Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/UxvgbjeFY8cJrsFvFKdLifGb0FU.roa
File:                     UxvgbjeFY8cJrsFvFKdLifGb0FU.roa (raw, json)
Hash identifier:          a1IFRDOgznK0v18RO97h4BUBJAGLj34pYGPWSMeJHuQ=
Subject key identifier:   53:1B:E0:6E:37:85:63:C7:09:AE:C1:6F:14:A7:4B:89:F1:9B:D0:55
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01C4
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UxvgbjeFY8cJrsFvFKdLifGb0FU.roa
Signing time:             Fri 31 May 2024 01:30:45 +0000
ROA not before:           Fri 31 May 2024 01:30:45 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        180.0.0.0/10 maxlen: 10

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 452 (0x1c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:45 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=531BE06E378563C709AEC16F14A74B89F19BD055
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:d3:2c:72:7a:1a:5d:5d:1c:ec:d3:46:b3:af:
                    cd:37:bb:0a:ea:9b:b6:5a:e5:a9:b6:2e:04:e8:b6:
                    e8:64:ad:7d:4b:00:7a:d8:7e:62:0e:14:51:ff:0c:
                    92:42:d0:5d:f6:98:71:72:5b:62:be:69:89:d7:d0:
                    94:65:88:21:2e:6a:f4:7c:6d:40:6d:12:92:96:51:
                    d2:cd:22:57:3a:8b:9b:d2:f4:05:ec:a5:e4:2f:42:
                    b9:bc:32:e7:85:3b:7a:f1:0d:53:37:f3:f0:b6:8c:
                    21:5f:37:dc:fa:54:73:85:26:82:d6:df:f4:c1:76:
                    27:28:71:9a:1a:aa:f4:5e:29:b2:41:0c:73:64:0d:
                    e4:23:63:be:9e:62:0b:36:69:75:da:e9:9d:b9:ec:
                    49:4c:05:4a:db:cb:de:51:80:5e:61:18:49:4c:34:
                    0d:b1:76:19:8f:ad:dc:80:82:0d:3a:a7:4a:ce:32:
                    81:14:8b:f0:96:c7:4a:be:85:c0:4f:45:e3:14:8c:
                    3f:79:6a:16:95:13:01:d7:20:8d:44:6a:6e:4c:ab:
                    bc:2f:00:cc:ac:61:e7:53:4d:80:12:34:8e:3a:80:
                    de:63:a3:18:a3:70:78:b0:13:d7:b8:b3:06:7b:ac:
                    4f:d7:60:83:2b:61:c9:60:fe:eb:f1:72:9c:89:a0:
                    23:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:1B:E0:6E:37:85:63:C7:09:AE:C1:6F:14:A7:4B:89:F1:9B:D0:55
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/UxvgbjeFY8cJrsFvFKdLifGb0FU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.0.0.0/10

    Signature Algorithm: sha256WithRSAEncryption
         2e:c5:44:ed:35:0b:94:13:2f:91:79:84:75:ff:18:d2:1b:a1:
         9e:c4:a7:26:41:a7:b4:48:b2:80:75:7e:d1:b4:14:b9:29:18:
         74:b2:6f:86:64:68:c0:60:16:a0:b0:35:98:0e:ff:e1:e1:ca:
         61:54:e0:03:90:4d:63:41:49:e6:34:a5:fe:c1:cf:3c:3f:be:
         57:ab:ac:21:12:e0:f4:7a:48:f2:85:6a:d4:e5:ad:78:bf:27:
         ae:9c:3b:ec:05:d9:ed:df:85:0d:cd:02:73:d2:d1:6a:62:cd:
         2e:33:8e:12:82:03:87:4c:41:45:c6:f4:ff:e0:61:7f:f2:a7:
         18:f8:58:e9:49:9f:0c:58:5d:c0:54:5b:39:9c:9b:db:e9:53:
         0f:b4:e7:b9:28:e8:90:3b:18:21:39:49:ab:37:bd:02:ac:8a:
         27:8a:70:81:1a:2e:67:5e:f4:d9:13:2e:be:7b:e0:6b:15:d6:
         f8:56:ab:c1:d8:13:46:89:4c:d8:83:c8:8d:a3:da:3c:4d:3a:
         15:96:7a:f4:4d:14:5a:ae:b1:f0:ad:1c:cb:eb:29:e4:b1:64:
         9b:79:c1:f9:ce:e0:53:d8:8e:95:cf:0f:f3:7a:04:5a:6d:0f:
         f2:91:15:08:75:34:21:64:a1:8a:f7:2d:b6:ed:e0:0d:68:86:
         e6:e4:5e:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:27 2024 by rpki-client on console-ams.rpki-client.org