Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/5BJakx0Sc-JyuIlWQ6UYnCvLS6Y.roa
File:                     5BJakx0Sc-JyuIlWQ6UYnCvLS6Y.roa (raw, json)
Hash identifier:          pTLdhZxsAvK7+ywgqlEQqldRFEfbUUxfZRpWlVWU2GU=
Subject key identifier:   E4:12:5A:93:1D:12:73:E2:72:B8:89:56:43:A5:18:9C:2B:CB:4B:A6
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       13
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/5BJakx0Sc-JyuIlWQ6UYnCvLS6Y.roa
Signing time:             Mon 20 Nov 2023 03:50:04 +0000
ROA not before:           Mon 20 Nov 2023 03:50:04 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        202.95.32.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:50:04 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=E4125A931D1273E272B8895643A5189C2BCB4BA6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:f4:78:83:b2:1a:b9:a6:b5:b3:9b:60:54:8b:
                    9e:c3:16:ce:af:3a:a8:26:f7:59:66:af:c5:b4:a9:
                    ec:d2:f1:1b:52:ee:f1:29:6c:6e:e5:9b:c7:dd:5a:
                    74:6f:88:a2:b7:fd:3d:84:5b:52:7b:d1:a9:e9:ed:
                    03:88:02:86:40:69:15:de:1e:a3:cb:c0:6a:de:c5:
                    d0:20:3d:c8:4c:cf:93:1c:b5:cb:1f:dd:6d:d1:37:
                    1d:38:31:9a:86:53:f5:db:5b:e3:5f:2a:cd:4f:49:
                    9c:60:2c:2d:ca:e7:e3:59:d7:f8:85:7d:0b:33:c9:
                    51:dc:ef:22:aa:44:67:a0:a3:4e:97:86:6e:d9:a4:
                    53:c0:fe:15:80:ab:8e:9f:1d:5e:32:d5:8d:aa:73:
                    38:78:6b:4c:39:9f:63:f6:22:78:14:f7:92:0b:d8:
                    2a:49:cc:15:ea:e6:09:3c:9c:20:8f:cc:cb:bc:28:
                    7e:5d:22:54:b0:8f:ac:a0:0c:6d:5d:c9:05:84:e5:
                    93:f5:36:aa:ad:78:42:04:c2:78:07:74:dd:cf:24:
                    04:b0:59:33:81:2c:6a:4d:9a:dc:82:c7:cf:1e:a1:
                    59:be:72:e5:07:ec:53:03:e8:f3:3a:17:46:d8:96:
                    4a:06:98:37:24:47:fc:24:98:e3:69:cf:bd:a5:84:
                    4b:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:12:5A:93:1D:12:73:E2:72:B8:89:56:43:A5:18:9C:2B:CB:4B:A6
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/5BJakx0Sc-JyuIlWQ6UYnCvLS6Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.95.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:d0:bd:7f:8d:c0:71:77:35:b6:04:75:6e:e5:4d:b0:94:5c:
         ce:ac:6c:2b:e8:3f:db:bf:8e:cf:a8:c2:04:8f:f5:28:17:ee:
         3a:e3:26:3e:6a:6b:15:5c:3f:2b:57:b3:f8:7f:6b:8d:15:ed:
         1e:76:f8:4f:5d:bc:3f:1d:62:4b:2f:8b:af:c7:6c:1b:f0:52:
         d7:99:f2:3d:17:5c:41:6f:df:fc:c3:08:c2:a6:5c:32:53:7c:
         7a:4c:aa:c5:81:6b:b6:1c:13:e3:8d:32:d0:6f:c1:67:a2:39:
         8a:93:b5:ed:04:73:eb:26:51:62:a7:63:b1:10:9c:9e:bc:2a:
         42:58:fd:69:cd:d8:d5:29:e8:dd:4e:55:4c:0e:a4:55:c6:bd:
         2b:23:0c:08:d5:8a:2f:03:a4:8c:38:e7:ec:35:94:05:d0:f8:
         b9:02:26:6d:b2:aa:f4:66:3a:1b:01:06:39:94:7b:7a:95:b6:
         48:6b:34:b9:e7:e9:b3:62:5b:1c:8a:d9:f5:cb:cd:9a:a6:f8:
         99:b6:17:80:f1:77:50:e0:f4:b2:77:6a:8e:08:c2:a3:4f:0a:
         2e:87:22:39:42:99:35:b2:57:a4:65:a5:b0:57:13:7f:e0:2e:
         97:9a:d3:dc:0e:34:8e:58:23:4b:ed:9e:b7:64:b3:1d:eb:98:
         f9:b5:33:bf
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org