Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/yeGabAfRprhD8bwpCc9vU8L8fIs.roa
File:                     yeGabAfRprhD8bwpCc9vU8L8fIs.roa (raw, json)
Hash identifier:          P8VCY85FujN6CDY5RjdRbs2uh8TowgQaFw37Fkcrd/Q=
Subject key identifier:   C9:E1:9A:6C:07:D1:A6:B8:43:F1:BC:29:09:CF:6F:53:C2:FC:7C:8B
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       56
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/yeGabAfRprhD8bwpCc9vU8L8fIs.roa
Signing time:             Fri 01 Dec 2023 01:30:20 +0000
ROA not before:           Fri 01 Dec 2023 01:30:20 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7514
IP address blocks:        113.192.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Dec  1 01:30:20 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=C9E19A6C07D1A6B843F1BC2909CF6F53C2FC7C8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:50:b2:09:e8:db:46:17:61:4a:0e:12:a6:18:
                    12:69:b8:d3:ce:9f:91:4c:0a:fa:dd:0d:ac:d6:17:
                    2e:1c:18:d7:93:13:15:3c:11:df:7e:88:a5:fa:63:
                    19:fa:ff:3e:bf:fc:b4:69:73:0f:59:2a:ff:34:6b:
                    04:ce:7f:95:a1:0f:fc:ed:82:12:97:2e:cb:bc:06:
                    02:15:08:1f:3a:ef:6b:69:38:23:c9:8f:a0:cf:70:
                    bf:e3:24:6a:d7:bc:19:2e:e1:b6:a5:f9:1d:07:97:
                    ca:cf:ce:9d:81:33:69:84:fb:c1:72:46:69:53:e7:
                    11:89:07:c6:b8:c9:a7:a4:ca:15:64:3e:c1:fe:1b:
                    5c:80:8f:1b:1b:bb:56:f0:2c:7b:50:cb:68:1d:fb:
                    72:41:15:9e:61:24:f3:c4:7e:06:9f:30:a2:2b:8c:
                    6f:25:25:cb:c0:94:83:1c:df:cc:33:17:b6:4c:4c:
                    f1:fb:0f:c0:3b:0c:d0:33:fd:42:70:2b:62:31:3c:
                    cc:d9:e8:5b:5a:10:10:2c:c8:f8:fa:a6:1a:d4:ce:
                    e5:1c:e6:2e:4d:78:f9:3c:e5:22:1b:bd:a7:1a:10:
                    75:5e:46:19:3c:c9:1e:fd:31:86:d4:1d:e5:d9:28:
                    1c:1d:5f:a3:15:77:11:18:4e:53:44:2d:86:06:f2:
                    62:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:E1:9A:6C:07:D1:A6:B8:43:F1:BC:29:09:CF:6F:53:C2:FC:7C:8B
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/yeGabAfRprhD8bwpCc9vU8L8fIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         5e:53:b1:e3:b5:2f:67:04:ca:c1:4a:0c:ca:70:da:74:6e:da:
         61:c7:c1:8a:f5:82:86:2a:3a:c4:5a:b7:1e:e2:2a:c5:a9:2f:
         e5:d7:9d:f5:80:6a:42:e7:c3:da:f7:a8:ff:a7:31:c2:fa:30:
         ea:89:1f:78:87:b2:20:1a:c3:ce:c8:a3:38:6e:50:7e:8f:07:
         3c:fd:fa:d3:2d:44:54:33:fa:9f:79:60:1a:9f:0b:13:e0:16:
         8a:3a:cc:a9:c1:19:63:61:49:b0:fc:f6:0e:a7:03:0b:12:0a:
         c8:16:22:8b:d4:5d:69:b7:7a:56:f0:ca:61:ed:eb:8e:4a:a0:
         48:4b:f1:65:45:e9:55:e5:6d:7d:59:1b:07:85:d8:19:21:e9:
         1f:d2:4b:e2:65:98:3a:ee:a8:e9:d5:d2:83:ea:fd:11:2b:34:
         20:1a:12:2a:46:41:5f:6f:83:bc:2a:6b:6e:45:c0:1e:24:b8:
         39:fd:44:cb:6a:6a:f8:c9:c6:82:17:3f:c1:34:c6:53:7c:fc:
         c6:4c:a0:0b:67:47:ce:ee:23:2c:3d:7f:99:33:f4:55:b4:f9:
         0d:01:54:af:ba:63:ea:cf:f5:2b:bb:d9:e7:bb:ed:61:4b:24:
         73:c9:1c:57:00:3d:80:c7:b1:a7:10:45:58:6a:40:42:7c:60:
         2a:6f:98:1f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 17 14:51:59 2024 by rpki-client on console-ams.rpki-client.org