Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/U79X3hT82B-5EXIkuXs3rltIA7c.roa
File:                     U79X3hT82B-5EXIkuXs3rltIA7c.roa (raw, json)
Hash identifier:          ed3RHmZjZWk9Hud/CRAGORm1rF0e+EIALZfaYjPzXR4=
Subject key identifier:   53:BF:57:DE:14:FC:D8:1F:B9:11:72:24:B9:7B:37:AE:5B:48:03:B7
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       6E
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/U79X3hT82B-5EXIkuXs3rltIA7c.roa
Signing time:             Wed 04 Sep 2024 06:33:10 +0000
ROA not before:           Wed 04 Sep 2024 06:33:10 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        219.122.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 110 (0x6e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:33:10 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=53BF57DE14FCD81FB9117224B97B37AE5B4803B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:8e:f3:ed:21:eb:81:b4:a0:66:19:a7:61:f5:
                    89:d3:30:d1:a0:f6:43:91:f2:a0:0f:c6:7c:50:30:
                    84:91:56:87:f6:59:30:22:c9:a1:90:12:35:f1:f6:
                    de:f6:35:fd:d2:57:b7:05:88:53:89:5c:35:d2:c4:
                    4d:6c:dd:0c:38:8b:24:26:32:ad:a2:64:aa:38:02:
                    25:8d:43:07:92:f6:bf:48:8c:89:af:6e:d0:e1:8b:
                    3b:60:96:ff:cf:a8:3f:7f:3f:ce:3a:d6:40:97:5c:
                    b4:70:aa:48:2f:35:64:d6:3b:95:75:c7:92:98:21:
                    b6:6b:0a:d4:66:de:16:c4:d1:2b:55:ba:fd:9d:64:
                    6d:14:e5:88:43:ab:05:2e:6c:55:5b:bc:cc:f4:7f:
                    20:e5:7a:e3:fb:50:00:93:14:f0:a0:a6:93:96:1c:
                    1a:7f:a7:96:3b:ec:75:c2:4f:24:26:f4:3b:40:18:
                    ec:38:d7:14:55:93:6b:1b:a1:df:f6:5c:18:52:b5:
                    41:47:37:85:cc:56:1c:94:ac:23:55:1c:38:77:7f:
                    e7:36:b3:9b:04:13:e6:c6:9b:9e:b1:da:4f:8a:fe:
                    36:57:d0:17:84:48:f3:f5:a3:a1:e6:d4:7b:0d:70:
                    a6:2f:83:53:cb:a2:3d:c3:ca:25:f4:7a:34:48:bb:
                    4d:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:BF:57:DE:14:FC:D8:1F:B9:11:72:24:B9:7B:37:AE:5B:48:03:B7
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/U79X3hT82B-5EXIkuXs3rltIA7c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.122.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         21:36:0b:7e:71:ce:46:a3:5c:8a:a2:6a:87:a3:f7:19:25:80:
         52:f3:8f:35:ae:da:f8:7f:52:ca:99:d7:ba:0e:91:63:c3:1d:
         04:6c:31:5d:98:fc:19:6b:99:bb:f4:32:dd:0a:35:31:80:e4:
         97:0d:27:b9:48:1e:4a:e0:c2:1d:da:0b:1f:25:b4:7a:8b:2c:
         83:64:c4:93:47:d4:47:de:bd:30:17:ac:51:27:84:e8:8a:cf:
         f2:80:60:37:0c:ae:77:af:f8:25:0b:00:53:10:f2:a3:5d:61:
         85:2e:ed:e7:56:af:27:02:27:60:36:9d:92:a8:c5:08:b0:ae:
         e0:97:4d:e9:ff:27:01:5a:e5:3e:0f:63:51:47:8d:4b:dc:8c:
         bd:7e:f9:24:88:35:8f:96:35:46:9a:4b:a0:71:c6:14:14:ed:
         d3:4e:53:b1:6e:c8:70:ba:1a:b2:9a:ff:57:3b:8e:84:8d:c0:
         89:76:21:de:69:c2:4a:02:2c:df:e3:52:ba:58:35:48:f2:08:
         05:cd:6f:68:d1:97:b0:dd:e2:6a:a6:ad:3c:47:80:6e:1a:6e:
         7d:0a:95:a2:6e:39:f1:34:42:ab:a7:16:18:06:01:64:ad:9e:
         e3:b2:1e:dd:24:69:b9:2d:bc:16:f1:da:10:1d:68:94:4c:13:
         6c:f6:9a:4e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 01:14:56 2024 by rpki-client on console-fra.rpki-client.org