Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/Sjai2KAozJKw4ybB71DnoZOMT9s.roa
File:                     Sjai2KAozJKw4ybB71DnoZOMT9s.roa (raw, json)
Hash identifier:          aVjB1XDmKvTYhLeogsMe1DRj9BNEml2tG5nIVWjxQNQ=
Subject key identifier:   4A:36:A2:D8:A0:28:CC:92:B0:E3:26:C1:EF:50:E7:A1:93:8C:4F:DB
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       1A
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Sjai2KAozJKw4ybB71DnoZOMT9s.roa
Signing time:             Wed 28 Feb 2024 04:59:54 +0000
ROA not before:           Wed 28 Feb 2024 04:59:54 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        203.179.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 04:59:54 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=4A36A2D8A028CC92B0E326C1EF50E7A1938C4FDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:67:5f:5d:77:ad:b9:ec:20:56:3d:a7:1a:a9:
                    cc:aa:92:87:1d:aa:a9:91:94:bb:97:40:fb:4e:b4:
                    df:75:87:ed:61:a0:2b:73:b9:fa:18:e6:b6:d6:83:
                    d8:71:4f:f0:c8:e1:b4:ef:da:ab:9f:d7:8e:1e:20:
                    06:24:6d:e4:a5:70:bc:dd:d9:0d:c3:05:60:0e:98:
                    52:df:9c:5f:13:fd:b9:16:be:95:c7:01:11:c5:58:
                    8d:0a:57:40:0e:36:ea:57:b9:74:8a:dc:96:09:f7:
                    3e:af:ea:94:64:76:8e:be:84:b5:25:f0:96:b5:7a:
                    38:ef:91:d7:59:56:22:93:bf:ac:06:c5:6d:b2:bb:
                    a1:70:a5:48:fc:d4:70:e2:ae:7f:df:12:df:fa:7d:
                    ab:85:6b:cf:ea:22:e9:61:83:f1:83:90:25:ad:a1:
                    9e:22:e5:0b:4a:43:72:59:cc:be:6b:ad:2f:ac:8b:
                    e8:a2:f3:70:0a:c8:d7:e8:86:42:dc:c1:9c:4b:e3:
                    3a:af:65:68:94:b4:cd:3a:4f:43:06:5e:53:d4:e1:
                    e2:68:74:56:ca:a7:14:90:ff:02:8c:36:1d:d9:ca:
                    33:a8:ce:a3:a8:c4:eb:1f:66:6b:b2:fe:f6:ad:d1:
                    2b:33:2d:9e:7c:f4:9a:dc:97:c9:b0:a8:24:1d:e6:
                    aa:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:36:A2:D8:A0:28:CC:92:B0:E3:26:C1:EF:50:E7:A1:93:8C:4F:DB
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/Sjai2KAozJKw4ybB71DnoZOMT9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.179.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7b:b9:0c:00:ae:e2:52:45:fb:06:d4:60:73:b4:50:9a:48:e1:
         8c:b4:e4:20:35:49:0e:de:d1:57:8b:06:25:75:f6:02:0c:24:
         d1:9b:91:b3:a2:f9:4a:88:88:90:47:ab:fb:85:b8:28:3e:13:
         94:51:f6:a1:cf:a3:dd:21:2f:0f:dc:95:a5:eb:a5:a5:42:07:
         bd:1b:ed:ec:c0:1e:0c:aa:42:ed:66:1c:8f:36:2f:04:e5:60:
         83:3d:36:a3:db:7d:0b:b1:5f:e8:18:ac:b0:44:83:2f:53:c4:
         e5:f7:f1:1a:c9:7c:2c:fa:6b:92:93:ac:6a:c6:86:16:f2:0a:
         37:e0:ab:11:6f:2c:26:31:c8:66:0d:58:ab:9a:c4:71:78:88:
         23:d4:13:b3:51:5c:60:16:54:20:1f:9b:34:b2:91:4c:b8:cd:
         6c:39:57:6e:8d:c0:29:90:09:54:45:78:78:5d:c5:19:88:6f:
         36:36:a5:01:af:7d:ee:79:86:14:b7:cf:6e:8b:8d:f5:23:d4:
         36:e6:40:cd:e5:98:f0:a8:ba:46:a1:0f:85:e5:ba:4a:1c:42:
         2b:ea:be:2c:cb:ff:ce:99:5b:bf:a3:93:6a:64:a4:f8:2c:0a:
         75:9e:5c:10:8e:e0:36:c7:b6:0b:bb:65:db:6d:9e:58:05:74:
         29:8c:0f:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:52 2024 by rpki-client on console-fra.rpki-client.org