Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/11207/6eReUQJUJiOYbAHc8SC7V8-Sxss.roa
File:                     6eReUQJUJiOYbAHc8SC7V8-Sxss.roa (raw, json)
Hash identifier:          TDa4DgI2NmtG0Co6obyrySRicCoE0qXxF6Nsb/CwN/w=
Subject key identifier:   E9:E4:5E:51:02:54:26:23:98:6C:01:DC:F1:20:BB:57:CF:92:C6:CB
Certificate issuer:       /CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
Certificate serial:       5B
Authority key identifier: E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/6eReUQJUJiOYbAHc8SC7V8-Sxss.roa
Signing time:             Thu 29 Feb 2024 01:29:19 +0000
ROA not before:           Thu 29 Feb 2024 01:29:19 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55391
IP address blocks:        217.178.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:49:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E056D0501D430CE0FCF0DB0675BAFC90B05D9BF5
        Validity
            Not Before: Feb 29 01:29:19 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E9E45E5102542623986C01DCF120BB57CF92C6CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:98:d8:65:f2:f2:99:ac:bb:ed:74:a0:67:d4:
                    25:c1:71:f3:a9:59:c6:4b:9f:b8:51:ec:33:63:ae:
                    b6:23:62:e7:0a:57:84:5a:06:8f:e0:5e:a0:17:90:
                    19:bd:3a:bf:5c:6e:b9:e6:fd:0b:c2:d3:d1:e5:50:
                    ad:65:d7:79:39:4d:37:ad:08:d1:37:52:ed:40:16:
                    d8:07:49:28:65:d8:b3:ca:d7:65:3d:fc:e7:f0:b4:
                    e6:23:31:e8:ce:44:aa:36:d0:0d:78:52:65:f3:b1:
                    4a:56:42:a5:4c:28:b1:46:3b:40:25:2e:4a:ab:59:
                    ff:27:bc:67:ba:88:fc:ed:62:96:84:db:8b:bb:d3:
                    c9:0a:3a:18:87:82:b3:cc:f4:36:d8:a8:e4:1a:6a:
                    a1:38:d5:47:68:5e:27:f1:15:64:74:68:db:18:90:
                    7d:e1:c7:fa:52:b4:c0:37:05:4b:bb:d9:40:ae:a5:
                    2c:71:09:10:26:f8:d8:6a:57:d8:c5:6b:81:f3:b2:
                    73:17:97:fc:9e:82:41:7d:ca:bd:8a:28:ba:8a:df:
                    ee:e5:94:ca:00:fe:20:58:c5:76:c0:b9:6c:ef:1b:
                    6f:4b:77:66:0d:bf:70:80:7f:75:aa:c2:fd:8e:a9:
                    ea:ae:83:42:d9:3c:89:a6:ec:28:fe:ac:96:73:5a:
                    ca:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E4:5E:51:02:54:26:23:98:6C:01:DC:F1:20:BB:57:CF:92:C6:CB
            X509v3 Authority Key Identifier:
                keyid:E0:56:D0:50:1D:43:0C:E0:FC:F0:DB:06:75:BA:FC:90:B0:5D:9B:F5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/4FbQUB1DDOD88NsGdbr8kLBdm_U.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/4FbQUB1DDOD88NsGdbr8kLBdm_U.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/11207/6eReUQJUJiOYbAHc8SC7V8-Sxss.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.178.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         65:6e:f4:b5:d2:9a:a3:a6:82:5c:5e:14:f4:09:8b:eb:e4:2e:
         fd:23:f0:1e:75:12:1a:9c:46:d7:12:15:82:e1:70:46:cb:97:
         c5:72:6d:5a:ac:2a:c5:ae:7e:f9:78:0c:e9:72:ce:ab:5c:f5:
         98:95:74:89:3a:b4:84:cc:68:6e:45:a6:59:b8:a3:df:84:df:
         2a:29:71:f0:b3:c7:3b:3b:86:10:b3:f9:f0:b8:90:25:b6:b9:
         61:85:4c:88:de:32:c3:31:4a:92:92:86:e5:18:e7:73:16:9c:
         dd:fa:17:24:97:31:f7:a0:df:8a:48:4c:58:07:ee:05:50:cd:
         93:bc:6c:49:52:2f:70:f9:dd:9c:be:c4:e9:ca:9e:9e:c9:2d:
         38:ae:0d:0e:57:22:51:07:16:e1:e3:e6:35:ae:4c:0d:4c:fa:
         1f:6d:9f:ad:4b:3f:1c:06:2b:26:2f:c2:85:42:91:0f:ce:99:
         b8:38:a4:4f:0b:de:50:f9:c9:3a:31:c0:89:0c:a5:1f:5d:6e:
         37:0b:e6:21:ae:79:e1:02:b9:9f:4a:15:21:0a:9a:d9:00:28:
         8c:ee:8e:b2:be:b4:a5:6e:d3:a2:db:09:47:d2:8c:a5:9a:20:
         58:a0:14:c4:87:25:50:85:e2:54:53:f5:da:47:a2:af:71:2d:
         f8:3c:40:27
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:44 2024 by rpki-client on console-ams.rpki-client.org