Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21042/J4KFf1uql-A_ZR8IjygN--s-FGY.roa
File:                     J4KFf1uql-A_ZR8IjygN--s-FGY.roa (raw, json)
Hash identifier:          7Z90eLWwOQccei3NBmi0mKfb+dZDp+JxLhIUQQO1Bw0=
Subject key identifier:   27:82:85:7F:5B:AA:97:E0:3F:65:1F:08:8F:28:0D:FB:EB:3E:14:66
Certificate issuer:       /CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
Certificate serial:       34
Authority key identifier: 4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/J4KFf1uql-A_ZR8IjygN--s-FGY.roa
Signing time:             Fri 19 Apr 2024 01:22:19 +0000
ROA not before:           Fri 19 Apr 2024 01:22:19 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        112.140.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 11 May 2024 04:06:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4F3E6396C9D76CBDF4ED2D5DE7A2A760214C9837
        Validity
            Not Before: Apr 19 01:22:19 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=2782857F5BAA97E03F651F088F280DFBEB3E1466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4c:01:8c:ef:b0:2d:e7:b2:39:a5:28:2f:a8:
                    5b:4f:fc:1c:b9:c4:35:7f:57:01:45:98:5e:bd:f0:
                    89:9b:3a:3a:46:c4:f4:45:87:1b:48:95:dd:ac:ac:
                    73:e7:9f:0a:25:f7:a6:3a:e0:83:c3:dc:fb:ab:ac:
                    86:44:e0:35:b0:1e:cd:26:71:85:51:12:3a:84:58:
                    48:c8:ce:02:b1:2b:50:1e:2d:39:5d:87:c7:16:9b:
                    37:b7:4f:5c:13:9c:59:64:2c:0c:f3:07:db:e6:bf:
                    17:e8:92:b1:4f:f4:77:f0:5b:5f:86:99:4e:e3:35:
                    1e:4f:bc:17:49:9f:f2:0a:75:40:22:b4:70:69:2e:
                    e0:19:5b:fe:0e:0e:3d:fe:12:e6:6c:d1:14:2d:7b:
                    a2:f2:a1:44:78:30:93:e3:d2:5a:b4:0b:25:54:9c:
                    80:f7:1a:e1:ee:64:75:09:03:f9:73:36:5b:1e:9b:
                    ba:67:dc:70:37:73:eb:d7:6b:63:bb:81:90:05:d1:
                    a7:b6:f5:ee:b0:d3:11:36:fe:f8:f8:19:4b:c3:c5:
                    7d:7b:b1:d7:da:ad:5d:94:7e:ee:8e:0f:5d:1c:cc:
                    bd:00:3f:1d:b1:a9:8a:c3:e9:a7:79:2f:33:64:85:
                    11:3c:32:f7:0a:f4:16:6e:d6:d0:93:2e:07:53:ae:
                    6d:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:82:85:7F:5B:AA:97:E0:3F:65:1F:08:8F:28:0D:FB:EB:3E:14:66
            X509v3 Authority Key Identifier:
                keyid:4F:3E:63:96:C9:D7:6C:BD:F4:ED:2D:5D:E7:A2:A7:60:21:4C:98:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/Tz5jlsnXbL307S1d56KnYCFMmDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tz5jlsnXbL307S1d56KnYCFMmDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21042/J4KFf1uql-A_ZR8IjygN--s-FGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  112.140.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         51:1c:f1:44:e9:61:3e:b1:ad:5f:b1:3b:cd:b3:82:5f:a6:55:
         10:c1:5a:52:40:16:bd:37:9a:5e:86:21:5d:fa:47:26:ff:d9:
         be:1b:a7:aa:0f:82:8a:6a:c3:af:e4:c4:1b:d7:fa:93:f0:8d:
         4a:88:03:14:af:4f:12:93:15:69:15:0a:cb:03:fc:ed:03:00:
         98:45:74:23:c4:cc:73:a7:f9:64:7e:23:5b:59:06:b5:9b:fa:
         fc:a5:98:a7:b3:73:6e:74:a8:6a:dd:2a:1f:79:eb:6b:01:4e:
         61:70:9f:fb:04:7b:fe:83:01:83:53:a9:a4:b1:11:2c:97:cc:
         ae:87:5a:f7:9b:11:d6:e1:03:3b:6e:53:12:03:17:50:a1:63:
         dc:0b:f2:17:9a:ba:d8:98:2e:d8:f2:9f:f3:03:90:a4:f5:af:
         80:6e:25:d8:e8:08:93:c0:6a:bc:f2:ef:46:ba:58:c1:eb:2a:
         71:b9:e9:23:0a:74:7b:38:ab:6b:b4:7e:05:ed:5c:70:90:35:
         d3:6b:69:8f:48:67:ce:f6:6e:5c:27:23:ad:7e:af:71:b1:dd:
         fe:7d:3b:bf:99:cf:05:ac:13:67:21:ad:7d:bc:ac:ed:7c:80:
         a6:80:d8:09:5b:1f:e6:25:78:a5:ea:e2:08:1d:2d:93:3a:e0:
         c3:d5:b5:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun May 5 08:20:16 2024 by rpki-client on console-ams.rpki-client.org