Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/131/V4PB1NngCKdlYpDhsluSArcnZMY.roa
File:                     V4PB1NngCKdlYpDhsluSArcnZMY.roa (raw, json)
Hash identifier:          ePymBYsss+ILj14sPbA3db7NgdYItogBF+sMVfbRCn0=
Subject key identifier:   57:83:C1:D4:D9:E0:08:A7:65:62:90:E1:B2:5B:92:02:B7:27:64:C6
Certificate issuer:       /CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
Certificate serial:       01D6
Authority key identifier: 2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/V4PB1NngCKdlYpDhsluSArcnZMY.roa
Signing time:             Fri 31 May 2024 01:30:54 +0000
ROA not before:           Fri 31 May 2024 01:30:54 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     4713
IP address blocks:        211.11.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 470 (0x1d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FC09923B05A7E8F1ADD9A5984EDC19320DB974B
        Validity
            Not Before: May 31 01:30:54 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=5783C1D4D9E008A7656290E1B25B9202B72764C6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:54:d3:87:f9:6f:e6:db:5f:ab:58:c1:6d:c8:
                    43:30:40:87:c4:cb:95:17:ce:47:94:71:37:4a:51:
                    92:a6:ec:3a:4f:f4:37:54:e5:6e:1d:63:fa:75:ce:
                    05:d7:42:53:a1:e7:e7:40:ed:af:c2:08:10:93:8f:
                    83:61:d9:f2:72:07:d1:8c:8b:c9:89:c7:d3:19:20:
                    bc:45:fd:98:33:87:cc:44:5c:a9:3f:f6:2b:08:ce:
                    1c:45:06:2c:92:00:ac:57:82:22:a5:c2:32:89:b0:
                    21:c0:da:25:ad:6e:91:b1:2a:e6:d2:94:8c:8f:35:
                    cc:a3:64:0d:f9:8f:6f:ca:1b:ff:fb:95:4b:1d:de:
                    3e:3b:b1:3c:1e:cc:46:20:ea:67:54:1b:65:52:f3:
                    af:43:33:f0:53:9d:4a:46:12:d4:bb:43:e4:c5:88:
                    61:c8:30:4a:aa:ff:cb:cc:79:3e:be:eb:b9:54:21:
                    7c:3b:21:fc:4b:24:b0:71:06:81:c8:dc:58:bb:5d:
                    75:1b:8b:35:3e:3f:5e:9d:2e:fa:e6:33:26:a8:05:
                    41:25:80:71:45:33:d2:12:ee:57:d4:c4:69:20:40:
                    ca:1f:b8:1f:55:c9:3d:cb:e6:50:25:d3:0d:c1:2f:
                    39:d3:ee:45:94:38:bc:d0:f8:9b:83:23:d1:bc:9d:
                    d4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:83:C1:D4:D9:E0:08:A7:65:62:90:E1:B2:5B:92:02:B7:27:64:C6
            X509v3 Authority Key Identifier:
                keyid:2F:C0:99:23:B0:5A:7E:8F:1A:DD:9A:59:84:ED:C1:93:20:DB:97:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/L8CZI7Bafo8a3ZpZhO3BkyDbl0s.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/131/V4PB1NngCKdlYpDhsluSArcnZMY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.11.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         28:6c:da:b5:2e:2a:71:d5:2b:36:f7:e1:45:9a:21:a5:b3:cd:
         b1:db:0b:14:aa:8d:19:c7:4a:5d:9c:25:0e:99:4f:21:b5:47:
         9e:0e:e9:b2:57:5e:93:f5:91:d3:68:24:3d:96:51:0e:12:a6:
         0a:43:e7:f0:c0:88:69:17:52:4e:4f:22:b7:31:6c:be:f0:42:
         97:9b:ba:01:72:c8:01:fb:a8:e2:23:03:06:4e:b0:3f:e0:d1:
         08:de:0c:00:9a:18:d4:c1:60:3c:d2:15:a7:e1:91:fb:77:74:
         d9:ee:94:36:72:61:85:e4:95:44:a3:13:bf:75:7c:b5:6d:d3:
         1d:df:1c:0f:9f:95:23:d6:c4:b3:da:79:f5:92:15:c8:3e:be:
         dd:9c:0e:85:5f:af:ff:fd:9b:63:32:f0:66:5e:e9:1e:06:6e:
         df:ef:c3:80:f5:0c:03:ca:5c:e7:94:37:ed:67:74:2e:ad:9a:
         b3:34:6d:ab:b9:e6:b5:01:a3:c1:e6:8c:70:83:6f:05:2f:e1:
         25:34:21:e9:46:4d:99:a2:e2:fb:80:dd:37:26:99:dc:c5:e3:
         0c:47:0a:0f:e3:0f:b5:61:a5:52:58:be:82:b2:42:77:d0:fe:
         3a:c9:d4:d7:a0:ca:ad:95:fa:4b:a3:cb:aa:0f:fc:97:3f:01:
         5c:5a:96:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org