 May 2024 06:18:29 +0000
ROA not before:           Thu 16 May 2024 06:18:29 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131921
IP address blocks:        210.158.32.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D266DB84FDC69B342C27AF1168EF87A95A070F5
        Validity
            Not Before: May 16 06:18:29 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3D68DD282796E1CA1474A9B385632A370AC1EB4B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e7:27:d6:bf:8e:bb:6e:56:09:ed:98:3a:85:
                    e6:77:dc:20:bd:23:b3:06:53:ef:21:92:df:0c:7b:
                    af:50:f5:62:59:b4:dd:a9:75:11:ed:58:b0:db:24:
                    1e:16:58:e4:e0:95:89:88:df:23:bf:9c:72:ad:1e:
                    97:82:e2:4a:53:0e:f2:3d:4a:1f:fc:99:03:09:bd:
                    bd:38:41:0d:0b:bd:51:0d:28:08:f9:84:eb:61:cd:
                    4e:08:c4:b0:5f:7c:54:3c:b0:3a:45:e2:57:02:67:
                    ad:be:58:83:99:6f:52:ae:a0:58:92:d9:f8:f9:4f:
                    eb:0d:3b:e3:da:58:62:00:70:d1:38:7a:4a:a3:61:
                    a7:5b:6b:06:16:e0:b1:31:95:84:1b:80:f3:15:56:
                    af:7e:a5:79:6b:a7:1f:a4:b5:63:fd:d8:d8:3c:f0:
                    10:49:57:e4:8e:51:fa:83:c3:bb:ca:e3:48:5c:a3:
                    14:5f:bc:f8:42:62:9b:31:6c:54:4a:79:9b:a3:5d:
                    0c:6f:5c:3c:a1:12:7e:11:30:4e:25:c8:36:22:e0:
                    97:5c:b9:a2:df:ae:4c:6d:73:e2:b2:10:e3:c3:56:
                    17:5b:1a:e5:d3:b4:d5:f8:19:9f:e4:c0:aa:38:38:
                    1a:eb:17:16:d7:4a:a5:5b:15:9d:09:2f:b1:ee:d7:
                    f1:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:68:DD:28:27:96:E1:CA:14:74:A9:B3:85:63:2A:37:0A:C1:EB:4B
            X509v3 Authority Key Identifier:
                keyid:0D:26:6D:B8:4F:DC:69:B3:42:C2:7A:F1:16:8E:F8:7A:95:A0:70:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/DSZtuE_cabNCwnrxFo74epWgcPU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DSZtuE_cabNCwnrxFo74epWgcPU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/966/PWjdKCeW4coUdKmzhWMqNwrB60s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.32.0/20

    Signature Algorithm: sha256WithRSAEncryption
         bb:98:85:51:7a:58:30:2d:58:5b:78:e7:a0:6f:9c:81:c3:ba:
         a9:12:d6:d9:4e:f5:e6:29:b7:f2:6a:e0:21:b5:49:e0:11:5d:
         b7:bd:62:9a:ba:9a:2a:69:8a:8c:41:2c:dc:28:73:92:e9:e6:
         33:e6:75:32:8d:91:b1:17:3b:4f:d4:5c:d1:b3:ad:29:79:47:
         0d:74:fe:cc:3b:cb:6b:dd:c0:6d:02:00:fa:86:d9:f7:7a:31:
         af:96:cd:cc:29:b5:51:f5:a7:9f:ca:8c:c0:6f:3a:94:84:be:
         63:12:7d:a5:f3:a4:7f:0d:3c:12:fd:c0:e6:e8:30:1d:a0:c4:
         49:73:4e:b3:69:c5:e1:13:ec:ff:a6:f0:df:f2:11:2f:85:48:
         07:05:fc:0d:dc:0d:99:af:48:ed:0c:cd:91:b1:52:8f:22:1a:
         cd:6b:14:e6:a6:7f:2d:19:9e:39:01:11:bf:16:a1:6c:ba:e7:
         65:80:80:fa:e3:31:b9:3c:b4:2f:f5:4d:bd:69:8d:13:2e:e1:
         30:f4:df:77:c3:be:1b:3c:5a:d4:17:38:5d:f3:ea:21:18:fb:
         bf:66:b6:d2:b4:96:34:94:3a:84:54:20:65:79:01:77:1a:18:
         13:b1:ee:80:76:15:19:35:9c:b6:25:55:20:ca:10:63:9c:8a:
         88:30:26:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org