Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QePw54CI9prwYuvUsTVQsR2_FW0.roa
File:                     QePw54CI9prwYuvUsTVQsR2_FW0.roa (raw, json)
Hash identifier:          ZGlPs46mhibkF31ZxW1GDRT1OrE2pa90ZcB1VdadO1Y=
Subject key identifier:   41:E3:F0:E7:80:88:F6:9A:F0:62:EB:D4:B1:35:50:B1:1D:BF:15:6D
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       3F
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QePw54CI9prwYuvUsTVQsR2_FW0.roa
Signing time:             Mon 01 Jan 2024 01:29:44 +0000
ROA not before:           Mon 01 Jan 2024 01:29:44 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     55392
IP address blocks:        130.62.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Jan  1 01:29:44 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=41E3F0E78088F69AF062EBD4B13550B11DBF156D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:4a:32:fb:ab:7d:30:23:b8:ac:75:9d:f9:de:
                    99:f6:ac:34:e7:a2:27:5e:45:00:06:cb:0e:c7:46:
                    a9:df:4b:be:77:38:1f:50:ea:7e:84:40:0c:ce:76:
                    21:de:c7:0e:cd:b5:15:c6:78:94:7e:e6:ef:28:dd:
                    b5:08:22:38:e6:80:09:3c:65:d2:23:e8:43:5b:72:
                    bb:22:71:75:87:69:08:1b:c6:a8:11:b1:55:0d:5e:
                    8e:90:d4:7a:38:d2:d3:a8:b3:2b:df:a2:bc:96:96:
                    5f:4d:7c:12:32:f8:c3:b5:e9:7c:f3:e1:a4:f0:68:
                    58:8c:5c:70:c9:35:e3:2b:98:85:63:6b:f2:33:0d:
                    d4:6f:4e:84:c1:ef:b9:34:bd:4f:2d:c9:85:9e:0e:
                    5d:69:6e:41:63:f9:9a:1c:f2:ba:1c:88:39:72:43:
                    06:e7:f6:0c:4d:2d:42:09:a7:f3:3e:e6:fe:32:62:
                    d4:ca:5e:f8:7f:14:e4:2b:6e:69:8d:01:ae:93:6e:
                    1e:24:0b:7f:04:4d:cd:fa:f3:f2:c5:5c:bf:d2:d3:
                    40:d4:5b:b5:08:37:0b:5c:36:99:ab:88:c0:51:e1:
                    f4:9f:0f:d6:cb:e2:0f:c2:4c:95:05:bf:55:5e:04:
                    02:4a:7a:5f:f0:00:e9:b5:3a:38:24:0e:90:32:dd:
                    1a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:E3:F0:E7:80:88:F6:9A:F0:62:EB:D4:B1:35:50:B1:1D:BF:15:6D
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/QePw54CI9prwYuvUsTVQsR2_FW0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         00:cf:7b:69:15:c4:e0:f9:82:aa:86:ac:8b:cf:b5:c2:55:ac:
         60:1c:50:de:ca:3e:be:89:e5:c8:f9:11:4d:29:68:54:61:a4:
         61:76:b7:6d:ed:b3:81:2f:5a:7d:9c:0b:b0:55:61:eb:94:0d:
         17:48:00:69:7b:80:57:20:19:42:37:51:44:7b:b3:60:e4:e9:
         5a:63:a5:0c:2e:78:39:fa:bf:ea:b3:20:60:1f:60:57:93:8e:
         93:98:9e:1f:d7:1a:5c:ad:28:ac:42:50:19:f5:18:92:1a:f5:
         b7:20:3b:31:40:47:b1:e0:32:eb:1f:77:57:fd:eb:bb:8e:f6:
         9a:00:86:ad:d6:62:c2:21:85:68:bf:62:38:cc:b6:37:43:ca:
         aa:18:e0:78:09:95:23:1e:ce:4f:dc:e1:f9:02:0e:ae:dc:5f:
         5d:09:6a:a4:53:a2:f0:0a:9d:35:d6:d4:f3:15:06:49:16:fb:
         ed:59:d7:2d:47:82:83:5b:fb:59:18:e4:b0:1a:ac:42:4e:d1:
         cc:99:2b:26:3b:be:3e:38:ef:12:8b:45:3a:67:93:94:e2:dc:
         31:87:d3:18:b7:50:a0:a9:67:e6:75:1a:0e:70:9a:53:15:16:
         2a:a9:01:f3:4a:0d:4e:ad:f3:ea:05:f2:06:d9:da:7b:17:9f:
         64:47:3b:0e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:02 2024 by rpki-client on console-fra.rpki-client.org