Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/G7uqWvtTgupIMDhrueH1OQHq9ec.roa
File:                     G7uqWvtTgupIMDhrueH1OQHq9ec.roa (raw, json)
Hash identifier:          GbF/qUsOM+jDAKtUrCNWlyJf3ChyBro/zFvEI2t1WE4=
Subject key identifier:   1B:BB:AA:5A:FB:53:82:EA:48:30:38:6B:B9:E1:F5:39:01:EA:F5:E7
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01B3
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/G7uqWvtTgupIMDhrueH1OQHq9ec.roa
Signing time:             Sun 31 Mar 2024 01:29:08 +0000
ROA not before:           Sun 31 Mar 2024 01:29:08 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     4713
IP address blocks:        122.1.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 435 (0x1b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: Mar 31 01:29:08 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=1BBBAA5AFB5382EA4830386BB9E1F53901EAF5E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:2b:e2:f0:7e:bb:d7:a8:05:b5:a6:af:3b:a2:
                    16:4b:ca:c6:90:c0:95:e0:01:5b:ab:5d:87:04:b6:
                    20:24:40:a8:0f:0c:28:f1:27:0e:30:99:e7:3b:de:
                    7b:ab:4c:68:76:27:89:09:14:91:45:83:6d:df:23:
                    22:62:38:3c:eb:c5:97:16:18:8f:90:33:40:70:ee:
                    d0:98:da:86:7b:02:d9:f9:32:75:02:d3:0b:9e:ed:
                    f4:4d:ab:00:c5:14:c8:92:9d:d7:e2:1f:0c:25:e3:
                    05:bb:cf:f9:69:d7:f9:18:e9:eb:cc:5e:dd:ab:9e:
                    3c:74:f0:0e:ce:37:73:bf:19:a4:d0:58:7f:47:0d:
                    42:ee:01:3d:4d:28:f6:c9:42:ca:2f:be:d4:4a:77:
                    95:10:4a:ed:80:21:9c:cf:e8:50:38:c0:be:cb:a5:
                    56:c6:44:b2:e1:a1:cd:13:2d:09:e9:d2:78:62:c9:
                    3a:de:15:6f:56:30:d2:1f:9a:22:65:40:a2:e8:52:
                    b3:61:5c:fe:20:d3:e5:cf:9e:bf:bc:9e:2d:76:de:
                    ba:a4:f2:23:af:38:95:79:70:e4:52:fe:4c:7c:78:
                    86:db:97:57:af:53:5b:be:49:77:9f:4e:42:c1:53:
                    29:e6:73:04:e3:cf:02:d9:e3:e6:3e:b1:6b:50:0b:
                    78:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:BB:AA:5A:FB:53:82:EA:48:30:38:6B:B9:E1:F5:39:01:EA:F5:E7
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/G7uqWvtTgupIMDhrueH1OQHq9ec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.1.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         bd:99:44:1d:88:44:5c:a1:f3:90:c3:1e:6f:62:49:b9:a8:78:
         9d:7f:d5:ab:98:bf:79:b1:a8:43:63:22:0f:a3:05:b0:7f:e4:
         22:cb:7b:2e:aa:9a:51:f4:58:82:c6:12:44:99:6f:21:5d:24:
         5e:2c:45:03:cc:ab:69:49:a0:e4:3a:77:cf:2b:a2:3d:bf:e0:
         a8:bd:0f:d3:63:48:9e:9f:2c:da:2e:de:1e:73:0a:f0:72:3c:
         e0:0d:6d:51:fa:2f:54:26:6d:c9:7a:87:8a:8b:e2:36:d7:12:
         64:01:df:58:6c:76:59:20:21:c2:d1:1f:75:f9:30:36:c1:a8:
         c5:ae:4e:40:04:fe:f1:c2:12:3a:ef:92:26:b2:03:68:4a:90:
         cb:4b:01:74:58:b4:e6:17:db:6f:d7:a9:2e:69:65:8d:81:94:
         2d:9d:15:10:89:5a:02:cb:20:a8:ed:d9:7f:0a:e9:bd:5c:c9:
         eb:84:b0:29:01:9c:e3:99:c4:8f:b8:48:29:b9:9e:21:66:d9:
         e2:62:46:39:9f:52:1d:d5:6e:77:1b:ec:a3:9e:ad:5d:28:a7:
         27:7b:79:cd:1e:99:08:22:44:64:98:80:f8:ee:75:e1:be:64:
         b0:89:76:e2:1a:ad:33:f6:50:19:d6:ec:be:61:f0:b1:95:cd:
         4d:c5:7c:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org