Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/13WECxCjEjm6dK6r2ycp0UaKNIg.roa
File:                     13WECxCjEjm6dK6r2ycp0UaKNIg.roa (raw, json)
Hash identifier:          PDyrbLmaFc5oxCNa6UKAdp/ADojVgIvUiMvvFKXrWB0=
Subject key identifier:   D7:75:84:0B:10:A3:12:39:BA:74:AE:AB:DB:27:29:D1:46:8A:34:88
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       5F
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/13WECxCjEjm6dK6r2ycp0UaKNIg.roa
Signing time:             Wed 04 Sep 2024 06:29:20 +0000
ROA not before:           Wed 04 Sep 2024 06:29:20 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        115.69.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:29:20 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D775840B10A31239BA74AEABDB2729D1468A3488
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:d0:0b:15:27:15:39:bc:86:14:98:6b:0e:18:
                    a0:45:29:ea:23:34:ab:81:c4:7f:36:e1:6b:30:7a:
                    85:31:40:4c:7a:08:9f:b7:c3:35:99:0d:f9:06:1f:
                    a2:9d:5d:cd:5f:5b:aa:a3:f8:b5:7e:e3:fc:26:8f:
                    e5:5a:aa:e1:89:97:3b:6e:b0:11:6b:62:1b:51:d0:
                    85:f4:86:d8:6d:d8:5f:1b:d3:6e:ec:8e:02:a5:71:
                    59:7b:b5:3e:a4:54:9b:ae:66:cc:10:60:cf:d9:92:
                    9f:65:6c:ec:d7:bf:eb:4b:e8:18:c4:5b:80:12:ce:
                    2c:6a:fd:89:92:00:2c:38:4f:ce:a1:de:ba:3b:20:
                    b0:26:94:6e:1e:b5:bb:d1:5a:00:24:03:73:72:e0:
                    6d:a9:81:3a:3f:69:29:7c:e9:ac:6e:a0:95:c1:38:
                    1d:1b:fb:69:57:9e:5e:eb:75:10:e1:5f:6d:5e:c9:
                    66:b1:78:d3:a4:a7:90:8b:4f:3d:3c:42:cc:0b:2e:
                    35:13:21:3a:8c:a7:bf:97:7c:5c:2c:0a:3d:0d:c7:
                    75:76:18:5f:eb:cc:e0:65:9d:f4:46:8c:f3:b5:09:
                    7d:a1:fe:c5:60:67:52:78:5b:a5:1d:0a:64:39:c3:
                    af:f4:87:77:26:6c:c7:47:79:04:d0:c3:76:1e:26:
                    e7:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:75:84:0B:10:A3:12:39:BA:74:AE:AB:DB:27:29:D1:46:8A:34:88
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/13WECxCjEjm6dK6r2ycp0UaKNIg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:6e:33:9f:ac:22:fa:c0:c3:ca:ef:cf:fc:0c:cb:a0:0e:f4:
         c8:8c:50:e3:f0:0f:61:ad:2b:0b:4f:b1:12:44:d4:06:5a:40:
         d4:88:0d:03:12:96:10:88:0e:b5:5f:98:9b:a1:04:09:a0:10:
         c5:1f:c3:4f:53:a8:56:85:8c:2f:09:99:ee:de:3e:fa:06:8a:
         e5:01:23:54:70:e4:03:8a:bd:83:0d:89:38:96:1e:8e:1a:ba:
         68:23:b4:60:5a:ee:b7:dc:88:35:e2:ce:2c:73:a7:45:77:45:
         8a:c5:9e:1b:18:00:f1:a8:6b:38:f6:87:d0:2b:1e:fd:ec:90:
         a7:df:f4:22:84:a1:92:c4:bc:bd:d0:79:4d:99:c2:14:2b:3e:
         95:38:5b:01:63:6c:d1:cd:b8:d0:c1:04:d8:ed:f5:97:21:de:
         e6:ca:68:b4:14:3c:0d:34:de:f2:07:3a:e8:87:0d:6c:a3:96:
         3e:a6:7c:48:13:b2:42:64:e6:d9:e0:4f:a9:01:eb:ee:3d:fe:
         8b:6f:6f:b9:dd:fb:67:d3:eb:0d:82:39:eb:69:51:44:fa:f5:
         f5:73:71:dd:d5:6c:a9:e2:09:14:52:dd:ba:48:09:e0:98:ef:
         04:dc:64:d5:db:42:28:be:be:4d:87:80:90:b4:91:10:4d:6a:
         87:8e:5c:f0
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:17 2024 by rpki-client on console-ams.rpki-client.org