Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bw3t4pkgccEf-HmJUkVgm13R2Iw.roa
File:                     Bw3t4pkgccEf-HmJUkVgm13R2Iw.roa (raw, json)
Hash identifier:          zoQExA8KjYQyBcQmKcVRnbiI3dUeG4QAOHqcifSKdNA=
Subject key identifier:   07:0D:ED:E2:99:20:71:C1:1F:F8:79:89:52:45:60:9B:5D:D1:D8:8C
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01B2
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bw3t4pkgccEf-HmJUkVgm13R2Iw.roa
Signing time:             Sun 31 Mar 2024 01:29:08 +0000
ROA not before:           Sun 31 Mar 2024 01:29:08 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        121.112.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 434 (0x1b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:08 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=070DEDE2992071C11FF879895245609B5DD1D88C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:1a:75:f7:ad:96:08:e0:3d:74:bc:f4:b7:24:
                    f7:43:f6:ec:8d:d4:7e:37:09:a4:a1:15:ce:1e:76:
                    0f:1b:9b:83:bb:b0:eb:24:52:b9:66:4c:ac:8c:8f:
                    c2:7b:80:f4:ee:02:ca:eb:91:bb:b5:c9:c2:90:1c:
                    1f:71:41:ec:eb:21:09:93:44:e4:6e:0c:38:11:47:
                    f9:6b:5b:3d:be:7c:cc:94:1f:41:48:9c:96:0b:0c:
                    59:33:73:04:98:9a:6a:1b:1a:12:ad:be:49:64:0c:
                    2a:ea:94:fd:68:ae:9b:c8:27:8c:e5:46:c3:93:b2:
                    44:0d:ee:fb:f7:c9:ad:da:aa:fa:46:97:62:1b:bf:
                    02:e3:a6:4b:01:ae:b2:c2:8f:6d:42:94:ea:27:6d:
                    88:26:84:4e:5c:a5:5f:24:9a:c4:ad:56:07:df:7d:
                    b2:da:54:af:29:9d:4e:53:76:94:98:73:d8:2a:5a:
                    cb:62:ea:93:39:d9:f9:7d:b7:11:64:a2:bd:17:22:
                    17:75:8a:12:f7:a4:ff:e6:06:90:6c:62:1f:7d:fb:
                    df:7b:e9:86:68:64:f2:b0:a5:fd:ee:ee:f0:9c:a2:
                    91:e6:45:c8:67:12:92:95:c9:e2:f2:2e:f9:1f:f8:
                    27:6c:12:75:75:a8:c2:1c:00:cf:12:1b:0b:62:b9:
                    3c:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:0D:ED:E2:99:20:71:C1:1F:F8:79:89:52:45:60:9B:5D:D1:D8:8C
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/Bw3t4pkgccEf-HmJUkVgm13R2Iw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  121.112.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         18:19:5f:04:d5:76:5c:60:ef:ad:f0:54:19:07:02:86:fb:d5:
         ae:42:ab:23:3a:01:ac:04:32:37:3e:98:5e:12:be:46:0f:b1:
         5c:7c:ab:29:e3:74:70:00:48:a7:78:ad:af:26:9b:fc:f3:54:
         00:6a:7f:df:7a:3b:8b:d8:fe:73:20:9e:a9:a8:8e:58:73:ad:
         d0:9a:99:42:b3:b2:01:15:3f:fc:20:ef:82:3e:aa:5e:e2:f6:
         f7:6c:5d:97:ca:fd:67:d3:96:80:ff:0c:e7:15:9d:4f:fc:41:
         c9:34:e8:22:73:be:53:d7:17:0f:e6:c8:2e:d7:d1:26:cd:39:
         39:76:ad:aa:90:e8:76:5c:fc:b3:8d:54:92:02:ed:75:8f:24:
         f7:24:ea:f0:c8:ef:53:ff:47:e2:70:2a:1f:1b:ae:fa:db:c9:
         53:8d:df:b6:63:1f:7b:90:07:2f:b5:91:40:7a:fd:9d:d6:c1:
         6a:1b:7e:6b:5d:eb:ae:df:ca:22:44:19:ec:6e:03:b0:11:69:
         1b:e5:3c:74:ec:58:b7:45:00:77:a8:ed:06:10:ae:a9:96:f9:
         a5:e5:94:22:5e:82:40:45:0c:e0:64:7c:34:e8:48:4b:88:d3:
         a0:aa:2a:74:cf:a9:41:4f:76:29:9a:0e:a5:27:55:23:19:7f:
         91:75:57:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org