Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa
File:                     GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa (raw, json)
Hash identifier:          Bsp1iUh+SibT1kE7KkGwHNvfBNjztfsZBEwGUVh16Ps=
Subject key identifier:   19:6B:00:3F:22:F8:4F:E4:75:0E:62:9A:F0:78:0A:AA:92:FA:E8:4A
Certificate issuer:       /CN=D79B3890C2DA3795148976B954C2024056797554
Certificate serial:       2E
Authority key identifier: D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa
Signing time:             Thu 29 Feb 2024 01:34:14 +0000
ROA not before:           Thu 29 Feb 2024 01:34:14 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131934
IP address blocks:        221.132.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:35:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D79B3890C2DA3795148976B954C2024056797554
        Validity
            Not Before: Feb 29 01:34:14 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=196B003F22F84FE4750E629AF0780AAA92FAE84A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:c4:46:16:87:ae:e4:5a:fb:72:bc:5b:36:5d:
                    75:22:d1:7c:ff:1b:25:64:62:8d:d3:a6:a9:fc:2f:
                    68:d0:ac:5e:19:fb:92:a4:6a:e4:73:93:d6:47:d5:
                    79:18:2c:06:b9:1a:c2:7c:aa:33:e7:8d:e3:e4:f3:
                    0d:83:8d:1b:4c:85:eb:a4:65:e4:ed:63:e7:56:42:
                    08:71:61:d5:54:19:17:a7:8d:1a:a5:9d:19:66:43:
                    aa:97:c9:37:76:63:19:ef:ae:2b:46:37:4d:cf:4d:
                    0d:19:19:73:16:dd:51:a9:37:a6:ee:42:00:9b:0a:
                    9b:3b:e7:85:be:1a:a9:0c:40:7c:90:1b:14:04:b6:
                    17:30:1a:a2:ba:be:b1:af:c0:25:47:af:c9:d4:a3:
                    1b:3c:37:c1:b6:fb:b5:2d:56:2a:66:03:ec:3f:a5:
                    e1:69:88:64:94:42:b8:31:8a:3c:b0:3a:1c:22:36:
                    91:ac:05:ee:0e:30:55:d2:6f:6d:21:f1:9d:ec:5a:
                    37:62:9d:a7:ff:36:4d:fa:bd:6f:c5:82:4a:50:e4:
                    14:a8:a3:00:d4:a1:a0:d0:35:30:eb:f8:99:e9:d5:
                    ac:95:a1:c9:18:45:e9:4b:10:e1:52:44:69:de:ce:
                    c1:f7:8a:89:a1:a8:cd:21:d7:07:28:f2:2a:92:a9:
                    36:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:6B:00:3F:22:F8:4F:E4:75:0E:62:9A:F0:78:0A:AA:92:FA:E8:4A
            X509v3 Authority Key Identifier:
                keyid:D7:9B:38:90:C2:DA:37:95:14:89:76:B9:54:C2:02:40:56:79:75:54

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/15s4kMLaN5UUiXa5VMICQFZ5dVQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/15s4kMLaN5UUiXa5VMICQFZ5dVQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/840/GWsAPyL4T-R1DmKa8HgKqpL66Eo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.132.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:ef:e7:33:0f:98:30:f1:a6:52:f0:f5:ce:b0:77:c1:d1:f9:
         27:fa:b4:58:c7:3e:6d:ce:00:6f:01:a0:fe:e3:9e:4b:66:64:
         d5:62:e1:1f:e0:a3:5e:2a:c1:a5:5f:05:fe:62:b9:13:9e:09:
         32:21:30:65:70:b7:60:f4:6b:c2:ae:23:d6:03:48:b5:34:55:
         83:27:10:25:41:0f:75:4f:62:6a:24:9c:06:90:19:b1:8d:fb:
         68:9f:2e:2a:0b:26:d1:20:8e:03:4d:47:e4:3b:11:0e:61:d1:
         c8:50:05:6f:be:36:47:06:77:a6:38:59:bb:de:73:18:ab:da:
         d6:40:39:5c:70:4a:ad:4b:46:76:8d:38:10:c1:04:8a:df:49:
         20:2e:eb:3e:d8:b6:f3:44:41:e3:1e:b2:ef:c2:a1:5c:05:35:
         08:a1:f8:46:8a:b1:33:5d:c1:c4:01:73:16:72:0d:9d:a8:fc:
         87:f7:8a:11:19:86:32:fa:8b:17:14:19:ad:66:4a:f3:03:68:
         4f:4a:28:1d:c9:0b:b4:d4:6e:09:d3:1a:73:25:c7:30:83:c2:
         cf:07:6c:bb:de:e2:be:e2:3b:20:66:2f:42:35:bc:e4:4b:e9:
         36:ab:34:af:91:27:05:92:4a:8d:7e:40:c4:ab:12:b1:26:c2:
         b9:cf:e4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:52:09 2024 by rpki-client on console-fra.rpki-client.org