Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/AYp7HhuFAdYRZWnC4PfmTmiveeE.roa
File:                     AYp7HhuFAdYRZWnC4PfmTmiveeE.roa (raw, json)
Hash identifier:          dJ88AYk3AYwx8roJ3E5TJEXRmwcR9F2HCVdIQAeOOCg=
Subject key identifier:   01:8A:7B:1E:1B:85:01:D6:11:65:69:C2:E0:F7:E6:4E:68:AF:79:E1
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       2A
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/AYp7HhuFAdYRZWnC4PfmTmiveeE.roa
Signing time:             Sat 01 Jun 2024 06:45:16 +0000
ROA not before:           Sat 01 Jun 2024 06:45:16 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        183.181.80.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 42 (0x2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:16 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=018A7B1E1B8501D6116569C2E0F7E64E68AF79E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a9:a5:ca:0d:cb:ee:62:c3:b9:75:61:b5:04:
                    5a:f2:e0:35:d1:38:50:4a:ff:f7:f1:03:72:0a:83:
                    de:fa:3f:e0:d0:38:b4:05:f9:72:fe:9d:fc:d2:af:
                    e5:60:86:ae:13:24:b8:78:61:46:52:9e:d5:8d:04:
                    6e:28:d9:41:18:ff:9f:f4:b5:bd:e4:13:50:92:9a:
                    16:dd:29:f9:c3:bb:53:e9:d1:68:1b:57:74:bc:c5:
                    8b:28:ff:4a:fc:cb:5a:1f:a8:2e:ea:d4:b9:9e:d6:
                    c7:7c:99:85:af:a3:40:80:83:46:2f:41:23:f9:af:
                    bb:dd:2c:62:c9:de:16:29:f4:26:4e:4a:6d:ec:66:
                    20:c5:a7:95:a7:d9:ed:21:00:d7:58:a1:fc:10:86:
                    12:cd:57:0c:a7:71:07:e1:a0:6f:40:98:9a:d9:1f:
                    1c:fd:d2:8a:b9:ff:86:d4:69:1c:c0:35:a1:de:03:
                    81:4a:69:4f:1b:a5:40:ce:88:eb:9d:d0:b5:bd:a1:
                    d6:73:c7:81:49:76:d9:06:f4:2a:41:fa:bc:97:97:
                    1b:65:ac:98:ba:cc:a1:b9:3f:36:6b:db:f5:2b:a3:
                    7d:a6:ec:3e:1e:71:40:19:3f:0a:90:7b:94:21:9d:
                    b0:ef:77:a9:45:b5:b0:bd:ac:97:ec:5c:19:f7:cc:
                    cf:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:8A:7B:1E:1B:85:01:D6:11:65:69:C2:E0:F7:E6:4E:68:AF:79:E1
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/AYp7HhuFAdYRZWnC4PfmTmiveeE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.80.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7f:a2:d3:02:33:c9:9d:ac:7c:31:c6:52:48:f4:03:f0:7f:e0:
         44:93:7c:ad:f1:eb:39:2f:a7:62:1b:57:15:3c:1a:ec:05:be:
         78:69:ca:7d:c2:35:c1:9c:1a:39:18:f0:e3:4c:f0:04:eb:ec:
         86:c9:c0:c2:15:e1:e5:bd:15:09:ae:c3:61:40:64:a5:68:5c:
         88:3d:92:0f:74:7d:bc:29:c9:40:97:a0:66:d0:56:34:4e:25:
         98:43:e1:f1:d0:9a:c1:57:81:da:ab:3b:87:18:7b:5a:c2:66:
         fd:36:ae:d7:25:d5:50:a4:bd:93:c0:04:de:23:18:72:a4:aa:
         f1:5a:a7:5d:fa:ad:c5:26:e9:cf:a6:a0:5a:d0:75:56:0f:25:
         1e:32:a9:b5:30:07:a9:f9:46:5d:8b:c6:d2:18:ff:0b:16:05:
         07:bb:ec:6a:b4:40:2e:7a:0b:e9:4b:3e:64:12:ec:fa:69:70:
         8e:aa:b8:e3:cb:2b:fb:83:00:5e:9b:44:b1:f5:d6:b2:bf:e6:
         a1:4b:db:60:1d:a7:79:98:65:a1:e7:df:56:8e:36:4c:69:43:
         3c:a4:b6:4b:ef:7a:38:c9:ce:78:7b:ee:e4:29:0d:c5:31:61:
         d6:e6:10:0b:34:b3:53:76:ab:54:83:14:58:93:20:03:20:e4:
         ac:9d:fd:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 14:52:22 2024 by rpki-client on console-ams.rpki-client.org