Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/eE-R8JIYUrhSXDTdNPF3c7y92bc.roa
File:                     eE-R8JIYUrhSXDTdNPF3c7y92bc.roa (raw, json)
Hash identifier:          jgpgRkO/f8Xc8nVBdnUyIS3hbvpce+oveE1nBEYDR50=
Subject key identifier:   78:4F:91:F0:92:18:52:B8:52:5C:34:DD:34:F1:77:73:BC:BD:D9:B7
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0100
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/eE-R8JIYUrhSXDTdNPF3c7y92bc.roa
Signing time:             Fri 01 Sep 2023 01:28:56 +0000
ROA not before:           Fri 01 Sep 2023 01:28:56 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        101.128.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 256 (0x100)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:28:56 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=784F91F0921852B8525C34DD34F17773BCBDD9B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:55:cc:6a:ea:d1:20:9d:cb:8b:64:71:cf:
                    4c:02:f9:e3:3b:ff:7d:f5:71:3c:d8:ec:ec:9b:ba:
                    88:f6:5f:97:d5:65:47:3b:2d:41:b7:1e:a3:70:e3:
                    88:f2:e0:69:d2:29:b2:02:ec:4f:75:2c:b7:e2:4f:
                    9b:15:5f:a3:f8:57:31:0c:02:2f:62:a4:48:1d:f2:
                    f0:93:47:00:e8:d4:19:7b:e3:bf:7c:f5:dc:88:a5:
                    51:b1:aa:f4:aa:14:5f:4c:b3:f1:f7:50:c1:a9:de:
                    f9:a9:36:b5:57:76:b1:04:a8:f2:7d:84:7f:61:f6:
                    b1:2b:0c:b0:09:c3:e5:d6:0b:2a:5b:62:2b:73:2f:
                    30:60:70:ea:32:64:53:b1:46:85:d8:99:0a:e4:57:
                    5b:78:78:4f:92:e6:8e:8c:a3:54:80:ef:f9:c6:60:
                    3f:31:57:e2:8c:8e:03:3f:8e:2a:da:2a:b7:03:e4:
                    77:bb:bd:58:ae:f9:cd:d6:0a:df:ad:60:c4:79:80:
                    3b:be:4e:ac:ed:87:27:17:cd:10:49:1c:d8:5e:ca:
                    1d:a2:2f:78:fe:85:52:44:9f:d9:68:d8:1f:a2:5c:
                    57:a9:1d:29:2a:22:13:97:89:b6:00:d6:0b:f8:f2:
                    42:e5:93:b4:b1:c9:a8:7c:aa:28:14:8c:14:7b:1a:
                    6d:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:4F:91:F0:92:18:52:B8:52:5C:34:DD:34:F1:77:73:BC:BD:D9:B7
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/eE-R8JIYUrhSXDTdNPF3c7y92bc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.128.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         0d:12:d0:a2:a8:3b:49:32:3e:19:7e:48:27:cd:10:58:5c:d8:
         8a:58:55:46:c1:27:93:ac:41:c0:61:7a:d4:11:c9:83:c3:7d:
         78:d6:13:96:7c:46:4b:c2:ab:4b:da:01:29:a5:dc:cb:29:67:
         86:db:a3:09:43:62:ea:a0:d9:a7:ae:e3:3b:f4:90:46:83:f5:
         28:ad:06:4c:11:e1:6c:9e:48:66:87:24:92:56:f3:e0:56:41:
         53:5d:2b:a4:19:5d:78:ec:75:63:9b:b9:f3:3d:24:4c:c4:4e:
         48:9b:57:f6:c9:a4:53:bc:fc:0f:83:8e:15:a1:78:5c:c5:de:
         78:81:ea:eb:10:6d:bc:56:73:cd:83:5d:7f:c6:35:2b:ac:13:
         5e:eb:35:16:2e:55:79:aa:a4:f7:6c:6b:28:ae:92:22:8d:74:
         cb:09:35:fe:87:e4:6c:86:80:9c:ee:b2:7b:3a:1a:4d:4d:f5:
         4a:00:61:f9:8d:c7:1d:52:b4:d6:8c:11:af:38:f6:86:95:97:
         d3:ec:70:bd:45:5d:e4:a0:64:69:5b:45:9e:81:73:8c:63:3a:
         2d:0c:11:ff:95:ae:d2:4c:57:82:1f:09:d2:5b:89:b4:5d:a0:
         dd:51:19:5e:ad:32:14:b5:72:f8:04:51:34:1b:83:c1:1a:bb:
         71:ea:c2:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org