Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/8m951bbMI-0C4gJ2UTIF8aXEQOg.roa
File:                     8m951bbMI-0C4gJ2UTIF8aXEQOg.roa (raw, json)
Hash identifier:          1ijezDV1NYr8x/9VBM+3esV9jrMgLV1fUIrzpS0aZgY=
Subject key identifier:   F2:6F:79:D5:B6:CC:23:ED:02:E2:02:76:51:32:05:F1:A5:C4:40:E8
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       63
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/8m951bbMI-0C4gJ2UTIF8aXEQOg.roa
Signing time:             Wed 04 Sep 2024 06:29:22 +0000
ROA not before:           Wed 04 Sep 2024 06:29:22 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        175.111.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:29:22 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F26F79D5B6CC23ED02E20276513205F1A5C440E8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:58:3e:df:39:0e:a6:b8:26:4e:03:86:09:b6:
                    d5:cd:66:f1:6b:25:7e:97:0d:4d:4a:a4:66:49:4d:
                    74:aa:95:1e:f3:21:69:3d:4d:69:5b:ab:2d:82:9c:
                    83:b0:c8:a7:7c:ca:14:39:1e:fe:a8:c7:6a:e8:f9:
                    07:86:73:df:2f:a5:22:d5:f0:81:67:46:19:8c:eb:
                    77:ed:f1:97:84:70:41:44:01:32:7e:db:98:25:82:
                    ef:b2:c0:1a:32:63:d8:43:45:3b:ed:9f:2c:11:28:
                    09:72:e9:cd:77:4d:d5:f0:e5:4c:96:bf:96:66:4f:
                    bb:49:25:9d:90:cb:20:13:d0:67:f0:26:dd:fe:df:
                    3b:a3:3d:28:6d:6d:57:5e:fd:12:b5:11:2e:7c:45:
                    f0:f4:9d:8e:79:e6:b2:25:4f:48:24:13:0c:0e:7a:
                    e8:11:58:80:d7:fb:61:8a:be:19:53:18:07:f5:92:
                    cd:7c:cb:cb:b6:2b:14:2f:95:1b:47:ca:d0:d9:49:
                    df:d7:00:38:af:9b:b9:fc:cb:97:d8:51:6a:03:f1:
                    29:8d:f7:c8:a4:19:fd:18:eb:46:6b:6b:ee:06:10:
                    43:59:f9:f0:39:80:e7:d6:e2:84:59:72:03:a5:e8:
                    2d:a9:33:a9:74:9d:4d:79:a6:95:dc:d9:03:11:b8:
                    5e:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6F:79:D5:B6:CC:23:ED:02:E2:02:76:51:32:05:F1:A5:C4:40:E8
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/8m951bbMI-0C4gJ2UTIF8aXEQOg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9e:b4:eb:ec:6b:44:6d:fa:7c:43:74:99:16:07:4e:5f:8c:51:
         9e:f9:69:da:7a:64:b0:4f:89:a6:05:66:5a:0a:53:c5:0c:aa:
         54:b2:aa:f0:26:03:e6:95:5b:de:64:e9:50:9e:2b:aa:24:15:
         63:66:06:a1:ec:2c:a4:98:1b:6c:c3:32:23:ed:78:15:00:6b:
         33:dd:51:58:4f:ac:20:9c:c4:c3:88:82:5f:9b:7a:44:1a:fe:
         7c:5c:8c:17:9e:86:3b:68:15:4c:d8:96:29:ab:9b:5f:1d:59:
         c3:df:00:a0:f6:22:7a:84:28:78:40:05:0c:b3:8c:13:d4:d8:
         3a:c5:c8:0c:8e:ed:c8:fd:9e:a1:bf:e0:1f:9e:11:f0:50:6d:
         a1:fa:3a:db:fc:6d:3a:ff:46:50:43:e5:4a:08:15:f4:9c:19:
         7d:de:b5:39:41:59:ea:e7:51:83:02:4c:c6:1e:dd:7f:09:ca:
         c2:56:91:2c:a9:ca:3f:36:51:cc:1d:7a:29:d8:91:a8:a6:3d:
         ec:c5:25:13:23:04:0b:38:1b:89:6a:ec:a1:77:d7:86:ea:85:
         cb:ac:b4:bf:23:f0:bf:15:9b:2c:b8:fe:5b:60:89:1d:f9:ea:
         e5:81:41:0e:28:e6:a6:5c:0e:4d:26:c8:61:a6:fe:bc:7a:ea:
         eb:f9:a9:8c
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:16 2024 by rpki-client on console-fra.rpki-client.org