Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/QaWSJzrfuYg8K45VK2Zfh5Ny-Mg.roa
File:                     QaWSJzrfuYg8K45VK2Zfh5Ny-Mg.roa (raw, json)
Hash identifier:          7GT+qY7qLtMSKbjtg2Tm2obhz3VSm6frAJ9VeJsQ3qs=
Subject key identifier:   41:A5:92:27:3A:DF:B9:88:3C:2B:8E:55:2B:66:5F:87:93:72:F8:C8
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01DF
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QaWSJzrfuYg8K45VK2Zfh5Ny-Mg.roa
Signing time:             Fri 31 May 2024 01:30:57 +0000
ROA not before:           Fri 31 May 2024 01:30:57 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        218.47.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 479 (0x1df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:57 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=41A592273ADFB9883C2B8E552B665F879372F8C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:48:d3:85:ab:b2:91:1c:80:3b:37:34:db:63:
                    1e:c2:2a:b5:a2:2e:7c:c0:2f:e4:a6:17:c9:5b:40:
                    0c:7f:a5:b2:5e:bd:05:7c:c2:4c:90:e0:a9:21:4b:
                    00:91:6f:13:f0:f7:9d:54:be:9f:93:87:a0:31:d9:
                    a5:ef:50:9d:ff:3b:7a:52:20:54:2a:21:1a:b7:f3:
                    51:a3:fd:ef:c9:61:b7:f0:93:7c:aa:09:f0:52:ab:
                    0d:bd:00:94:23:94:ca:1b:1d:85:5b:aa:52:d4:c7:
                    01:d2:f4:4a:2d:f4:96:63:42:60:69:53:b4:c0:64:
                    a4:9e:df:b6:36:6a:61:cc:32:36:71:69:63:7b:5a:
                    8f:54:38:a6:2d:63:27:1c:27:52:92:2c:2f:64:ea:
                    59:88:27:01:75:8f:b5:f7:fa:0e:c2:f1:24:95:86:
                    25:f0:56:13:ef:18:36:e4:0c:9d:52:e4:61:cd:8a:
                    fd:90:49:0f:7a:ec:3f:3b:10:91:61:50:8f:13:54:
                    2d:89:ec:49:e0:59:f1:5a:4a:64:60:71:3f:ee:d2:
                    82:b1:7f:8f:3c:69:d6:e1:13:9c:a6:b3:4f:e1:04:
                    9f:ca:82:f3:8d:e9:d8:89:ec:63:2a:30:ff:4c:69:
                    e9:cd:1e:37:d1:9f:8e:f0:0b:0d:05:ba:d6:ad:33:
                    c3:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:A5:92:27:3A:DF:B9:88:3C:2B:8E:55:2B:66:5F:87:93:72:F8:C8
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/QaWSJzrfuYg8K45VK2Zfh5Ny-Mg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.47.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         02:e6:eb:f3:b0:69:76:5d:12:24:86:c1:fe:ad:a2:ee:b7:21:
         0b:bb:2c:c7:9b:2f:c2:80:90:aa:9d:90:b7:20:8e:cf:8f:80:
         13:21:fd:fc:82:87:5f:8c:89:35:f3:4d:09:1e:5e:f7:78:f2:
         ab:d9:de:50:ec:c9:26:a3:33:01:48:fd:b0:91:25:6c:9e:0f:
         89:b7:a7:a3:b9:58:26:1d:8f:bc:18:74:d8:b6:a3:ea:44:25:
         05:28:72:77:06:b5:37:4c:a3:df:f6:09:c4:ba:cd:8a:67:e7:
         b5:ce:4e:ac:6d:c6:5a:39:06:92:8f:a7:9b:ce:d0:c2:d5:ac:
         1e:9a:8e:98:4b:b6:f7:d3:2d:78:cf:e6:26:d4:ad:21:1b:36:
         63:34:e1:12:2c:71:55:df:78:5f:b3:79:be:39:dd:b9:1d:f7:
         8e:46:7f:fe:0b:2a:0b:e5:6f:7d:b4:08:fc:f4:9e:1f:25:db:
         ac:2e:d6:59:9f:7e:72:87:7e:cd:1a:1a:51:a8:ee:85:53:1c:
         59:ca:7c:9f:01:0c:24:c4:64:49:3c:8a:34:37:1b:d4:c7:b1:
         3a:cc:05:2a:af:c1:91:fa:3b:33:e4:8d:29:d5:c0:a9:e6:69:
         20:0e:e2:20:d7:1d:28:e7:06:44:5b:c2:3f:40:e3:69:76:6f:
         8b:4d:73:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:09 2024 by rpki-client on console-ams.rpki-client.org