Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Gl1RQpPFkkrAfNHuPsTRmcNGIXM.roa
File:                     Gl1RQpPFkkrAfNHuPsTRmcNGIXM.roa (raw, json)
Hash identifier:          7MoLp5TahbeY3du8xFCz8vVRUp/VlBlfslfiDoy+rj4=
Subject key identifier:   1A:5D:51:42:93:C5:92:4A:C0:7C:D1:EE:3E:C4:D1:99:C3:46:21:73
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       11
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Gl1RQpPFkkrAfNHuPsTRmcNGIXM.roa
Signing time:             Wed 28 Feb 2024 04:51:57 +0000
ROA not before:           Wed 28 Feb 2024 04:51:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        124.150.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:51:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=1A5D514293C5924AC07CD1EE3EC4D199C3462173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:92:6a:97:b5:60:9d:91:1f:c9:3e:00:1f:8d:
                    3b:d0:dd:91:22:51:c0:8d:92:fa:95:06:6a:42:78:
                    7e:06:b6:ef:7d:07:5f:97:27:f7:5c:86:22:58:53:
                    9e:2a:d4:1f:f8:1c:33:a4:a6:48:7b:b1:cc:ab:18:
                    ca:d8:b3:47:f7:c9:92:5e:4a:4a:9b:bb:ea:39:da:
                    98:22:b4:98:c4:3d:1a:b2:c9:e4:9d:3d:2e:cf:8f:
                    d2:a3:72:84:bc:fe:d2:0f:af:86:d1:6a:df:d7:c7:
                    90:9a:16:cb:c3:a2:88:7f:d1:a5:64:b1:aa:fa:54:
                    f8:0e:ee:79:4b:cb:c3:f1:86:fe:23:20:97:42:48:
                    57:a3:5c:c0:4f:3b:d7:d0:1a:f9:00:9b:15:5d:ca:
                    63:79:6b:24:67:2f:87:94:dc:d4:a7:ca:ed:f8:c9:
                    d8:65:19:b2:6f:16:63:a1:7f:c7:d2:10:73:c3:22:
                    8b:fe:9a:ba:65:41:8b:de:f7:36:ea:5b:41:92:65:
                    5b:07:47:0f:e7:c2:d0:c0:b8:4c:d8:fa:3e:c2:84:
                    44:bf:d9:6f:36:03:7a:d9:ef:05:ac:9a:89:4d:e2:
                    2f:f5:5f:22:5c:ff:e3:af:9b:9e:ca:89:49:10:a5:
                    c9:88:e8:ee:0c:4f:f6:0e:8c:35:67:02:27:f1:20:
                    d9:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:5D:51:42:93:C5:92:4A:C0:7C:D1:EE:3E:C4:D1:99:C3:46:21:73
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Gl1RQpPFkkrAfNHuPsTRmcNGIXM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.150.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         57:a1:35:28:66:a7:f7:80:ab:89:84:25:ab:5a:53:00:02:90:
         b0:ef:69:cd:58:5f:01:59:b1:28:9b:bd:1f:3a:37:57:fb:b8:
         37:8a:c5:89:da:00:ba:15:e2:7c:52:e0:e0:fa:5f:ce:09:4d:
         de:eb:ae:92:9b:4f:4d:dd:56:f9:eb:fb:cd:d2:84:4d:47:c4:
         01:e0:f9:80:cf:a7:03:4b:0b:b3:8b:bb:20:92:da:23:0f:b9:
         aa:ee:51:f7:03:2b:38:91:48:f6:dc:d9:c2:d6:43:8d:17:41:
         3e:a2:19:2e:e3:24:58:df:16:18:64:14:4e:d6:04:fc:b3:b0:
         b0:05:ed:bd:fb:ce:c0:5d:27:df:3e:c5:4b:e8:1c:a4:3a:f5:
         da:38:5a:81:3b:63:c0:06:2e:f9:9c:1f:66:c9:3b:4f:75:d5:
         e9:06:ee:c3:55:41:6b:2c:d0:66:fd:0d:40:24:07:0f:be:f6:
         71:a6:04:c8:39:4f:e0:9e:b2:39:d0:4a:93:6d:f7:f2:fa:49:
         7c:38:9d:9d:c5:44:77:4c:d0:ba:fc:9a:89:f3:e0:a5:54:63:
         c3:cb:1a:f1:a1:7c:d9:30:d4:dc:0c:8b:e5:f0:b6:78:98:44:
         d9:20:8e:a0:e9:7d:51:a5:d5:4f:2e:85:cd:e1:9b:9b:d8:21:
         24:e7:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:12 2024 by rpki-client on console-fra.rpki-client.org