Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa
File:                     UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa (raw, json)
Hash identifier:          5eXayhtOk7VxZrMrgyp3ffNQG40LsAj2gq7UAXSZzT0=
Subject key identifier:   52:BC:0B:C9:7C:4A:83:6F:B5:33:E7:72:55:25:37:5F:3D:77:A6:93
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       4A
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa
Signing time:             Thu 26 Sep 2024 23:58:13 +0000
ROA not before:           Thu 26 Sep 2024 23:58:13 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     2907
IP address blocks:        202.211.0.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep 26 23:58:13 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=52BC0BC97C4A836FB533E7725525375F3D77A693
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:61:5d:85:76:e2:ba:f8:88:fb:1e:3b:0a:d1:
                    da:3e:7b:07:b0:b5:de:8b:80:61:88:73:31:9d:58:
                    cf:cd:b8:ec:30:3b:7c:c7:d2:57:37:8b:81:92:e2:
                    f9:34:ec:25:3c:8a:81:c8:b1:8b:6c:3e:80:f4:ec:
                    d1:fc:07:a4:88:44:b0:6e:75:1b:1d:3a:db:d2:af:
                    09:5b:0a:33:8f:ec:42:76:ba:f2:2f:56:2f:dd:fd:
                    08:2d:99:59:2f:9c:a9:22:44:29:c7:bf:52:47:f2:
                    87:1d:2f:11:5a:c1:c3:28:28:11:c7:a7:eb:33:e2:
                    be:fa:f6:5a:ae:6a:42:19:6c:27:6a:ab:5a:8b:83:
                    ce:9e:df:2d:c5:37:52:0f:0c:44:00:be:d8:b1:59:
                    3f:e5:ed:30:66:ac:ca:57:35:53:95:49:bf:7a:64:
                    01:aa:d8:43:46:f6:2e:a7:09:dc:26:d1:07:3f:82:
                    38:fb:86:83:4d:cd:3b:60:a2:35:eb:dd:31:6e:55:
                    f2:c2:3c:f9:28:7f:78:b0:90:dc:c0:6c:72:20:b7:
                    7b:5a:ad:fe:1f:fe:aa:b0:ad:29:af:a0:61:8b:d1:
                    00:41:2a:f9:98:03:d4:a9:7f:bc:00:cd:f2:3b:eb:
                    75:e2:8c:c0:85:01:13:75:64:67:c7:1a:82:3d:f7:
                    14:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:BC:0B:C9:7C:4A:83:6F:B5:33:E7:72:55:25:37:5F:3D:77:A6:93
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/UrwLyXxKg2-1M-dyVSU3Xz13ppM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.211.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         18:bf:44:07:da:d0:68:61:fe:73:0b:df:e8:45:fb:aa:7c:d7:
         45:8d:90:d7:0f:d1:f7:69:32:a3:46:36:26:62:27:65:ce:94:
         52:f9:67:cd:af:12:0e:dc:4c:39:f2:d3:2c:ef:a4:57:ef:88:
         70:cf:66:d3:3e:09:d8:d9:50:c6:6d:1b:4e:5c:02:36:4b:2f:
         51:2f:0d:37:01:c1:f0:e0:a9:9a:36:6f:d7:c4:81:03:3d:4d:
         00:25:08:0a:7d:6b:47:29:56:4a:94:6d:6c:4b:49:8c:c8:03:
         79:d6:fd:36:7c:8a:74:c9:6e:fd:1a:4a:71:12:ba:ff:bd:e2:
         d5:5b:22:2b:28:9a:e3:06:f9:80:37:2e:9c:89:55:da:56:4e:
         ef:e0:c6:14:c9:1a:60:e6:74:1a:fc:22:b5:26:ae:cd:0f:0f:
         58:12:a4:b9:01:e6:df:ac:6b:bf:92:c4:cd:f9:11:d9:2d:b7:
         41:68:1a:59:49:51:ce:f5:98:0e:11:11:93:c6:8a:7f:21:24:
         c4:b2:97:d9:98:57:99:42:51:82:7c:76:43:82:e1:a3:fa:da:
         c7:20:a8:d2:b3:1e:ec:dc:b3:42:67:f7:90:ef:22:34:b8:5c:
         ab:7e:66:70:f1:b2:16:97:c7:c5:30:63:1b:ba:8a:c4:03:f4:
         e5:59:3d:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org