Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20102/hGZ8IWdf5tZbCXyrnR_vze30uOY.roa
File:                     hGZ8IWdf5tZbCXyrnR_vze30uOY.roa (raw, json)
Hash identifier:          v3Jyp4q8kon4We71FQAj0ef77LQ1YHkH96Iv14qiMP8=
Subject key identifier:   84:66:7C:21:67:5F:E6:D6:5B:09:7C:AB:9D:1F:EF:CD:ED:F4:B8:E6
Certificate issuer:       /CN=130822A9A3D33ABAB61537ADC374286710BA0C77
Certificate serial:       03
Authority key identifier: 13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/hGZ8IWdf5tZbCXyrnR_vze30uOY.roa
Signing time:             Mon 03 Jun 2024 02:46:33 +0000
ROA not before:           Mon 03 Jun 2024 02:46:33 +0000
ROA not after:            Tue 03 Jun 2025 02:41:55 +0000
asID:                     131952
IP address blocks:        144.91.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130822A9A3D33ABAB61537ADC374286710BA0C77
        Validity
            Not Before: Jun  3 02:46:33 2024 GMT
            Not After : Jun  3 02:41:55 2025 GMT
        Subject: CN=84667C21675FE6D65B097CAB9D1FEFCDEDF4B8E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:11:b2:07:81:65:9e:f7:0d:0f:91:0c:93:0b:
                    bd:a9:0b:94:e6:aa:69:99:23:0a:c2:9d:7f:2f:5a:
                    71:d4:b7:e0:87:aa:03:c2:df:d4:15:8d:b1:3d:41:
                    3c:0f:cf:10:b0:2b:92:87:94:e2:84:b9:96:0d:2e:
                    2e:fd:33:fe:af:8e:b9:83:cb:08:f9:8f:5a:a4:3c:
                    3c:72:58:0f:75:e0:83:45:b7:bb:9b:f8:27:33:09:
                    b0:1b:c9:fe:9a:31:cc:92:f8:a1:89:67:68:5f:b4:
                    59:1d:1c:95:d9:f9:51:b9:8f:f9:34:dc:f5:9c:36:
                    eb:dd:f8:d1:49:a2:17:fa:3c:8d:a6:f2:53:81:9d:
                    cb:5b:0f:5f:e5:4a:db:2d:c9:e3:69:f6:e4:35:6a:
                    4d:17:52:46:ab:6a:d5:3d:69:01:9c:49:8a:dc:1a:
                    74:e1:13:e5:6b:e8:c0:bb:6b:41:97:d9:c7:cf:ce:
                    d6:ca:92:81:b6:85:4e:01:75:24:a8:99:db:ce:9c:
                    50:79:05:45:b2:0c:61:37:92:ec:d8:68:64:7c:61:
                    97:6a:60:86:b1:e2:ea:b6:99:80:d3:b4:04:0d:c9:
                    4b:ee:a9:78:e9:8c:20:af:c6:ca:8e:6c:24:e8:a8:
                    cc:20:57:7d:fb:cc:36:6e:a7:e2:bb:aa:30:16:30:
                    b4:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:66:7C:21:67:5F:E6:D6:5B:09:7C:AB:9D:1F:EF:CD:ED:F4:B8:E6
            X509v3 Authority Key Identifier:
                keyid:13:08:22:A9:A3:D3:3A:BA:B6:15:37:AD:C3:74:28:67:10:BA:0C:77

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/EwgiqaPTOrq2FTetw3QoZxC6DHc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EwgiqaPTOrq2FTetw3QoZxC6DHc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20102/hGZ8IWdf5tZbCXyrnR_vze30uOY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.91.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         56:da:44:25:23:15:29:68:19:52:87:68:83:58:fb:3f:9d:ba:
         ad:05:e6:0d:75:9f:78:74:bb:4a:18:95:f2:df:2e:96:2d:2a:
         cd:c5:4f:ce:7b:42:f6:bb:b8:a2:2b:4b:55:d9:18:e4:bc:41:
         28:1b:41:76:76:6c:af:a6:9d:0b:56:99:17:b6:fb:b4:79:a4:
         13:e5:ce:0a:f0:ac:d9:3a:e8:72:8e:58:bb:18:6f:e2:5b:ab:
         c8:32:05:b8:d0:96:65:09:6e:03:55:06:20:36:ba:ef:6f:1d:
         16:91:99:05:fe:53:f1:51:23:69:a9:63:76:14:c9:a4:84:2d:
         6f:17:4e:f2:cc:02:65:28:b1:de:cc:c1:50:56:17:72:37:e0:
         69:8b:81:ce:be:4c:43:76:46:07:41:c1:b6:84:5b:f1:0d:73:
         c0:6d:e7:3e:f2:85:b2:f5:b7:5a:04:0c:c1:47:83:1b:c2:47:
         0f:a1:07:4b:43:51:b0:44:0c:61:51:ba:c4:61:5a:24:62:1a:
         e3:16:89:68:a7:68:d6:88:ef:bc:6a:7d:fb:30:7b:aa:fb:eb:
         43:cc:e5:73:61:ec:1d:62:22:b9:ec:f7:bd:fe:5f:c5:48:89:
         1e:9a:6e:28:6b:2f:0c:3a:d9:31:80:8a:64:b7:7a:f0:5e:64:
         17:b0:2b:b8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org