Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa
File:                     dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa (raw, json)
Hash identifier:          eLYfIc03JWQvAsoGTuRXfA5SoOp16CGlyWjl/3U6rFA=
Subject key identifier:   75:31:5D:35:CC:5E:2F:53:BC:20:2C:06:27:6D:E9:04:84:7A:87:8A
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01E1
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa
Signing time:             Fri 31 May 2024 01:30:59 +0000
ROA not before:           Fri 31 May 2024 01:30:59 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        219.160.0.0/13 maxlen: 13

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 481 (0x1e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:59 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=75315D35CC5E2F53BC202C06276DE904847A878A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b3:ed:d8:bb:f4:ce:31:da:21:f6:f9:b4:96:
                    02:9c:54:e1:3b:c5:5e:f0:1d:e6:6d:a6:f1:d6:5c:
                    73:16:61:eb:38:b8:94:fa:c7:a5:e3:73:b3:41:75:
                    b8:8f:4d:61:9e:a5:bd:f0:56:fb:a9:86:d7:85:7d:
                    a2:b2:06:12:3e:61:1c:35:0c:21:c1:76:76:c5:2f:
                    3e:38:56:5b:46:d4:78:c2:0b:d7:2d:46:05:e5:a6:
                    d1:f4:55:2d:e2:e5:62:94:76:4a:f1:43:58:98:45:
                    8e:26:56:00:fe:ab:95:e7:c2:0b:97:05:38:00:93:
                    7f:33:29:1f:f2:ca:5e:4e:71:37:69:0a:99:98:0d:
                    88:0a:76:f4:28:3b:68:68:b5:05:d3:f1:1c:94:72:
                    6e:7d:86:bf:22:3f:0e:c2:c0:b4:9b:a4:38:18:6c:
                    55:a4:20:18:56:27:33:92:3e:ca:5c:d6:c7:0a:1c:
                    b1:52:a3:ed:4d:04:a1:2e:88:c6:04:4b:e2:ea:26:
                    20:5a:44:54:c9:9a:1c:53:3f:ca:aa:ab:ad:41:34:
                    2a:1f:fe:7d:98:41:bc:2b:17:b5:aa:bf:91:ea:85:
                    71:7a:6c:06:8c:de:76:8c:71:da:34:6b:08:d3:bf:
                    8c:b4:fe:95:15:2b:a9:da:dc:b8:aa:b2:8c:1b:c2:
                    6d:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:31:5D:35:CC:5E:2F:53:BC:20:2C:06:27:6D:E9:04:84:7A:87:8A
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/dTFdNcxeL1O8ICwGJ23pBIR6h4o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.160.0.0/13

    Signature Algorithm: sha256WithRSAEncryption
         54:2a:f2:1c:9a:2c:50:aa:ff:49:d5:4b:8f:c7:1f:da:c8:a3:
         f4:62:9b:b9:13:8e:cf:90:9c:3e:c6:43:bb:29:c2:a2:2b:33:
         11:66:bc:2f:95:6c:de:12:1c:17:02:e5:37:b0:55:8a:26:e3:
         22:39:34:2d:1b:b8:39:e1:c6:a4:6b:f7:35:36:45:14:50:af:
         96:9c:1e:6f:db:a3:ff:7a:bb:f0:51:7f:3e:e3:96:1b:29:f3:
         62:be:9f:b6:78:ee:37:0d:16:d7:c6:7f:8e:b9:b6:0a:75:4f:
         0c:3d:6d:34:b2:16:91:03:88:96:d0:b3:7b:b1:ef:06:83:3b:
         e2:dc:9c:8a:fd:ec:e7:0f:c7:b8:51:44:64:96:9d:2e:ce:ce:
         94:f3:bf:69:a2:2c:be:8e:10:a4:19:e3:8b:b6:2d:a6:fa:fc:
         0c:67:2e:8c:b3:69:40:52:2b:75:c6:85:fa:f8:fa:ef:63:26:
         01:7b:96:a0:b0:15:d4:cb:ce:5a:ff:2a:b4:f3:c1:a1:83:ab:
         ec:14:20:79:19:9b:39:fc:b7:c9:ed:06:35:49:9b:3b:70:cc:
         91:51:7b:44:f2:2b:50:5d:9a:28:f5:79:70:d9:b9:82:cc:e9:
         78:a9:e3:67:fc:21:b6:02:cb:cc:02:41:ee:cc:d7:3d:e3:39:
         91:6b:90:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:12:37 2024 by rpki-client on console-ams.rpki-client.org