Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/SivyqaBhVNgix5jT5Y5UZwnuL9w.roa
File:                     SivyqaBhVNgix5jT5Y5UZwnuL9w.roa (raw, json)
Hash identifier:          KRSMhn2XRBW2zd3AoQK0GmQr6GeneXe2MVCScW1F+JQ=
Subject key identifier:   4A:2B:F2:A9:A0:61:54:D8:22:C7:98:D3:E5:8E:54:67:09:EE:2F:DC
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01DD
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/SivyqaBhVNgix5jT5Y5UZwnuL9w.roa
Signing time:             Fri 31 May 2024 01:30:56 +0000
ROA not before:           Fri 31 May 2024 01:30:56 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        218.43.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 477 (0x1dd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:56 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4A2BF2A9A06154D822C798D3E58E546709EE2FDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:36:d6:cb:c0:a1:cd:1c:c3:99:7c:fe:e2:30:
                    aa:dd:d8:c2:e2:41:4f:99:a6:c1:37:25:54:ce:ba:
                    4d:30:2f:1b:9f:df:d7:7b:b5:65:cf:33:73:23:58:
                    58:af:72:88:f4:88:29:68:ec:00:7c:07:7d:95:32:
                    74:bf:dd:7d:14:0f:54:65:92:32:c3:be:6e:e0:2b:
                    ee:2c:9b:41:c0:a7:f0:a6:59:4a:49:fa:d5:65:90:
                    e2:0c:61:8a:f6:e1:81:dc:60:bd:7b:17:65:15:ee:
                    9c:be:92:db:2e:61:4c:e0:b8:f7:28:ff:37:29:bd:
                    90:a3:f0:61:13:46:e4:2c:9c:21:5e:4e:44:e1:2f:
                    1e:df:4d:0e:ad:27:77:81:e8:bf:c3:80:7c:b8:0c:
                    c5:67:7d:0d:60:a6:16:eb:1d:41:83:25:d1:9d:36:
                    f3:f5:bf:07:35:93:f5:20:56:02:77:e3:ec:dc:b3:
                    35:77:7b:2d:af:b5:7a:f1:d7:9a:0f:c8:d4:ea:ff:
                    37:4d:17:6c:ac:80:d4:6c:a2:fb:ba:ec:a9:77:b9:
                    6a:4d:8e:63:d8:8c:fd:eb:b8:1e:55:1a:17:91:a8:
                    96:26:1c:23:ff:3b:fe:e3:87:05:a9:ce:c6:24:3f:
                    85:7f:f2:1e:05:97:fc:88:32:de:a3:c5:d3:ec:13:
                    cf:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:2B:F2:A9:A0:61:54:D8:22:C7:98:D3:E5:8E:54:67:09:EE:2F:DC
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/SivyqaBhVNgix5jT5Y5UZwnuL9w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         1c:42:31:50:eb:49:0e:41:a6:9d:d3:a4:cf:ec:20:b2:fd:f8:
         b5:1b:d9:16:2c:b3:94:1b:a7:25:24:f7:f6:cb:1f:57:c0:ce:
         9d:85:08:1d:c0:33:a7:62:d7:b9:7c:3b:e7:c1:39:de:94:97:
         98:94:02:ea:fa:c4:fd:e2:67:5a:76:f3:c5:33:18:da:da:bf:
         6e:d8:09:ec:cd:cb:0b:a0:15:76:f3:28:95:db:e3:86:aa:19:
         e8:e3:e2:f4:ec:80:ff:1c:e6:94:68:95:6d:f0:4a:bf:77:e2:
         aa:50:59:ce:ad:ab:72:cb:ed:91:9b:63:6d:b2:0c:91:bf:4f:
         1e:58:37:67:46:6d:1d:df:8d:65:b9:e0:16:71:2b:51:16:86:
         27:5b:0e:e0:54:1a:b2:d6:4e:23:e6:16:b0:4e:cd:fd:7c:0f:
         51:cc:11:36:8e:2b:09:d6:65:92:e2:fb:ec:6c:66:34:ad:80:
         35:eb:ee:d9:f5:41:bc:5c:36:c7:36:ec:a5:a6:db:0a:22:e2:
         23:62:a3:29:59:07:f4:cb:66:04:b7:e3:e9:27:ee:fb:01:70:
         4f:1e:6e:a2:40:ca:52:8b:49:22:78:b1:f8:79:c0:d6:05:fe:
         90:e6:09:5a:34:3e:6f:96:91:e2:f6:99:54:28:25:9e:e5:04:
         ad:cd:8c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org