Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/233/PJgJRdA3YN5AFSPYqpQB9L1MdCs.roa
File:                     PJgJRdA3YN5AFSPYqpQB9L1MdCs.roa (raw, json)
Hash identifier:          1wKDmNGsnCUjQjgmPtolMJSttIbyOdiD1Y1nMDhSXHU=
Subject key identifier:   3C:98:09:45:D0:37:60:DE:40:15:23:D8:AA:94:01:F4:BD:4C:74:2B
Certificate issuer:       /CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
Certificate serial:       3E
Authority key identifier: D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/PJgJRdA3YN5AFSPYqpQB9L1MdCs.roa
Signing time:             Sat 31 Aug 2024 01:30:15 +0000
ROA not before:           Sat 31 Aug 2024 01:30:15 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     7670
IP address blocks:        61.125.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D788678E64D29184C23DAAADB594BFD9BAE2405C
        Validity
            Not Before: Aug 31 01:30:15 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3C980945D03760DE401523D8AA9401F4BD4C742B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:32:ed:38:57:c0:4c:f3:b7:f0:27:73:df:35:
                    46:7c:13:e4:b1:95:53:e8:9f:fd:e7:68:49:d5:74:
                    e9:c1:9f:e4:a0:b1:26:20:fc:c3:32:9f:8a:79:db:
                    b1:79:69:cc:78:a8:d2:30:c3:af:8b:a5:02:ce:86:
                    66:65:48:34:3d:1d:69:6e:04:11:79:99:e6:50:28:
                    f6:a0:30:be:10:71:ae:af:00:7c:a7:a0:3b:90:61:
                    e8:81:a2:49:cc:c1:d2:ea:af:ec:a7:dc:27:a0:05:
                    20:e5:d4:0a:23:66:58:fe:53:a4:39:ed:3e:f3:49:
                    9b:35:92:6b:ee:8a:c7:9c:8f:e6:bc:d3:00:66:2a:
                    4e:78:0e:c1:3b:af:c8:6c:1e:e1:a4:73:f8:91:8f:
                    12:3b:d8:04:5e:39:9d:df:1c:ac:ae:db:99:a3:10:
                    43:a1:a4:a7:23:82:fc:3d:69:38:94:92:c7:07:64:
                    93:9d:f3:e1:77:55:a9:40:9a:4a:1b:82:85:d5:ab:
                    34:d4:98:a7:a7:e7:ce:e3:6a:8e:ba:c9:5f:f5:e1:
                    08:7a:b5:fc:23:80:02:02:54:d4:4a:44:67:d6:9f:
                    d0:c0:83:d1:3b:ad:26:58:05:af:78:95:5c:ad:f8:
                    ac:65:90:a3:28:52:82:3d:ac:55:b9:1e:8e:fe:46:
                    37:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:98:09:45:D0:37:60:DE:40:15:23:D8:AA:94:01:F4:BD:4C:74:2B
            X509v3 Authority Key Identifier:
                keyid:D7:88:67:8E:64:D2:91:84:C2:3D:AA:AD:B5:94:BF:D9:BA:E2:40:5C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/14hnjmTSkYTCPaqttZS_2briQFw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/14hnjmTSkYTCPaqttZS_2briQFw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/233/PJgJRdA3YN5AFSPYqpQB9L1MdCs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.125.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         3d:44:c3:44:09:e5:d9:56:ce:1e:cc:5f:47:42:69:34:b9:a6:
         35:3b:90:71:5b:a3:60:47:0d:ee:b5:26:67:54:97:4e:2e:f1:
         05:8d:c9:c8:e4:e2:0b:8f:7a:99:5c:34:c0:77:98:5e:d9:12:
         11:37:40:36:05:e0:b4:92:30:93:3f:54:7c:d8:3d:d7:09:61:
         65:35:d6:ec:c0:df:2b:42:c6:3c:93:76:87:7e:b6:02:27:a3:
         23:14:4e:35:87:ee:74:5b:98:70:03:79:77:c5:db:bf:b9:b3:
         b1:a1:94:06:4d:78:06:5a:95:14:20:ef:53:28:a1:c6:b5:a2:
         b5:87:de:70:67:a3:fe:c3:da:42:51:09:9c:fa:31:5c:c2:d6:
         b5:fc:57:d2:5c:2d:56:1a:99:c2:4c:a4:a0:48:96:1a:8e:2c:
         59:d6:96:28:45:a1:70:5e:9f:95:60:9d:dd:71:ff:ec:62:64:
         95:0f:48:af:01:34:bb:3f:0f:91:dc:d8:39:14:2d:51:4e:05:
         4a:ab:4a:14:ee:80:cf:be:27:b3:24:14:4e:c0:ab:0e:cd:7b:
         4a:ba:c8:8d:a5:f7:64:aa:94:06:20:3a:6c:35:e5:82:11:e0:
         e7:07:5c:30:0d:93:50:4b:4b:db:b8:77:59:a6:66:7e:df:db:
         a0:48:2a:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:11 2024 by rpki-client on console-fra.rpki-client.org