Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/13131/5l0ZhHHGLAZI-vp6c4E6ImhVw2s.roa
File:                     5l0ZhHHGLAZI-vp6c4E6ImhVw2s.roa (raw, json)
Hash identifier:          BRBO4Kc136iUGDnk/DrgtFJ3RcoW+z4cK5YgE4Fpl3o=
Subject key identifier:   E6:5D:19:84:71:C6:2C:06:48:FA:FA:7A:73:81:3A:22:68:55:C3:6B
Certificate issuer:       /CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
Certificate serial:       4C
Authority key identifier: FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/5l0ZhHHGLAZI-vp6c4E6ImhVw2s.roa
Signing time:             Thu 28 Mar 2024 01:11:03 +0000
ROA not before:           Thu 28 Mar 2024 01:11:03 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     38639
IP address blocks:        220.150.196.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FD13D822A4DD7BA05078F9E60025F8BFF11BEF82
        Validity
            Not Before: Mar 28 01:11:03 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=E65D198471C62C0648FAFA7A73813A226855C36B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:f5:d8:af:1b:b2:da:68:1a:14:9e:60:6a:f6:
                    90:0f:f5:37:a2:02:f0:33:2b:a8:5f:b1:a5:1d:1e:
                    3e:4c:76:1b:7d:fe:38:8c:e3:f4:f1:ff:27:1f:e9:
                    73:aa:fb:5f:ed:05:ac:a1:06:e0:d4:bd:6d:18:86:
                    34:94:fe:ff:e6:8a:87:b0:04:97:84:b8:b1:9e:f6:
                    3e:9e:b7:81:e5:59:ba:f9:22:1b:94:fc:3f:11:61:
                    78:f0:c3:00:98:0c:a0:46:7e:a6:d2:04:82:fe:fb:
                    09:41:02:2a:9f:2f:cb:15:42:15:e2:9e:47:1d:74:
                    f4:bb:f1:4c:81:58:3e:49:6a:86:d2:78:2a:8d:20:
                    b0:32:cd:aa:4b:10:5d:73:e4:01:cc:2a:e5:9a:55:
                    7c:45:87:d6:58:40:a0:be:3c:28:21:8a:fb:b0:0f:
                    d3:f7:0f:56:77:ea:48:9a:1f:ab:fd:ae:05:b8:96:
                    91:c9:03:6a:cc:1a:0d:8a:7a:ad:eb:ff:c6:7f:f2:
                    d1:3b:88:21:5b:2a:94:fd:aa:49:28:2a:14:19:e7:
                    de:0e:dd:f0:6b:fc:f9:f7:0b:b1:5a:13:3e:82:bd:
                    1c:73:3d:fb:71:4e:95:da:0c:33:45:63:ee:32:51:
                    8a:c5:64:b9:00:1a:d3:1a:07:46:90:27:78:a9:4e:
                    45:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:5D:19:84:71:C6:2C:06:48:FA:FA:7A:73:81:3A:22:68:55:C3:6B
            X509v3 Authority Key Identifier:
                keyid:FD:13:D8:22:A4:DD:7B:A0:50:78:F9:E6:00:25:F8:BF:F1:1B:EF:82

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/_RPYIqTde6BQePnmACX4v_Eb74I.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/_RPYIqTde6BQePnmACX4v_Eb74I.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/13131/5l0ZhHHGLAZI-vp6c4E6ImhVw2s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.150.196.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1e:e4:da:17:1d:4a:62:ce:65:a6:af:c2:fb:ea:c6:a3:8b:38:
         0d:ec:5b:43:7f:26:73:42:e2:d5:e4:4f:a6:7c:41:cb:16:ce:
         ed:e7:65:cc:b9:80:45:88:60:f7:f3:b1:df:0c:89:18:8a:1f:
         30:98:a3:07:b6:ae:a9:e6:77:94:53:e5:a0:ca:ca:31:de:8a:
         a6:68:ec:ba:f0:ea:27:1f:75:a4:4c:ea:a7:27:4f:c9:9f:0a:
         05:44:ec:f8:63:27:fb:e3:99:2d:be:d0:12:a1:52:0f:fc:af:
         64:0b:42:5f:38:17:45:06:08:35:ff:ba:1a:e0:70:3c:d1:96:
         31:f7:0d:ea:3e:34:73:3d:76:37:bd:e0:3c:b8:6f:27:a5:10:
         16:9f:dc:82:c2:0e:c6:fb:8a:17:b7:a2:83:68:0c:86:d3:8e:
         a5:eb:10:78:40:5d:6d:cb:0b:53:7a:4b:a5:b9:9c:23:82:ba:
         4b:a0:f8:ca:e6:de:77:c6:22:69:43:b7:36:6e:d6:18:0b:37:
         a1:2c:5d:19:f4:bd:42:3c:4e:01:a4:6a:b8:41:4e:5d:bc:dc:
         90:d0:99:fd:86:13:c5:bc:5c:0f:af:9a:88:5f:1e:37:b3:b8:
         3b:7c:e2:dc:e4:7c:56:fb:ea:33:cc:52:de:84:10:b8:5e:7e:
         d5:7f:64:ad
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:55 2024 by rpki-client on console-fra.rpki-client.org