Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/PEcnehhywl61Ml60zFCkcBKbHU4.roa
File:                     PEcnehhywl61Ml60zFCkcBKbHU4.roa (raw, json)
Hash identifier:          bNkvgqkkMxEddP3glfvIfTXuqxUO4LEzmi8ssCLEmBA=
Subject key identifier:   3C:47:27:7A:18:72:C2:5E:B5:32:5E:B4:CC:50:A4:70:12:9B:1D:4E
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       8F
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/PEcnehhywl61Ml60zFCkcBKbHU4.roa
Signing time:             Tue 30 Apr 2024 01:31:12 +0000
ROA not before:           Tue 30 Apr 2024 01:31:12 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9351
IP address blocks:        182.22.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 143 (0x8f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Apr 30 01:31:12 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=3C47277A1872C25EB5325EB4CC50A470129B1D4E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:e4:c3:41:1e:4c:49:0b:ca:b2:e5:2f:75:28:
                    b0:0e:6b:bd:5b:56:b9:eb:48:ab:83:3b:f3:8e:71:
                    bb:4b:59:0e:69:9b:49:ae:4b:a6:8b:13:e0:58:70:
                    04:a0:53:78:97:65:df:a3:97:e7:df:8a:7c:ea:17:
                    21:42:05:84:a1:05:25:7e:ad:5c:ff:3d:b9:dd:27:
                    63:f6:4b:99:48:ae:09:3c:9d:11:5c:79:64:6b:24:
                    55:94:01:60:44:6e:9b:93:67:2c:2b:8c:ce:5c:a4:
                    73:c2:c0:b3:40:d9:da:ab:e5:85:de:65:f0:c3:5b:
                    ca:d6:c1:29:ca:71:e2:cf:c7:b7:94:ab:70:d4:13:
                    6b:77:ca:63:bc:09:5a:d4:d4:68:0e:95:8a:6f:00:
                    17:2f:6c:a8:37:03:0a:93:17:85:d5:4e:2d:4e:7f:
                    8c:b7:ec:32:2a:21:b1:47:37:46:9d:59:c9:f2:65:
                    d8:86:7b:b8:d9:f3:bf:ae:05:3b:f2:98:5d:ce:26:
                    93:18:bb:bd:5c:73:4f:e6:43:b4:8e:0a:94:c8:6f:
                    9e:37:5d:d7:b8:3b:8e:a3:bb:e9:8d:11:0c:ed:e8:
                    85:7a:bd:7a:a8:0d:41:cb:75:1d:f3:0c:ca:d2:da:
                    a7:10:7f:77:5e:99:14:88:40:f8:c6:b4:2f:bc:01:
                    93:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:47:27:7A:18:72:C2:5E:B5:32:5E:B4:CC:50:A4:70:12:9B:1D:4E
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/PEcnehhywl61Ml60zFCkcBKbHU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.22.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9d:b2:04:45:fc:03:8a:97:b9:b2:92:d2:6f:6e:65:05:95:39:
         3d:18:41:78:a9:6a:57:49:5a:39:e7:f0:8a:78:43:fb:2a:f1:
         c8:ac:7d:63:06:04:66:0a:26:2e:31:50:0d:11:b9:5f:af:67:
         61:b8:9d:d3:b2:63:8c:27:20:70:4a:8c:1f:cc:70:cb:0b:88:
         5c:67:d5:62:1a:ae:08:0f:66:c2:ef:00:17:e8:b1:10:9c:c5:
         71:a9:4c:0f:27:fd:0c:bb:4a:41:fe:0e:44:3b:dd:cb:12:3d:
         49:97:f5:eb:04:cc:a3:19:c4:77:75:70:79:1e:21:40:42:63:
         f9:72:a5:52:10:27:8d:fe:08:2c:4d:d2:d9:f9:21:f1:3d:36:
         df:be:39:c2:33:ec:33:64:ed:86:0e:11:4e:a4:2b:d5:15:8f:
         6d:1e:35:90:e8:87:75:e1:a4:61:2f:94:dd:cd:3b:6a:fc:c8:
         ed:fa:9d:06:cb:1e:84:0e:34:34:92:6b:26:31:8c:06:fc:aa:
         a9:7b:83:84:0d:5e:cd:41:ea:bb:9b:bd:9d:97:64:b4:db:55:
         97:14:5e:68:8b:56:7f:91:f1:f9:1c:7b:1b:f1:fd:f1:bf:bc:
         22:38:0a:36:fe:2c:5c:32:2a:8d:57:2c:b4:b9:24:a4:b4:aa:
         e6:d8:ff:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org