Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/mjUypesTP-DAtYz8QbWsIb2E-Pc.roa
File:                     mjUypesTP-DAtYz8QbWsIb2E-Pc.roa (raw, json)
Hash identifier:          sdJbzTyY//mUZSrw26gao34qRicCZNhj+LQwZA9Cf8I=
Subject key identifier:   9A:35:32:A5:EB:13:3F:E0:C0:B5:8C:FC:41:B5:AC:21:BD:84:F8:F7
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       11
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/mjUypesTP-DAtYz8QbWsIb2E-Pc.roa
Signing time:             Mon 20 Nov 2023 03:50:02 +0000
ROA not before:           Mon 20 Nov 2023 03:50:02 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     7511
IP address blocks:        124.146.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Nov 20 03:50:02 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=9A3532A5EB133FE0C0B58CFC41B5AC21BD84F8F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:2a:0b:84:42:6e:87:59:f6:fc:c7:21:78:d5:
                    c9:9d:97:c0:df:d3:63:e5:15:21:dc:ea:4e:90:b6:
                    6f:18:40:c3:4d:c8:bc:f3:57:b9:ee:c4:dc:ac:25:
                    4f:6a:92:d0:3c:03:d9:25:57:f9:68:77:78:23:04:
                    1a:4e:59:c2:ea:01:46:a3:9f:11:09:99:f1:99:fb:
                    7f:65:c4:61:1b:23:69:18:b1:92:0c:28:c7:85:9e:
                    11:41:2f:08:57:20:d9:7e:29:a5:f4:a1:91:64:14:
                    35:de:db:73:96:23:ae:0f:a9:96:7c:b7:a3:2f:ed:
                    be:ba:cc:23:30:31:e5:f8:08:1a:6e:2f:a8:5f:db:
                    82:00:19:a5:f6:11:86:d3:f6:dc:d3:fd:63:ef:81:
                    fd:58:0d:f6:88:44:a4:66:ae:f6:21:5c:ac:b7:c2:
                    0c:f1:31:87:7e:de:27:f7:55:22:ea:8a:51:35:ed:
                    8a:2a:79:ce:75:00:00:59:a1:d7:58:0b:69:3f:57:
                    ae:38:f5:f5:93:cc:87:dc:33:99:69:5e:e6:28:3c:
                    3f:e5:e8:0e:5c:ae:f5:f6:05:a3:38:e8:cb:f1:71:
                    53:a5:28:b1:86:40:72:4f:34:f8:51:a7:8f:dc:e0:
                    79:f1:53:da:bc:16:00:65:a7:cd:0b:86:ec:21:c5:
                    e1:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:35:32:A5:EB:13:3F:E0:C0:B5:8C:FC:41:B5:AC:21:BD:84:F8:F7
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/mjUypesTP-DAtYz8QbWsIb2E-Pc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b5:2b:dc:68:fa:9d:f1:33:ba:b6:8d:d9:e4:e8:9d:93:c3:a4:
         bd:6e:d3:9f:38:77:82:39:1d:15:92:a9:b8:60:1b:75:7b:bd:
         ae:d4:d1:f4:7b:05:89:0c:99:41:db:2f:1b:da:3f:bf:d5:48:
         4a:cd:a3:7d:c9:77:a7:f3:68:94:be:f4:3e:2c:79:fe:23:22:
         2c:c3:ea:5e:c8:6c:0e:38:01:b1:ad:a1:39:fe:68:1e:42:75:
         10:41:bb:18:d5:22:72:cd:7b:41:c6:6a:e3:4c:81:3b:72:98:
         db:6c:82:4c:df:0d:a6:f2:44:fd:06:00:4c:00:6b:50:ae:c0:
         3c:5d:33:c4:8f:5c:4e:1e:65:33:91:e7:72:04:65:58:a8:20:
         c7:c7:4b:20:7f:06:6f:50:2f:ef:00:4a:d6:2a:18:05:a7:a1:
         9e:a7:dc:d6:23:db:8e:dc:59:68:4b:e8:ad:6c:61:6a:9b:df:
         4f:77:d7:c9:cc:30:85:66:fd:8c:18:e6:9a:ed:50:60:da:2b:
         ee:40:fb:51:8b:c1:d8:1f:01:6c:d6:cf:6c:28:89:b3:81:ab:
         a0:a7:3f:c6:e4:f4:94:5d:a8:43:50:aa:85:ab:e7:d3:ca:d9:
         dd:f3:67:ad:7d:e6:47:a4:7f:18:3c:a3:79:a1:25:39:d9:bc:
         cc:35:f0:38
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org