Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20063/5soV4SXyAXlLTVQGmp_jy9aoauA.roa
File:                     5soV4SXyAXlLTVQGmp_jy9aoauA.roa (raw, json)
Hash identifier:          9hSPp9zMhPWpiX2O0JOJjFrBKCzy4HT9umVBuJUU/zI=
Subject key identifier:   E6:CA:15:E1:25:F2:01:79:4B:4D:54:06:9A:9F:E3:CB:D6:A8:6A:E0
Certificate issuer:       /CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
Certificate serial:       87
Authority key identifier: 9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/5soV4SXyAXlLTVQGmp_jy9aoauA.roa
Signing time:             Fri 31 May 2024 01:28:28 +0000
ROA not before:           Fri 31 May 2024 01:28:28 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     24277
IP address blocks:        122.128.112.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 135 (0x87)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9DB0764C6DFC1E3DF6BD580EA6994A1E7098F52A
        Validity
            Not Before: May 31 01:28:28 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=E6CA15E125F201794B4D54069A9FE3CBD6A86AE0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:41:ee:db:e6:17:49:4e:67:b4:8f:e0:d9:a4:
                    02:7d:34:17:83:1f:f5:89:15:06:3e:da:64:8a:21:
                    b7:57:9e:4b:7e:ff:c4:d2:a1:42:2f:ed:85:93:20:
                    2f:91:4e:f6:c3:f8:93:00:ea:89:96:2a:4c:de:08:
                    82:b3:3e:bf:83:07:c4:91:73:1f:82:c3:af:bd:13:
                    6c:c7:ed:88:c8:5c:0d:c0:fe:65:22:cd:b1:ff:b4:
                    8e:bd:59:66:be:06:c7:5a:d8:b6:f5:21:a2:c2:93:
                    f3:b4:79:cb:87:55:7c:16:c5:f5:f3:d1:96:c9:79:
                    2c:2a:84:62:ca:9a:6d:1c:c3:51:ef:16:0d:29:15:
                    e4:10:57:05:a8:ec:40:06:bf:28:6f:f7:48:20:24:
                    1d:8c:62:54:5d:53:2a:2f:45:09:df:a8:38:22:98:
                    b4:bc:d7:de:35:9d:9f:c6:70:48:5a:d6:5d:5f:f3:
                    11:03:90:22:ce:49:09:d6:0b:d3:25:a0:ff:00:69:
                    06:fa:7e:f6:9e:48:52:2d:9c:34:54:1f:14:fd:86:
                    c2:e8:e5:7c:a9:8a:f8:94:52:2c:13:ec:27:f4:20:
                    9d:87:3e:55:05:91:75:80:64:b0:d4:d1:75:9f:00:
                    f2:0e:0c:22:be:7d:6f:18:0f:27:44:17:23:69:e4:
                    6c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:CA:15:E1:25:F2:01:79:4B:4D:54:06:9A:9F:E3:CB:D6:A8:6A:E0
            X509v3 Authority Key Identifier:
                keyid:9D:B0:76:4C:6D:FC:1E:3D:F6:BD:58:0E:A6:99:4A:1E:70:98:F5:2A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/nbB2TG38Hj32vVgOpplKHnCY9So.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/nbB2TG38Hj32vVgOpplKHnCY9So.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20063/5soV4SXyAXlLTVQGmp_jy9aoauA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.128.112.0/21

    Signature Algorithm: sha256WithRSAEncryption
         2c:0b:3f:53:79:d6:be:30:fd:1e:5e:74:0f:4c:05:d2:c0:2c:
         a6:de:b6:18:1a:09:da:c0:ba:ad:b6:7e:1b:99:b6:1c:b7:80:
         e9:6c:ac:22:15:ac:9a:63:d8:db:9d:b4:ba:37:a1:80:4d:ae:
         5a:80:de:a8:a1:a8:6c:bd:a9:92:08:1f:b0:53:0c:e8:f2:51:
         69:d2:18:7b:bc:db:8c:f3:5a:da:b9:ac:2c:c3:f9:04:0d:1a:
         8f:4d:a2:9d:30:9d:5d:65:06:b3:05:d9:f6:b6:ba:13:f5:01:
         e3:a0:45:dd:2d:84:37:d8:b2:cc:0c:38:38:da:fd:df:59:13:
         a8:c5:3f:a0:06:18:20:0b:45:15:3b:12:ac:d2:e9:55:5d:ef:
         df:e6:6c:6c:e9:12:fe:03:50:18:17:41:ee:c0:1a:fb:24:89:
         ad:eb:c1:13:c6:11:0b:de:77:3e:75:1d:d4:7b:68:58:b4:4a:
         ae:da:c2:ae:c6:4d:7b:01:67:64:c6:21:13:d7:ce:e4:a1:8d:
         73:ad:4a:73:3e:a3:19:47:de:ee:d7:78:4e:49:c7:ab:cc:f6:
         43:8a:d8:dc:d0:d5:37:4a:13:81:ca:9f:64:17:db:8e:87:68:
         04:c6:bb:51:10:5c:6d:ce:05:2a:ff:30:e2:a3:44:f3:85:bd:
         7d:74:62:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:04 2024 by rpki-client on console-fra.rpki-client.org