Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
File:                     lW64uEUO0QgDUXKL6lP5WIzuJb4.roa (raw, json)
Hash identifier:          bIEAP8guYF+hRrrEiqaLPhvCxozG8jM5Qv/mJnWRr5I=
Subject key identifier:   95:6E:B8:B8:45:0E:D1:08:03:51:72:8B:EA:53:F9:58:8C:EE:25:BE
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       5A
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
Signing time:             Thu 29 Feb 2024 01:31:38 +0000
ROA not before:           Thu 29 Feb 2024 01:31:38 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        124.47.64.0/18 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 90 (0x5a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:38 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=956EB8B8450ED1080351728BEA53F9588CEE25BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8d:4d:21:bd:2d:e2:79:da:ea:bb:49:98:67:
                    ed:60:4d:df:5c:49:59:35:8a:4c:a1:e8:ef:8e:38:
                    4f:80:c9:8e:ef:c9:3d:5f:61:fb:f0:a0:9e:f5:c8:
                    65:62:fe:18:43:d0:b6:83:3b:07:98:08:73:ed:1b:
                    6d:f0:a0:40:7b:86:7c:70:f5:dd:5f:89:e9:55:22:
                    27:29:0a:28:85:d0:93:63:a5:67:da:69:ce:3e:5a:
                    fa:1e:7a:33:c2:2e:8e:76:8d:c0:c7:09:20:e8:ed:
                    85:2d:58:c4:a7:97:44:5c:d1:4b:2f:a8:2b:d8:1f:
                    c6:fc:0a:62:73:c4:8d:a3:96:80:cf:97:64:0b:20:
                    0e:90:70:69:fd:fd:45:9f:60:6a:21:45:b8:b3:fd:
                    04:de:a6:cf:9f:17:cb:fa:10:37:f9:7a:90:dc:a5:
                    5d:6b:bf:de:bc:8f:4a:13:29:6f:54:b7:02:5f:62:
                    f5:1d:c5:c6:15:24:f0:13:96:90:17:67:d8:8f:f1:
                    14:82:0e:84:12:d8:60:05:69:b5:e5:91:36:b4:30:
                    b9:b4:43:52:8b:86:e0:79:10:34:b1:b8:87:ce:55:
                    42:ca:c6:60:e1:5b:e8:06:2c:3b:4c:6b:d2:f2:e6:
                    58:e8:0b:00:ff:ac:a3:ac:95:ea:94:f3:22:12:0e:
                    5f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:6E:B8:B8:45:0E:D1:08:03:51:72:8B:EA:53:F9:58:8C:EE:25:BE
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/lW64uEUO0QgDUXKL6lP5WIzuJb4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.47.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:6e:da:37:6e:a2:d2:6f:f5:5e:1e:8f:8a:c7:7e:77:20:5f:
         c5:31:90:a5:a7:92:47:dc:12:4f:52:e5:a4:86:d6:ba:c9:ec:
         81:3a:d5:6e:12:71:d8:5a:5c:a2:f8:bf:e6:07:24:18:a2:9c:
         8c:70:cf:fa:e4:f4:12:97:da:7c:4d:b8:3e:97:5e:86:54:6c:
         cb:51:d3:90:86:3b:5a:79:01:e0:12:9e:8b:53:04:79:e2:c1:
         0b:2c:ea:a7:05:72:c9:b3:e7:2f:2e:2b:d3:0f:d4:33:07:38:
         bc:b3:43:74:da:1a:2f:f6:3e:76:23:40:00:f2:c6:6d:d5:64:
         d0:4e:0f:71:5d:94:82:f6:94:5a:63:39:06:cd:dd:2b:e9:43:
         44:1d:bf:ef:22:c6:3a:a4:a5:49:df:5c:54:ac:ce:52:7f:db:
         64:fd:e2:dd:3f:cb:3c:35:31:a4:ae:e7:d0:66:a2:7f:9d:5c:
         35:27:e1:fb:f0:f5:aa:d8:61:2d:13:cd:4b:94:d7:1e:b3:f3:
         92:e5:81:e2:c3:31:63:31:31:ed:c8:9a:ac:7e:f4:03:4f:6b:
         cf:ba:4b:af:80:3d:9c:5e:a4:b1:5d:95:89:c7:82:7b:2c:49:
         6d:88:94:5c:58:2d:ee:e1:7c:5d:37:a7:41:13:83:f3:56:b8:
         47:34:28:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:14 2024 by rpki-client on console-fra.rpki-client.org