Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20095/sV6WpENkf8IrmFdiBforWuYwfGo.roa
File:                     sV6WpENkf8IrmFdiBforWuYwfGo.roa (raw, json)
Hash identifier:          m7LvWXnR1TMlwszzLcAap/JgVgFzAKRWIgkhjlhb51c=
Subject key identifier:   B1:5E:96:A4:43:64:7F:C2:2B:98:57:62:05:FA:2B:5A:E6:30:7C:6A
Certificate issuer:       /CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
Certificate serial:       05
Authority key identifier: 29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/sV6WpENkf8IrmFdiBforWuYwfGo.roa
Signing time:             Wed 12 Jun 2024 11:14:03 +0000
ROA not before:           Wed 12 Jun 2024 11:14:03 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     63779
IP address blocks:        202.208.80.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=29FE1E79542EB2CEFA4E283BFCAF18A398BC7611
        Validity
            Not Before: Jun 12 11:14:03 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B15E96A443647FC22B98576205FA2B5AE6307C6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:f2:36:3a:be:aa:87:78:91:8f:75:be:26:2d:
                    79:6f:81:1b:ab:c9:7d:23:f3:a6:5e:27:01:7c:73:
                    e9:24:64:ca:78:83:78:e0:4b:7b:85:37:46:89:40:
                    9f:6f:04:b2:c2:92:de:ac:d3:50:2a:94:09:26:e6:
                    a7:0b:d5:20:f7:45:1b:11:cc:92:b7:0e:6a:b4:19:
                    52:9f:34:2e:8a:14:2f:7f:cb:04:f3:1b:e9:3a:0d:
                    c4:e2:39:81:61:d2:ca:17:bc:1f:7f:de:40:47:02:
                    5a:47:bd:5c:04:1f:f2:b6:da:31:72:e8:d3:11:ce:
                    34:df:e3:85:a4:66:53:7f:5e:ca:5b:a3:81:65:67:
                    f9:f1:3c:c6:fa:fc:d8:37:7b:be:ef:8e:d8:e9:b8:
                    1f:3e:d0:be:f7:c8:43:a8:93:28:91:fc:3a:8f:d9:
                    b2:85:6f:be:5e:a6:c9:fd:d5:e3:e6:30:31:bc:fe:
                    79:5a:57:22:f6:a3:46:6a:33:eb:18:44:b8:ff:03:
                    9a:fe:62:2e:73:2f:ef:dc:78:e4:ae:51:81:ca:5e:
                    06:c3:ca:55:dd:b0:17:25:15:34:b2:57:5a:6f:88:
                    ad:55:11:98:36:4a:51:8d:b2:7c:86:05:29:70:a0:
                    d4:a0:fc:66:87:78:56:af:9f:74:9a:ec:e7:6a:81:
                    3a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:5E:96:A4:43:64:7F:C2:2B:98:57:62:05:FA:2B:5A:E6:30:7C:6A
            X509v3 Authority Key Identifier:
                keyid:29:FE:1E:79:54:2E:B2:CE:FA:4E:28:3B:FC:AF:18:A3:98:BC:76:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/Kf4eeVQuss76Tig7_K8Yo5i8dhE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Kf4eeVQuss76Tig7_K8Yo5i8dhE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20095/sV6WpENkf8IrmFdiBforWuYwfGo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9a:6a:4e:2d:22:b0:05:32:2c:33:d9:29:e6:f8:38:9f:d7:20:
         3b:9f:cc:4f:3d:9b:89:67:b5:35:87:2e:89:7f:0d:d0:a2:98:
         27:fe:97:26:56:a2:2b:64:ef:6c:69:38:4b:af:ce:b1:6e:be:
         aa:6f:48:1f:ee:a3:b1:a9:55:4b:09:b3:c9:aa:86:9e:e6:4b:
         e9:2b:27:af:ad:51:7e:77:ab:28:6e:50:76:85:45:f2:3e:bc:
         88:7e:a7:43:f9:30:c4:b9:e2:a5:c8:76:02:8c:9d:8a:70:d9:
         63:70:5a:6f:43:6c:73:5f:00:72:f2:ac:92:9f:27:29:70:af:
         ae:42:c6:13:37:20:01:28:07:b7:d6:19:a4:a1:e9:82:0f:79:
         2d:ae:6d:c4:a4:04:1d:9c:3d:0c:30:4c:83:d2:a0:d7:6e:05:
         38:2f:ee:42:22:fa:01:cc:9f:9b:b4:19:d3:cf:37:88:66:23:
         04:83:2e:05:4d:84:eb:80:1e:46:71:a3:6f:c0:6c:b2:ff:48:
         b6:e5:50:1d:e7:a2:10:32:b5:d8:46:00:c1:af:1f:f3:d7:df:
         73:e9:90:27:aa:b0:a3:14:75:c9:b9:0a:5c:97:96:8a:b7:a6:
         11:32:b7:56:25:ab:5c:af:4f:3a:e0:7c:91:44:82:86:18:e0:
         91:ee:1e:01
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org