Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10966/eRjYInDsLR2h2jGJ9oOP8KrU4y4.roa
File:                     eRjYInDsLR2h2jGJ9oOP8KrU4y4.roa (raw, json)
Hash identifier:          eut83aXLN4cJjSQOtEi9cyS4FVpRPQ1fB26E/wrQFVU=
Subject key identifier:   79:18:D8:22:70:EC:2D:1D:A1:DA:31:89:F6:83:8F:F0:AA:D4:E3:2E
Certificate issuer:       /CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
Certificate serial:       26
Authority key identifier: 4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/eRjYInDsLR2h2jGJ9oOP8KrU4y4.roa
Signing time:             Fri 01 Sep 2023 01:30:00 +0000
ROA not before:           Fri 01 Sep 2023 01:30:00 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     131921
IP address blocks:        180.131.136.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A65DB2229963EDEFEA9A412B5731EA3C507E714
        Validity
            Not Before: Sep  1 01:30:00 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=7918D82270EC2D1DA1DA3189F6838FF0AAD4E32E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:28:02:bb:47:56:a3:b2:f4:76:81:93:50:fc:
                    b2:4f:bc:51:f0:3b:78:ef:3e:71:a2:88:62:5d:21:
                    86:6a:bc:db:8b:67:ce:ca:78:dd:c8:19:ec:d8:65:
                    b5:9f:7b:b2:ae:f4:a0:cd:bb:c7:66:ec:ea:99:52:
                    e0:7e:3b:f0:91:28:f2:c0:c0:a3:5e:21:d7:6e:76:
                    31:02:27:f8:c4:c5:5d:8c:81:d3:59:a5:2d:5f:0c:
                    d4:b1:a2:d7:58:d0:e5:85:21:9e:27:97:05:de:ab:
                    5e:b2:32:73:68:be:e3:b4:6f:8d:40:7e:9a:77:16:
                    13:4d:ac:56:8d:a4:f2:26:7e:3d:f9:c8:a6:88:45:
                    c3:05:5b:ed:78:92:28:ce:f5:d0:ba:48:63:7a:f6:
                    b6:45:1e:66:cc:e3:6f:43:19:4c:7b:d9:f6:6f:cc:
                    4e:24:b5:50:9f:d5:28:e1:02:68:27:bd:89:e4:a0:
                    65:37:08:2e:95:f7:a1:16:15:7c:17:12:0c:50:fc:
                    d3:3b:6b:ad:5f:fd:4e:3f:37:05:b8:ad:c2:34:49:
                    e3:ee:b2:a3:06:29:c5:bc:cc:a8:3e:b7:be:7b:1e:
                    e7:15:0b:d6:3f:db:a1:4d:e1:fd:5b:8d:95:58:8b:
                    c8:ad:31:a7:9d:de:e5:40:69:da:8e:36:8e:b4:c4:
                    5c:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:18:D8:22:70:EC:2D:1D:A1:DA:31:89:F6:83:8F:F0:AA:D4:E3:2E
            X509v3 Authority Key Identifier:
                keyid:4A:65:DB:22:29:96:3E:DE:FE:A9:A4:12:B5:73:1E:A3:C5:07:E7:14

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/SmXbIimWPt7-qaQStXMeo8UH5xQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/SmXbIimWPt7-qaQStXMeo8UH5xQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10966/eRjYInDsLR2h2jGJ9oOP8KrU4y4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.131.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a4:2b:57:49:41:96:3e:c1:2d:c5:63:75:39:31:33:bb:b8:0a:
         62:90:c3:de:08:bf:41:51:0b:bc:2b:bf:65:8f:79:c9:cc:08:
         d2:8a:48:5c:75:ff:47:0f:b3:60:89:85:4d:d3:25:ce:b5:95:
         94:9e:15:da:d3:1c:79:09:21:bb:5a:70:ad:25:6a:04:bf:46:
         5e:28:13:d3:29:c5:77:c9:4d:99:48:e2:74:91:57:b2:db:fb:
         e7:6a:dd:59:a9:4d:fa:82:d5:3d:1d:37:2e:f3:56:13:f1:b1:
         b6:9c:6a:f7:89:9a:0c:7b:12:de:52:b5:26:9b:bb:be:52:f1:
         bf:0c:9d:70:f7:3c:c7:7f:d2:77:2f:11:50:bc:5d:44:25:4b:
         83:61:87:4b:6a:80:aa:82:7c:b6:10:1f:7c:65:88:dc:27:e8:
         0c:4b:99:98:34:c2:92:0d:d7:a3:ba:0a:5a:cd:ce:70:d3:42:
         d9:4e:ed:4a:b7:ad:cc:05:b2:8b:d2:c4:c9:93:a1:f2:e9:90:
         57:89:51:30:4e:69:14:b9:84:45:6a:f6:88:da:e1:e8:69:74:
         75:a0:d9:72:51:a5:95:d1:c0:fd:f4:ab:9c:b1:82:8b:23:13:
         38:92:35:09:5c:ca:87:6c:6f:dc:81:ae:ec:30:cb:f6:0e:78:
         8a:a0:bc:33
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org