Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/6ZAYZye_Fr7rVmQ6OailKBIVg1M.roa
File:                     6ZAYZye_Fr7rVmQ6OailKBIVg1M.roa (raw, json)
Hash identifier:          B04StSaOROZV+sdGYglZoYeoc5dxs8vxa/HHERtdG/o=
Subject key identifier:   E9:90:18:67:27:BF:16:BE:EB:56:64:3A:39:A8:A5:28:12:15:83:53
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       1F
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/6ZAYZye_Fr7rVmQ6OailKBIVg1M.roa
Signing time:             Mon 20 May 2024 03:25:42 +0000
ROA not before:           Mon 20 May 2024 03:25:42 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        210.131.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: May 20 03:25:42 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E990186727BF16BEEB56643A39A8A52812158353
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:bf:5d:cc:d0:77:5f:7c:6a:51:7c:7c:ab:
                    0d:9a:0f:82:d8:02:52:2f:2a:40:17:77:6b:cf:d6:
                    61:29:8b:31:6d:2b:e6:35:38:bf:53:50:3a:b1:40:
                    38:b2:af:b4:ad:84:5a:da:e2:bf:23:11:3a:26:f4:
                    36:b7:00:bf:44:ef:e7:7d:61:29:19:fd:f7:4e:35:
                    51:9f:51:cc:c6:e2:7c:72:c0:1f:8f:de:c5:8b:81:
                    cc:58:41:d0:30:7d:c4:ee:79:9e:e9:22:af:23:ed:
                    5c:8b:49:f0:e1:bb:fa:3e:8d:17:59:e4:ba:8b:7a:
                    22:1b:9f:f7:dc:2e:d9:17:73:b5:b6:01:7e:7d:2e:
                    05:12:43:bd:ab:55:dd:0f:ad:7a:b5:3e:3c:c0:3c:
                    4e:6e:29:49:d0:b8:b9:8c:e8:10:80:40:87:99:1a:
                    e2:d6:12:ed:9c:d0:e4:97:75:6c:13:2f:ab:b7:10:
                    a9:f8:22:8c:72:c5:71:6c:36:55:d1:f0:81:79:8a:
                    e0:f2:48:cc:5f:e1:7a:51:85:27:07:c7:54:c2:4a:
                    37:f4:5f:05:f3:77:42:4d:8f:c2:c8:8b:b0:be:c8:
                    34:b3:f1:83:aa:14:60:4b:80:1c:e3:b2:97:a3:3c:
                    ac:76:51:30:0e:f7:d6:d7:76:65:e9:af:08:f7:2c:
                    cb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:90:18:67:27:BF:16:BE:EB:56:64:3A:39:A8:A5:28:12:15:83:53
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/6ZAYZye_Fr7rVmQ6OailKBIVg1M.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.131.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         71:b5:fb:94:da:4f:17:b7:5c:aa:72:8a:e5:50:1e:b6:39:0d:
         54:61:ec:8d:8e:2d:46:86:3e:f4:83:3d:ce:2a:57:28:13:c1:
         0d:50:34:eb:06:55:06:05:7d:03:94:48:6b:60:87:31:20:5c:
         4f:b8:cb:dc:e1:53:b0:e9:a1:61:e3:e7:bc:30:25:d8:46:c0:
         3f:1a:7c:2a:64:9e:96:0f:16:e4:dc:65:3a:0a:70:08:43:25:
         1e:71:cf:3f:1c:cf:a2:78:ab:64:e7:1c:04:da:c6:13:6a:79:
         05:27:70:81:7b:1f:26:c8:ed:04:45:85:06:c6:7e:98:8c:50:
         3a:ee:23:6b:7d:f8:fe:47:d2:b3:e8:db:67:18:0f:1c:a0:6b:
         15:45:99:21:93:f6:66:c8:19:b5:07:7d:07:31:87:ba:a6:2b:
         46:b5:87:3d:f9:6f:a6:3c:c5:ba:b9:bf:28:92:09:23:07:fd:
         17:d1:1f:c6:6c:d3:79:cc:b5:00:78:a1:f8:c1:7d:7d:73:b7:
         56:fb:87:48:3f:89:42:fd:8e:21:cc:89:d0:aa:aa:f9:04:9d:
         29:ce:c6:f4:2d:95:38:32:57:56:82:df:03:5b:b8:dd:b0:b9:
         74:68:fe:a3:90:94:bc:e2:82:bd:2e:91:0d:e2:29:42:c4:c9:
         7d:06:1a:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:18 2024 by rpki-client on console-fra.rpki-client.org