Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/4sctI8EzmFMEOQ21ZtvDJCpWmhQ.roa
File:                     4sctI8EzmFMEOQ21ZtvDJCpWmhQ.roa (raw, json)
Hash identifier:          a8f1zgHFRC9qbIYHzLbBrjwnzhg+LgV99CsCkderSMc=
Subject key identifier:   E2:C7:2D:23:C1:33:98:53:04:39:0D:B5:66:DB:C3:24:2A:56:9A:14
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       15
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4sctI8EzmFMEOQ21ZtvDJCpWmhQ.roa
Signing time:             Wed 28 Feb 2024 04:56:01 +0000
ROA not before:           Wed 28 Feb 2024 04:56:01 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        175.28.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:56:01 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E2C72D23C133985304390DB566DBC3242A569A14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:25:8c:c4:51:5a:fb:96:ee:2a:76:e7:7c:ca:
                    f5:e7:2f:83:fc:e3:d3:ea:3d:05:23:45:06:a5:2d:
                    5c:00:ec:70:51:e4:d8:a6:06:db:81:3b:df:de:4d:
                    8a:77:9d:23:f3:30:9a:5e:be:bf:77:13:79:88:a4:
                    64:1c:ff:f4:44:7f:b8:e4:86:66:e9:ab:1d:d5:72:
                    b0:00:b3:87:e3:f9:86:9d:5f:74:bf:d2:f7:bf:55:
                    7a:8c:ff:09:62:74:e5:0a:d4:35:20:58:2b:ce:c1:
                    1b:07:e2:87:f0:cd:df:eb:fe:04:2b:a2:35:c3:0f:
                    5b:e3:bb:de:13:80:d9:71:be:45:72:bb:7b:8d:0f:
                    28:65:4f:fe:37:7a:63:f5:c0:93:9a:77:18:47:cf:
                    17:16:29:3e:24:32:74:c6:b0:fe:1f:9f:33:50:dd:
                    c2:59:04:ff:80:34:c3:23:d4:1a:df:c1:a4:50:f1:
                    7c:13:11:26:7f:7a:1c:b3:90:6a:ce:66:e2:ae:88:
                    cf:06:b3:3f:35:ed:34:b8:d4:dc:a0:6e:5d:a2:83:
                    2e:03:97:b4:90:cb:5e:1f:1f:2a:36:90:46:7d:18:
                    5a:04:9d:f9:f9:ae:8c:25:52:90:74:f4:4c:9f:45:
                    0c:9b:4f:9a:d5:a6:64:f3:0c:ba:74:34:c7:b2:20:
                    d2:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:C7:2D:23:C1:33:98:53:04:39:0D:B5:66:DB:C3:24:2A:56:9A:14
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/4sctI8EzmFMEOQ21ZtvDJCpWmhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         89:fc:75:46:9d:d7:66:84:9c:9d:dd:48:b3:4c:73:4e:c8:36:
         04:cb:59:0b:90:92:54:ad:a6:1b:73:17:12:cc:a5:0d:e7:e0:
         6b:81:de:24:9f:a5:6e:33:38:24:f3:ef:8c:28:fa:b8:87:5c:
         f1:b9:6c:78:7c:08:c8:a9:51:cb:5a:63:58:3d:f2:14:39:df:
         d2:66:8b:16:b5:f8:e9:8d:b5:74:e3:00:35:13:ef:f6:81:eb:
         95:0b:dd:58:60:cd:5f:43:c3:0f:b8:5f:94:e1:c4:00:45:88:
         7c:1b:f5:65:e9:6b:17:bd:f1:8f:04:bc:3f:7b:2a:c7:90:80:
         e6:87:cc:3d:52:49:99:15:66:54:94:36:52:64:ca:f9:06:1d:
         d5:05:95:c0:b5:3d:7b:05:92:fe:43:8d:22:27:9e:f6:4e:fa:
         04:2c:bc:58:ff:21:df:d6:39:1e:d1:11:c7:95:6f:b0:fa:b5:
         17:18:b2:45:d0:8e:88:53:d3:93:11:82:07:ec:9e:fe:0c:c5:
         ef:32:8d:ff:c4:0a:27:cc:34:a9:2f:0c:60:15:cf:72:ac:39:
         d5:8a:73:60:47:25:f4:16:a3:c1:19:8b:c5:39:44:c5:7e:f7:
         0a:5d:71:eb:05:77:c7:36:bf:27:8e:1b:02:d1:53:f5:78:0e:
         f6:56:d3:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org