Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa
File:                     EBhgR7yMeHHhRxahdxoLm4hHEkc.roa (raw, json)
Hash identifier:          DWE1roArlt26EFCgkNmstu/MPWFPkiZAts4XRG5Y6sw=
Subject key identifier:   10:18:60:47:BC:8C:78:71:E1:47:16:A1:77:1A:0B:9B:88:47:12:47
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01D8
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa
Signing time:             Fri 31 May 2024 01:30:55 +0000
ROA not before:           Fri 31 May 2024 01:30:55 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        211.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 472 (0x1d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:55 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=10186047BC8C7871E14716A1771A0B9B88471247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:fa:cb:34:13:88:76:31:67:80:81:bc:e6:
                    33:3a:33:2a:b1:73:b3:07:af:1b:e9:38:fe:77:17:
                    51:7e:fe:3a:6f:da:ea:3a:29:4f:cd:70:6a:10:01:
                    6e:af:bd:d8:3f:a1:ee:e4:ee:16:1e:cb:87:43:45:
                    6c:3c:88:93:81:c0:ef:58:ee:85:21:cc:da:86:a6:
                    76:17:69:38:ba:2a:f1:99:3b:d4:77:df:f4:08:4f:
                    2f:61:4a:06:2f:22:1c:0a:e0:11:3b:1d:67:66:26:
                    3d:a1:45:41:ed:90:0f:19:f8:86:4e:b6:e5:97:54:
                    75:bc:ea:85:80:ce:97:45:b0:28:66:30:3c:52:87:
                    ef:98:a7:3a:0f:63:29:86:1b:b1:47:4b:bb:49:50:
                    2c:ee:ef:34:24:fd:6c:7e:84:3c:48:e6:35:4c:3f:
                    8b:b0:77:59:50:a1:53:80:a4:bf:ed:14:8f:8a:d9:
                    d3:f5:97:fe:ea:d0:e5:30:10:ae:25:ec:3a:f2:d7:
                    74:17:61:53:7f:f3:72:5f:ef:7e:fc:7a:02:76:e0:
                    f8:b7:57:ce:9d:88:58:a0:b6:58:ee:9c:c2:0d:18:
                    e9:bb:87:4d:83:34:2a:39:d8:40:09:91:98:7d:4f:
                    fd:fa:de:88:31:8f:36:2c:8c:e4:45:05:14:2f:58:
                    b5:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:18:60:47:BC:8C:78:71:E1:47:16:A1:77:1A:0B:9B:88:47:12:47
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/EBhgR7yMeHHhRxahdxoLm4hHEkc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         8d:c9:e0:3c:70:71:50:87:5b:bb:17:14:c8:4c:3b:7c:73:85:
         8f:2a:3d:95:9d:34:08:19:59:f2:cc:ed:8a:8a:76:7d:88:0d:
         31:aa:c5:ff:87:e0:68:9f:4a:1e:b7:ea:84:39:d8:79:7c:fb:
         65:e3:6b:b2:58:0f:89:b9:82:c2:ad:dc:c6:d0:be:da:36:5c:
         fb:69:8b:7f:c1:60:b8:12:27:9b:b1:4b:83:bb:12:5c:a1:9e:
         61:70:f2:8a:8a:10:7b:51:84:09:3c:ff:31:09:8a:61:ca:e6:
         bb:fa:9f:86:08:b5:cb:9f:34:33:55:50:48:17:45:3d:40:ce:
         03:49:fc:2e:0c:aa:b9:2d:60:a7:a6:e7:20:49:10:04:ea:10:
         71:d7:89:88:f0:69:e7:db:84:d1:d8:09:3f:91:26:77:58:c5:
         3d:54:28:8b:f6:ef:d9:ed:b2:f2:89:c5:c6:00:b4:a1:87:ee:
         b2:f4:a7:8c:fb:53:f6:ae:dd:27:9d:f4:d2:91:7f:25:50:58:
         0e:75:9a:a1:3c:d6:24:8e:0f:a8:d4:bd:d9:0c:d5:4c:e7:4a:
         1d:8f:89:0f:ab:bc:f7:e2:74:90:e9:80:7a:d9:57:66:7d:0c:
         5c:62:01:37:ce:5d:9e:9b:88:ef:89:45:2a:c3:37:96:51:d9:
         23:07:ea:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org