Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/977/j5SaH07M4q1yCXkGj7W3rqbi3iU.roa
File:                     j5SaH07M4q1yCXkGj7W3rqbi3iU.roa (raw, json)
Hash identifier:          ZL9+5qvMCe7OSGqCDF/i9Y6QacX/94aw89z4jX3g5kE=
Subject key identifier:   8F:94:9A:1F:4E:CC:E2:AD:72:09:79:06:8F:B5:B7:AE:A6:E2:DE:25
Certificate issuer:       /CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
Certificate serial:       05
Authority key identifier: BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/j5SaH07M4q1yCXkGj7W3rqbi3iU.roa
Signing time:             Mon 28 Aug 2023 02:04:20 +0000
ROA not before:           Mon 28 Aug 2023 02:04:20 +0000
ROA not after:            Wed 21 Aug 2024 06:10:04 +0000
asID:                     23784
IP address blocks:        202.67.48.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BD69002D0E8B7ED2C3D1D5D07AE6922C7497F02D
        Validity
            Not Before: Aug 28 02:04:20 2023 GMT
            Not After : Aug 21 06:10:04 2024 GMT
        Subject: CN=8F949A1F4ECCE2AD720979068FB5B7AEA6E2DE25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:ea:77:0b:41:b8:41:63:8d:91:d5:87:32:7e:
                    46:d3:6d:b6:31:f8:26:93:11:21:0a:1f:d2:fc:82:
                    da:6d:43:19:8a:01:07:e2:ec:ea:52:b8:c9:33:4a:
                    1c:72:9a:9e:17:1c:27:57:3a:1c:6d:e8:4b:55:2d:
                    1c:3c:cd:87:c3:74:1b:f4:0b:e0:2c:14:ff:e8:9f:
                    87:35:55:34:16:6b:ea:be:32:3d:02:76:c3:ee:c8:
                    1b:c0:fc:1e:26:e5:57:52:86:78:74:5b:7c:04:da:
                    87:83:ef:d5:ee:cc:a0:df:b1:46:50:af:85:0b:a9:
                    50:e8:18:42:e2:9b:b6:de:50:e2:d2:56:18:c3:8c:
                    be:56:c6:6c:d6:e9:43:54:07:99:0d:e6:7e:a9:b7:
                    e5:f9:f5:d7:c0:c9:a9:25:9b:04:aa:b1:ff:6a:82:
                    c6:ba:b7:4f:8f:ea:0a:59:69:5e:cf:5a:54:37:68:
                    bf:db:b5:43:6f:9c:2f:74:18:54:c2:f5:b2:54:8d:
                    14:87:cf:8e:6c:d1:d0:fe:e1:da:87:6d:31:1e:7b:
                    1f:ec:4e:ed:c7:84:95:e8:99:4d:47:d6:b6:ae:66:
                    7d:3d:82:df:da:71:30:5f:a0:98:88:8b:5f:ba:5e:
                    7e:3a:af:74:ba:16:18:6b:d5:02:f2:dc:9e:d8:07:
                    59:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:94:9A:1F:4E:CC:E2:AD:72:09:79:06:8F:B5:B7:AE:A6:E2:DE:25
            X509v3 Authority Key Identifier:
                keyid:BD:69:00:2D:0E:8B:7E:D2:C3:D1:D5:D0:7A:E6:92:2C:74:97:F0:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/vWkALQ6LftLD0dXQeuaSLHSX8C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/vWkALQ6LftLD0dXQeuaSLHSX8C0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/977/j5SaH07M4q1yCXkGj7W3rqbi3iU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.67.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:1f:4a:c1:4f:55:90:d7:da:a9:16:ea:8a:cd:96:85:37:4f:
         9f:d1:35:97:d3:3f:ec:a9:ad:23:93:91:0e:51:86:12:2f:48:
         0b:e7:61:b7:2b:9e:f5:3a:6d:53:93:4e:d1:ab:b5:bd:fe:af:
         b1:fb:09:f7:d4:7c:86:71:3c:13:2b:51:77:d8:8d:cd:25:00:
         51:3c:e3:37:e8:93:d0:cf:43:1a:d9:59:d7:1f:d8:2f:a4:1b:
         9a:51:88:d1:b5:a2:44:6d:70:94:f2:0e:fc:f9:6b:06:35:50:
         79:55:80:45:b9:b0:bb:20:59:26:50:9a:6e:de:ff:7c:b0:42:
         2f:60:bb:e4:0f:3d:03:54:d3:31:1e:66:61:39:31:91:92:23:
         ef:8d:52:83:dc:e0:13:c5:0a:a9:1c:83:e7:fc:f7:d1:23:43:
         cd:2f:6a:74:9a:9a:6b:41:2e:3f:d8:4e:45:17:0d:c3:b9:b8:
         8a:ae:ad:4a:53:4f:2f:0c:da:90:dd:23:9d:d5:90:d1:18:1c:
         c8:59:d1:b7:5a:e9:ea:ea:b4:80:c7:83:b2:67:16:62:06:39:
         0c:47:ef:2c:4c:7c:0a:e0:4a:d7:bb:65:e8:cb:d3:26:75:66:
         77:01:5c:e3:63:5c:00:ee:64:7c:ab:ca:fc:85:a2:aa:78:81:
         63:d5:e3:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:54 2024 by rpki-client on console-ams.rpki-client.org