Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/VuZmSY1dSZFd0vVWLFsDHlIkwKg.roa
File:                     VuZmSY1dSZFd0vVWLFsDHlIkwKg.roa (raw, json)
Hash identifier:          kGVJRcO0zPEoVZ3dtxR9b9zapQRB/YZXJkpPxJbHeeU=
Subject key identifier:   56:E6:66:49:8D:5D:49:91:5D:D2:F5:56:2C:5B:03:1E:52:24:C0:A8
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       23
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/VuZmSY1dSZFd0vVWLFsDHlIkwKg.roa
Signing time:             Wed 28 Feb 2024 05:03:57 +0000
ROA not before:           Wed 28 Feb 2024 05:03:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        218.219.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 05:03:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=56E666498D5D49915DD2F5562C5B031E5224C0A8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:72:68:b0:82:89:68:24:8a:9a:35:fe:7b:49:
                    c1:5d:78:7d:8f:4a:76:88:78:4a:76:32:f2:82:57:
                    c5:db:b9:a0:b6:93:2a:fa:d8:a2:79:ab:0d:06:a9:
                    fb:53:87:70:ef:5f:27:bb:33:13:d5:de:f0:67:7e:
                    4a:04:76:41:a7:e2:fe:d3:b9:2c:da:2d:eb:db:32:
                    4e:07:57:f7:2e:25:14:fe:c5:2b:a1:52:86:ae:e7:
                    9d:d2:6e:6a:3f:67:c3:0a:4d:26:d9:9a:8e:4a:77:
                    a8:b9:ee:73:34:0c:54:39:16:f4:67:fa:ad:9f:1d:
                    09:22:ea:81:ab:7a:9b:50:8c:81:4b:f3:5f:f1:d6:
                    ac:11:ab:d6:57:2e:65:b2:b6:23:2b:81:41:47:08:
                    fa:fd:62:cf:bf:42:d8:5e:1c:e3:c4:89:7f:85:c4:
                    84:31:49:33:a2:bc:66:49:71:ad:30:a8:15:c1:e4:
                    2e:30:aa:62:06:d3:b0:0d:c0:34:19:3d:90:c6:ab:
                    1c:84:fb:94:a6:a6:00:d8:65:9a:35:36:5c:b1:bb:
                    2c:c1:41:3f:16:14:bc:bc:31:65:3d:91:8b:27:a8:
                    82:cc:66:dc:0f:fa:04:75:f4:18:a3:72:32:05:35:
                    25:56:d5:43:4b:54:ae:66:aa:f9:2d:de:40:4c:88:
                    53:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:E6:66:49:8D:5D:49:91:5D:D2:F5:56:2C:5B:03:1E:52:24:C0:A8
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/VuZmSY1dSZFd0vVWLFsDHlIkwKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.219.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a5:6f:53:51:22:14:49:a6:2c:1c:f9:93:31:95:9d:9d:61:14:
         9e:8b:82:8e:25:ef:32:b8:fc:f8:e5:0a:cd:d5:88:b2:76:f6:
         3c:91:c4:e0:e0:ab:6c:a0:5b:eb:a6:b7:3d:91:5f:8d:53:dc:
         15:19:82:71:94:14:cb:7d:ce:83:86:c7:d9:59:f9:25:3a:a9:
         75:f8:1d:ad:53:fb:53:89:bf:7f:5e:63:7e:11:55:79:d3:70:
         2e:61:e4:87:54:74:18:b3:97:9c:72:ae:4f:d9:dc:85:50:c5:
         5f:60:51:b1:b0:ef:68:2d:43:8a:73:55:31:74:82:b2:df:c7:
         2d:01:6c:51:38:d3:94:63:c1:c0:25:86:4a:98:75:0d:81:47:
         10:9c:09:19:14:e8:66:3d:a1:d5:62:38:d1:b1:f0:b8:a1:77:
         95:c5:08:b6:00:b8:8f:39:a0:0f:d7:f4:66:c5:b5:c4:81:67:
         78:bf:45:c1:98:b6:6e:61:bd:f1:b3:58:e7:55:a7:0a:76:23:
         4a:f7:30:8c:15:69:38:31:2e:ea:4f:16:7c:72:5d:ab:5a:0d:
         b8:10:fd:a8:46:91:25:84:15:06:9e:6d:53:6f:5b:6a:11:7a:
         3b:53:7e:b3:f2:df:2d:16:5e:8b:ef:46:cd:54:69:79:31:27:
         65:91:66:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org