Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/qBVoDKD808i-hq85eM_JfkE3m18.roa
File:                     qBVoDKD808i-hq85eM_JfkE3m18.roa (raw, json)
Hash identifier:          H4B4F7cUp/m4HuNL35mR/f/saMNeOFajxOL8x35D7CA=
Subject key identifier:   A8:15:68:0C:A0:FC:D3:C8:BE:86:AF:39:78:CF:C9:7E:41:37:9B:5F
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0108
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/qBVoDKD808i-hq85eM_JfkE3m18.roa
Signing time:             Fri 01 Sep 2023 01:29:00 +0000
ROA not before:           Fri 01 Sep 2023 01:29:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2497
IP address blocks:        124.41.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 264 (0x108)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep  1 01:29:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=A815680CA0FCD3C8BE86AF3978CFC97E41379B5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:87:43:7b:40:49:0b:c7:96:6c:08:2d:1a:00:
                    95:70:63:fe:a8:e6:d7:8d:fc:c3:2d:eb:74:17:42:
                    84:91:ba:40:57:d8:1a:5c:1d:27:1b:60:6d:a8:85:
                    38:52:44:dd:0e:96:44:d1:74:b8:01:72:a4:72:4b:
                    45:62:92:b9:e1:93:2a:8b:78:9a:d3:5d:75:bb:e0:
                    2d:b7:a2:92:a7:33:27:ae:76:b8:16:de:40:99:fa:
                    56:d5:41:a8:c7:03:03:c0:79:47:21:37:fb:c7:13:
                    87:d2:af:74:e8:55:56:de:b1:00:b4:a9:51:92:20:
                    2c:ea:7d:e5:be:56:77:3c:2e:1a:28:2b:de:45:8b:
                    bd:14:3e:9e:06:a1:60:bf:02:bf:47:69:70:62:2b:
                    9c:59:3f:e6:87:25:eb:87:12:4f:19:f0:e8:f9:f8:
                    32:23:ea:10:70:87:e6:5b:4d:2c:61:3e:43:bb:81:
                    54:1a:6a:f0:11:9a:bc:74:08:e6:4b:b1:a1:4c:92:
                    96:ad:fe:39:18:ef:da:9a:1e:af:b2:5e:a3:be:6a:
                    2e:9e:be:a3:0c:e4:7e:73:db:95:bb:0b:8b:b6:af:
                    d5:c1:6d:03:21:af:c9:ed:ff:eb:7b:71:93:88:69:
                    40:5e:bb:8f:ec:c7:59:e6:9c:ba:ba:13:66:24:03:
                    78:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:15:68:0C:A0:FC:D3:C8:BE:86:AF:39:78:CF:C9:7E:41:37:9B:5F
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/qBVoDKD808i-hq85eM_JfkE3m18.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.41.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         1c:39:ab:b4:bf:d0:d2:fb:82:94:0f:46:e7:81:e0:f2:21:c7:
         e9:d8:fb:ba:74:4e:7b:6e:d4:2c:00:43:32:0a:16:93:18:5a:
         7a:f0:ca:29:07:f1:76:fa:2c:7f:5e:12:8a:85:fe:5e:49:25:
         bc:91:de:72:73:5f:a6:17:79:46:8a:88:e8:8a:16:91:d0:3a:
         96:62:14:06:07:53:65:f8:ef:07:06:a4:66:92:aa:6b:43:be:
         da:f4:78:5d:3d:82:c2:66:41:83:ec:25:18:2a:80:7e:72:08:
         68:5b:f0:95:94:c7:4d:32:20:ec:0f:69:21:3a:37:f3:fe:82:
         05:4a:57:9b:ed:93:54:78:0d:2c:40:2a:af:2a:4a:3c:0e:46:
         23:75:a2:d1:6b:0f:1f:19:a9:56:5f:08:61:4c:70:6c:f9:36:
         83:ff:df:99:e1:10:b9:cd:45:69:e9:55:2b:40:4a:e8:aa:51:
         c7:26:cc:a0:1b:14:c6:a9:86:72:a4:25:5d:fa:5e:ec:dd:22:
         1b:f6:02:e5:3d:9c:3d:b2:9d:65:c8:35:d2:c7:86:bd:b1:ea:
         9c:d3:3d:42:3a:36:5b:03:7d:83:a0:65:9f:70:a9:e3:6b:4a:
         72:f4:21:19:fd:62:34:84:44:ca:cc:ad:7b:a8:ad:91:56:eb:
         28:aa:1e:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:02 2024 by rpki-client on console-ams.rpki-client.org