Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
File:                     zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa (raw, json)
Hash identifier:          RYoMwyEhlNWijAqjwg9Mj2Z0sByPzioTCJ2dGNpw03Y=
Subject key identifier:   CC:6B:95:EE:42:25:3C:57:8D:A7:AB:0C:B8:A2:DE:47:EA:BF:4E:16
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       28
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
Signing time:             Sat 01 Jun 2024 06:45:15 +0000
ROA not before:           Sat 01 Jun 2024 06:45:15 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        175.28.4.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:15 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=CC6B95EE42253C578DA7AB0CB8A2DE47EABF4E16
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a5:04:e2:12:b7:71:14:0e:71:85:d0:16:76:
                    c0:26:26:94:67:0e:35:84:e6:4b:8e:a3:93:e4:b1:
                    19:00:8f:a8:ed:07:0f:98:6f:c6:63:e4:e6:c8:02:
                    48:41:51:4b:c5:ce:75:ff:b2:3f:fe:a9:57:de:0d:
                    6f:d2:81:fd:10:c3:47:7c:b3:88:95:5d:fb:da:ca:
                    ca:4d:36:c5:bb:65:cb:45:e2:ec:fd:09:a7:e4:1c:
                    a9:c3:f7:54:0c:af:24:95:ba:e4:c6:0b:29:f3:a0:
                    8c:f4:23:7b:42:fd:39:cd:22:56:01:77:d7:ae:ac:
                    74:0a:a7:31:0e:46:7a:99:25:18:a5:bf:3b:a6:35:
                    2d:61:43:9f:c8:bf:53:0c:60:76:2b:60:9a:1c:a0:
                    7c:99:9c:01:6a:ac:31:0f:21:8b:7f:2f:f5:17:8e:
                    e8:cf:d4:f5:86:0d:ca:1f:fe:28:5a:4d:21:e8:90:
                    5c:1c:8a:b5:12:35:7b:df:16:9b:86:06:06:85:79:
                    c0:5b:6e:70:44:dc:de:f8:df:e9:c9:43:bb:a5:b2:
                    16:a7:f8:d6:14:c5:59:88:96:c4:1f:b7:bd:52:da:
                    0e:e4:c9:a0:76:24:de:6d:7a:64:6b:52:7b:7e:8b:
                    04:84:ac:22:1c:13:5a:ae:8a:b6:1c:eb:c7:88:fe:
                    2a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:6B:95:EE:42:25:3C:57:8D:A7:AB:0C:B8:A2:DE:47:EA:BF:4E:16
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/zGuV7kIlPFeNp6sMuKLeR-q_ThY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.4.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:02:33:ba:f6:53:5d:a9:8e:c1:1b:c9:65:bc:1e:81:b9:23:
         20:c1:9b:03:ca:92:85:aa:3a:56:e7:58:c2:1b:c3:a5:eb:9e:
         3a:ea:8c:33:de:e9:d7:03:75:e4:07:24:aa:f2:1c:db:49:02:
         1d:65:45:e7:6c:04:53:ae:b5:c4:86:c4:8d:ff:8b:2d:61:67:
         5f:64:ca:22:d1:33:75:7a:b0:3b:f7:76:cd:23:67:cd:5a:9a:
         ae:51:1b:26:de:35:89:3a:61:0d:15:94:76:74:18:05:e1:ce:
         32:19:25:50:d1:49:1b:ef:1d:37:b4:b0:03:f6:f1:14:c2:70:
         39:bc:1a:9c:c4:57:d3:1e:40:eb:15:24:81:ad:94:49:a9:04:
         7a:58:c0:80:92:59:5c:ac:4e:77:6a:ce:52:a1:ac:e3:42:4e:
         62:4a:c9:63:c6:57:6a:f3:bb:b7:10:28:5c:96:ba:3f:3f:1b:
         59:14:6c:b2:6d:9a:af:d2:d8:f0:ea:fb:03:02:ea:c9:9d:f2:
         7d:b8:f2:8d:69:2b:92:47:04:58:ef:c7:dd:68:cd:2d:ca:90:
         c2:0a:05:8f:23:f7:57:4f:e9:1a:3b:07:52:0c:7f:dc:9e:a9:
         29:0d:f6:c5:5a:85:ae:5f:f5:14:a6:cb:41:d4:94:ab:88:a8:
         3e:4b:71:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:18 2024 by rpki-client on console-fra.rpki-client.org