Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/972/OAucdgCprdNNWPSUln_JH_we-5I.roa
File:                     OAucdgCprdNNWPSUln_JH_we-5I.roa (raw, json)
Hash identifier:          4VtuGOLcLW8uRE9BWsP+iqCUCE+xffJdrxcUs0hVw0w=
Subject key identifier:   38:0B:9C:76:00:A9:AD:D3:4D:58:F4:94:96:7F:C9:1F:FC:1E:FB:92
Certificate issuer:       /CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
Certificate serial:       33
Authority key identifier: 5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/OAucdgCprdNNWPSUln_JH_we-5I.roa
Signing time:             Fri 01 Sep 2023 01:29:44 +0000
ROA not before:           Fri 01 Sep 2023 01:29:44 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     38651
IP address blocks:        114.31.104.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 51 (0x33)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5F3E33AA6F92A837FA8944AB83627D3B44E0CF4A
        Validity
            Not Before: Sep  1 01:29:44 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=380B9C7600A9ADD34D58F494967FC91FFC1EFB92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:25:81:bd:49:a2:86:fe:50:65:11:8a:d1:64:
                    93:96:0a:f6:84:be:45:9c:4f:04:71:01:66:d6:54:
                    d6:f1:1a:19:21:a1:df:55:fb:c9:af:22:a1:d8:69:
                    16:91:e2:63:08:da:c7:8b:23:60:88:e5:b2:22:0b:
                    8e:6f:9f:da:53:98:d0:f4:6e:3f:4d:0d:4d:c4:ac:
                    dc:7d:1e:d4:0e:63:1e:1f:00:34:6b:a2:ed:c6:06:
                    97:fa:9f:6c:7e:a9:dd:20:ae:d7:0f:df:03:d5:ce:
                    81:9b:25:ea:71:25:ef:28:c0:5c:3a:da:d6:fe:35:
                    02:f0:1d:7f:df:5c:e6:f3:44:6b:63:16:92:b3:99:
                    62:1c:0e:27:f5:81:b6:13:0b:83:b4:3a:6b:18:bc:
                    bb:f7:65:00:91:6c:5b:17:bd:45:2b:27:ea:22:9f:
                    61:4d:d5:53:5f:70:15:57:67:8d:54:b5:4b:ab:cc:
                    77:69:fc:6b:72:f6:a4:9d:92:b3:e8:60:22:2d:98:
                    db:a8:0c:0e:27:55:1a:af:90:e3:22:52:2d:73:74:
                    d1:9e:b9:22:81:6b:c9:86:e9:35:37:80:e5:1c:7f:
                    2e:cc:b3:d2:e8:c3:00:9b:e9:d1:0f:4b:c2:db:8e:
                    8b:ae:c2:c9:c3:ba:00:8d:80:b7:92:8c:d4:78:33:
                    aa:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:0B:9C:76:00:A9:AD:D3:4D:58:F4:94:96:7F:C9:1F:FC:1E:FB:92
            X509v3 Authority Key Identifier:
                keyid:5F:3E:33:AA:6F:92:A8:37:FA:89:44:AB:83:62:7D:3B:44:E0:CF:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Xz4zqm-SqDf6iUSrg2J9O0Tgz0o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/972/OAucdgCprdNNWPSUln_JH_we-5I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.31.104.0/21

    Signature Algorithm: sha256WithRSAEncryption
         84:ea:5b:a2:ad:be:bb:fe:bf:89:f5:88:a8:c3:ea:a4:83:ff:
         26:75:3a:a7:25:66:d7:0e:51:1e:5a:a2:01:0e:0c:11:c1:c7:
         34:89:8e:15:b0:68:04:c4:27:5c:16:da:d9:f9:2f:17:46:2d:
         77:f2:fc:23:bb:ec:e9:0d:b6:ac:f8:4a:0f:52:25:91:83:d5:
         fd:81:4d:e5:f0:1a:df:37:8f:3c:9e:9e:7a:b3:dd:47:e1:fb:
         b3:b5:35:64:d0:b0:81:b8:a4:eb:35:90:e8:f1:12:b3:0c:75:
         c4:89:49:b3:00:71:4e:e4:fa:64:09:62:1b:df:fd:1d:46:e7:
         58:d8:54:0f:d9:78:d2:e4:33:ff:6c:92:06:7b:35:b0:72:4c:
         64:74:4b:b9:2e:b0:7e:26:18:8e:5a:23:81:6b:2e:a7:48:22:
         9a:f9:e4:70:0d:2b:ae:0f:a8:ac:3a:bf:8b:1c:76:fe:71:3c:
         74:6d:a8:75:90:17:22:cf:9e:84:6a:56:34:bb:f8:5e:85:2b:
         c5:7f:f3:96:11:9a:a1:e2:9c:38:6b:ee:5b:1e:b4:c6:47:60:
         77:0e:d5:1d:a4:df:b5:c4:7f:bc:5e:c5:28:ee:7c:3d:50:1b:
         dc:5c:29:fd:6e:48:87:13:c0:6c:94:2e:85:85:b6:12:07:6a:
         4d:64:26:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:48:05 2024 by rpki-client on console-fra.rpki-client.org