Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1003/SjpViWVN6AHM8Zj7ry3cjv8JJ4w.roa
File:                     SjpViWVN6AHM8Zj7ry3cjv8JJ4w.roa (raw, json)
Hash identifier:          P3pZREOPryy/Nsxgkpjj2RAEEdMLrBv8nteKyhEcPAo=
Subject key identifier:   4A:3A:55:89:65:4D:E8:01:CC:F1:98:FB:AF:2D:DC:8E:FF:09:27:8C
Certificate issuer:       /CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
Certificate serial:       39
Authority key identifier: E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/SjpViWVN6AHM8Zj7ry3cjv8JJ4w.roa
Signing time:             Mon 01 Jan 2024 01:30:20 +0000
ROA not before:           Mon 01 Jan 2024 01:30:20 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2515
IP address blocks:        192.41.192.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 23:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 57 (0x39)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8CDBC24A6C3C530B99815AE7B5C0DA3EF8A84D5
        Validity
            Not Before: Jan  1 01:30:20 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=4A3A5589654DE801CCF198FBAF2DDC8EFF09278C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b3:72:6b:4f:7a:09:6a:e6:b1:25:f9:6f:92:
                    a8:3c:ee:df:eb:b1:4e:98:5b:17:91:fa:58:78:71:
                    64:77:fa:18:c6:c0:6e:94:ed:54:7f:47:99:94:7a:
                    67:c9:86:35:5c:cc:99:b2:80:e6:fd:ad:d0:55:65:
                    f1:6e:17:b0:3f:45:5c:59:a7:e9:ea:a8:65:e2:bf:
                    89:46:dc:02:87:d1:fc:ca:a4:06:80:f7:9d:60:05:
                    b4:68:7c:23:8b:1d:d7:55:27:c5:b5:70:84:92:a0:
                    cb:56:da:a3:b5:e6:42:34:2f:5f:8f:81:cb:38:47:
                    54:8f:f7:ad:99:cb:89:0f:66:7b:7b:16:88:94:ab:
                    bb:4b:3b:79:0f:18:b3:2f:71:3a:ec:dd:92:aa:ed:
                    e7:72:99:69:f8:c2:d2:73:bd:40:76:14:3a:34:78:
                    12:e4:0d:b6:4d:9a:c6:76:65:bb:b1:3c:74:13:ac:
                    05:3e:b7:c1:a1:5c:a4:04:9a:4c:eb:33:85:35:5a:
                    4c:c4:0f:43:20:59:37:bd:b7:ea:31:82:ee:e9:8a:
                    14:ad:66:96:06:64:cd:2b:68:5b:e9:e4:9c:92:0e:
                    5c:66:fc:0b:2b:a2:bf:3c:b8:60:12:a8:8a:b6:fb:
                    76:65:0a:19:56:1a:90:d5:9a:30:da:f5:83:c5:6e:
                    d6:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:3A:55:89:65:4D:E8:01:CC:F1:98:FB:AF:2D:DC:8E:FF:09:27:8C
            X509v3 Authority Key Identifier:
                keyid:E8:CD:BC:24:A6:C3:C5:30:B9:98:15:AE:7B:5C:0D:A3:EF:8A:84:D5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/6M28JKbDxTC5mBWue1wNo--KhNU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6M28JKbDxTC5mBWue1wNo--KhNU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1003/SjpViWVN6AHM8Zj7ry3cjv8JJ4w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.41.192.0/24

    Signature Algorithm: sha256WithRSAEncryption
         60:ee:9f:d1:c2:14:f0:82:0b:87:cd:58:7c:09:31:c6:45:84:
         c7:cc:02:e9:63:3e:a3:78:3e:c0:fd:3f:af:d2:0e:f5:2c:8b:
         ba:a0:ad:ce:55:c8:b7:c7:a5:0a:97:af:50:fe:ab:ab:a2:19:
         da:e1:2e:56:21:b1:c3:08:e2:ab:75:aa:b4:17:fb:4b:9b:7c:
         4e:82:62:45:35:f3:1e:47:82:42:b3:62:15:64:ef:2f:ae:5f:
         0a:5b:70:c3:e0:ac:71:d3:05:dc:a9:5f:7c:f6:11:40:f8:2f:
         2d:e4:3d:29:fe:9e:c2:95:15:8b:b4:39:44:bc:46:cd:e5:e8:
         f5:65:aa:5d:75:1b:7d:b8:66:ea:22:1a:70:77:c5:3f:be:5f:
         4d:d5:66:35:01:2d:94:9e:c2:aa:09:de:15:0f:59:01:c7:ac:
         dd:d6:43:d3:c0:91:69:1b:7e:b2:d8:2e:c6:2e:ec:ec:da:21:
         91:8f:30:cb:c5:12:5b:ae:f7:4b:7e:ee:c5:f1:67:9d:62:48:
         89:3c:ce:2a:b2:f3:66:91:b3:7f:a4:fa:b7:ae:24:7b:dd:b1:
         1c:7e:ee:d4:99:b3:28:49:21:e4:59:2d:83:e0:97:be:49:4d:
         55:f3:52:e1:09:2d:84:09:e6:1f:6a:b5:07:68:5a:e1:bc:69:
         f1:e8:33:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:02 2024 by rpki-client on console-fra.rpki-client.org