Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/6JjTiRkDpWYmdIfwyap5gnrI-p4.roa
File:                     6JjTiRkDpWYmdIfwyap5gnrI-p4.roa (raw, json)
Hash identifier:          Pc0J7aQTkmEBY/eX84/oaYnS8ym1j0KooDVSWYGGkSk=
Subject key identifier:   E8:98:D3:89:19:03:A5:66:26:74:87:F0:C9:AA:79:82:7A:C8:FA:9E
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01C7
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6JjTiRkDpWYmdIfwyap5gnrI-p4.roa
Signing time:             Fri 31 May 2024 01:30:47 +0000
ROA not before:           Fri 31 May 2024 01:30:47 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        203.139.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 455 (0x1c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:47 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E898D3891903A566267487F0C9AA79827AC8FA9E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:a8:2d:52:c5:54:eb:b6:b3:42:ab:1b:68:
                    a9:b6:38:79:a7:63:67:49:d1:1b:88:13:95:33:8b:
                    7f:e6:bd:40:13:b9:ac:60:56:eb:9c:ee:7f:82:3f:
                    5d:e7:60:9d:e4:12:25:a3:ea:dc:bc:12:b3:39:a0:
                    f8:30:de:cd:b7:ad:74:61:bc:4b:18:92:9a:94:12:
                    23:e8:26:bc:64:57:5e:95:5d:bc:e8:1b:dc:3b:a0:
                    af:b2:bb:57:29:24:e6:08:18:dc:56:e7:3e:41:1e:
                    43:d8:6e:ca:fe:15:13:a2:63:7f:f4:93:27:0c:39:
                    89:b6:03:f6:0f:e6:e1:86:a1:16:b2:2a:cc:e2:94:
                    1b:dc:18:2e:42:34:bc:28:78:39:8d:0b:4b:9f:ae:
                    e3:cf:f6:9c:bd:62:f7:4d:67:b9:d9:00:c9:6f:b0:
                    1a:dd:17:76:dc:1f:a8:e3:48:22:97:f8:20:dc:fb:
                    4f:23:45:40:00:2c:c9:b1:a1:c4:c0:06:41:72:45:
                    b0:fb:5c:82:bf:14:8a:1d:74:b7:7d:2f:7e:39:19:
                    c3:4e:16:e2:c4:b1:de:1a:e2:71:72:b1:81:de:be:
                    24:9e:96:0c:40:be:a5:3b:aa:ec:ab:3f:57:13:76:
                    d5:b5:91:c0:5f:31:38:e3:f2:dc:95:15:0b:8a:ef:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E8:98:D3:89:19:03:A5:66:26:74:87:F0:C9:AA:79:82:7A:C8:FA:9E
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/6JjTiRkDpWYmdIfwyap5gnrI-p4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.139.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         0a:08:46:eb:ff:b8:64:25:d4:85:6d:51:a4:91:fe:19:31:39:
         fb:d4:10:0c:44:c7:58:60:7e:3c:81:89:7c:44:2e:11:7d:ff:
         8d:1e:f2:9b:88:7a:dd:b6:69:c6:b7:01:71:69:a0:d9:29:2c:
         1d:5e:49:15:c4:bb:27:0c:4b:fc:69:bc:1f:1a:ee:db:88:aa:
         a8:67:0d:4e:e3:1b:f6:f0:6e:49:4e:18:0b:0b:14:88:cd:25:
         2d:52:b5:2d:a2:d1:30:cc:f1:e5:76:9f:fa:97:6f:01:e1:6d:
         4f:a7:28:91:44:4b:ac:16:71:e1:b1:fd:5c:ea:71:a3:09:4f:
         63:f3:e2:c9:fa:d1:a7:d7:27:a2:d8:2a:20:44:fa:8d:f2:42:
         b1:a9:b5:ea:70:15:52:23:98:e0:b7:e4:5e:e2:a0:fa:5b:1f:
         6a:3d:a5:4c:f1:1f:0f:55:f5:97:b6:4a:83:5b:aa:95:27:1c:
         de:89:3d:d0:2d:75:99:52:37:e8:fa:28:21:c5:5d:92:ea:a1:
         a1:2b:b1:97:37:ef:f0:d3:e6:93:8d:21:87:d2:93:cd:2e:09:
         59:0a:b5:71:44:2b:c8:a9:3f:65:53:b9:c1:88:50:e4:b1:5c:
         e0:bb:76:75:3e:d6:cb:ca:71:6a:f2:05:f7:54:2a:a9:77:78:
         1b:75:46:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:03 2024 by rpki-client on console-fra.rpki-client.org