Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/4glfbHQ-lpNdp3NvGC5sJJz4O9U.roa
File:                     4glfbHQ-lpNdp3NvGC5sJJz4O9U.roa (raw, json)
Hash identifier:          shTVB82V6dPclxPehcctE6e98apxO+A1HlWy+4b7i94=
Subject key identifier:   E2:09:5F:6C:74:3E:96:93:5D:A7:73:6F:18:2E:6C:24:9C:F8:3B:D5
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       3C
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/4glfbHQ-lpNdp3NvGC5sJJz4O9U.roa
Signing time:             Wed 28 Aug 2024 05:22:23 +0000
ROA not before:           Wed 28 Aug 2024 05:22:23 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        14.102.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Aug 28 05:22:23 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E2095F6C743E96935DA7736F182E6C249CF83BD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:ef:c2:db:8c:1b:5c:28:f8:b8:b4:2f:fc:a8:
                    18:bb:66:0c:72:c8:f0:da:79:c6:06:99:4b:af:2f:
                    8e:e2:bc:7b:fe:ad:7e:32:a4:15:4a:a5:0a:84:4f:
                    bb:62:95:16:3a:60:14:ac:7b:bf:d7:4f:ae:6d:c8:
                    ac:84:a8:43:44:17:ff:6d:11:9e:a4:53:24:a6:df:
                    c2:e4:28:11:cb:40:9a:49:23:f1:41:50:97:56:58:
                    d2:db:66:8e:04:30:3a:ba:51:af:7a:75:23:9f:db:
                    32:56:87:d7:7b:fb:87:b4:ad:92:e0:63:b0:eb:aa:
                    b3:d1:d0:22:f2:0d:f8:ac:03:51:c9:bc:59:51:30:
                    5f:82:f2:80:02:d8:00:05:44:f7:c6:94:39:ce:d2:
                    f0:c9:cd:ea:66:78:fc:ad:f7:0a:6f:72:03:de:e9:
                    e4:c2:18:9c:78:1a:1a:59:64:47:30:2e:e9:44:d8:
                    7c:c1:10:b4:7d:fa:0b:ef:e6:d6:70:f6:6d:a1:08:
                    dd:51:df:23:8c:b6:f8:7f:c2:8a:e3:61:f9:55:8a:
                    df:3a:91:69:74:e1:a2:60:d7:f1:cf:90:e7:dc:56:
                    51:96:a3:9e:df:4f:4a:0f:cb:ff:73:7d:f7:0e:21:
                    51:31:53:8b:f6:cb:2b:ee:b1:e6:c5:a4:5c:12:84:
                    13:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:09:5F:6C:74:3E:96:93:5D:A7:73:6F:18:2E:6C:24:9C:F8:3B:D5
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/4glfbHQ-lpNdp3NvGC5sJJz4O9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  14.102.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:ee:97:63:20:b4:3d:d0:6d:88:e5:bc:ff:1e:fd:e1:85:2e:
         9f:54:1d:b3:c2:2e:7a:5d:50:bc:36:55:85:a9:21:d7:21:e5:
         fa:5a:7b:01:13:00:00:ab:75:61:ab:7d:aa:a1:e7:19:6b:5d:
         08:0a:27:f2:73:02:78:f9:02:44:96:46:30:7c:1b:81:fd:f4:
         95:76:4f:e4:0c:2d:c7:ef:70:1f:4e:7a:f1:c9:48:c6:ea:56:
         be:8c:a6:71:a9:1c:67:d7:cc:21:96:5d:99:5a:d3:60:94:c7:
         f5:f3:e9:db:90:f5:95:a8:fe:38:53:7f:4b:08:a3:37:4c:d2:
         eb:a7:25:37:0d:95:15:09:b6:ce:fa:16:76:06:25:9b:3f:44:
         21:9e:e9:36:6d:e1:2b:bd:93:d8:d0:17:7f:d7:e0:5b:42:e7:
         d0:98:69:cc:35:f4:cf:95:e1:25:39:94:45:8b:bd:f6:b5:4a:
         74:37:49:7c:31:dc:54:cb:2a:4d:ba:84:b3:dc:8a:95:4a:7a:
         23:a7:ed:57:2e:10:db:e6:94:51:c6:28:62:f1:3f:41:46:3c:
         2c:a4:e1:e5:44:41:f9:79:92:6f:87:c6:b2:32:ab:0a:bd:67:
         39:0e:1f:d1:0a:8d:b2:8b:1f:30:ae:f6:95:01:98:23:6c:7d:
         1b:c6:07:8a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:17 2024 by rpki-client on console-fra.rpki-client.org