Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZJwu7CocBEHY9fsmaBIVItPFedI.roa
File:                     ZJwu7CocBEHY9fsmaBIVItPFedI.roa (raw, json)
Hash identifier:          keXL2FMg73t5psAYXezjJRdU6N5QS9gdTviJx32JZHY=
Subject key identifier:   64:9C:2E:EC:2A:1C:04:41:D8:F5:FB:26:68:12:15:22:D3:C5:79:D2
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01BB
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZJwu7CocBEHY9fsmaBIVItPFedI.roa
Signing time:             Sun 31 Mar 2024 01:29:11 +0000
ROA not before:           Sun 31 Mar 2024 01:29:11 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        125.200.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:11 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=649C2EEC2A1C0441D8F5FB2668121522D3C579D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d4:63:70:81:f3:22:64:9d:52:0d:47:1e:ae:
                    ca:e2:51:41:7b:a6:3c:5a:76:80:7b:2a:08:81:35:
                    23:53:09:4d:9e:d0:96:30:ae:30:5a:4e:cd:41:c7:
                    f9:01:81:59:e5:e1:21:48:34:a9:08:51:8f:b3:71:
                    f7:41:7c:dd:01:dc:e1:09:5f:be:b8:82:f4:26:d4:
                    fe:37:1a:0d:16:8c:c1:b0:c4:ac:3e:0d:85:84:29:
                    18:31:96:d6:3d:4c:9a:e3:fa:ae:93:07:82:25:36:
                    62:02:ed:e8:10:5a:01:16:81:af:9c:a3:fc:ae:ad:
                    27:e2:0e:40:e0:03:7d:c8:96:79:bb:be:77:c6:de:
                    68:25:a0:7f:4b:46:3e:7c:87:01:9a:7f:36:1c:6e:
                    e1:a9:ff:bb:6d:59:17:eb:66:0e:f8:e0:4e:4e:40:
                    da:50:fd:0b:3d:c3:50:c8:25:02:dc:f3:db:25:26:
                    bb:a0:43:29:34:35:01:be:71:40:62:d2:38:26:7e:
                    26:ca:67:1d:32:ed:79:76:a6:b1:ca:af:8e:e2:f0:
                    26:21:3f:5b:aa:10:4c:8f:45:81:1c:53:d7:82:8b:
                    d7:cf:93:86:6b:67:b0:8d:3b:25:98:7e:85:a6:03:
                    29:35:14:67:67:d1:0a:16:fc:b7:5c:33:e1:c4:b0:
                    88:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:9C:2E:EC:2A:1C:04:41:D8:F5:FB:26:68:12:15:22:D3:C5:79:D2
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/ZJwu7CocBEHY9fsmaBIVItPFedI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.200.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         2e:22:a4:63:40:5e:00:d8:15:87:f3:8f:98:60:49:ea:e6:26:
         a2:47:a5:e0:9a:84:01:9e:86:01:ef:12:a1:72:b1:12:d3:7d:
         b3:a1:65:4f:a5:f9:d2:b7:bb:43:e8:05:ee:b8:1c:f1:a4:68:
         f5:53:56:0f:b8:d6:42:22:09:72:5f:c7:ed:28:41:a4:3f:cc:
         1f:47:96:72:d2:41:b1:6c:eb:ac:1a:e1:03:d0:52:61:4c:ab:
         46:75:a8:5c:d7:07:43:af:41:34:f4:59:a7:dc:5c:38:97:57:
         0b:fa:12:e8:98:9c:29:67:5d:ae:6a:7b:7e:1e:c8:85:98:ab:
         2d:2e:e1:a2:08:f5:cb:b9:9c:a8:ac:e9:fb:9e:f0:5e:d1:f0:
         e4:f3:e9:a3:37:1e:8e:47:c7:bb:e5:2c:b0:d5:c0:85:5e:89:
         83:ae:e8:f2:27:bd:6a:ba:41:b2:68:3f:32:2b:86:d3:fb:32:
         76:0c:8e:b6:82:05:6d:f5:8e:e5:06:f4:0c:98:b8:d5:c9:fa:
         6d:6d:75:2e:9e:05:c8:0f:e2:5d:07:ee:bf:e5:5d:76:c7:10:
         7b:44:de:8c:68:a4:51:e3:f6:bb:a6:09:4d:23:ea:4f:82:51:
         6e:07:f4:f9:a9:24:f5:0a:14:73:40:4f:0b:e6:ae:5f:60:cd:
         62:f6:a1:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:33 2024 by rpki-client on console-fra.rpki-client.org