Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoEZOJYmJILkKFKJazk1ljwQONI.roa
File:                     IoEZOJYmJILkKFKJazk1ljwQONI.roa (raw, json)
Hash identifier:          l5dK/xENW7fOW7Vz/cYg0lH+Gvpr+k1VDTq7NVaRMN8=
Subject key identifier:   22:81:19:38:96:26:24:82:E4:28:52:89:6B:39:35:96:3C:10:38:D2
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       24
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoEZOJYmJILkKFKJazk1ljwQONI.roa
Signing time:             Thu 25 Jan 2024 01:14:27 +0000
ROA not before:           Thu 25 Jan 2024 01:14:27 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        202.17.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Jan 25 01:14:27 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=2281193896262482E42852896B3935963C1038D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:83:45:61:ef:a9:f6:3e:50:f9:6e:a5:69:03:
                    a6:aa:d5:3d:6a:a8:f5:0f:c6:ea:e1:d2:06:40:91:
                    01:6f:b4:67:d0:c9:f6:25:50:e8:40:fe:a4:97:da:
                    6d:6a:4e:c6:7b:24:e7:de:58:47:48:d7:22:d6:ba:
                    fd:39:d1:6b:a3:c5:25:19:d7:fc:54:ae:30:e0:e9:
                    b3:28:70:3c:bd:44:9e:4a:80:e2:7d:a1:bb:35:ec:
                    b8:2f:40:36:7a:90:c4:5d:5c:fa:41:ff:c6:22:fe:
                    e5:d7:99:cc:9e:0c:1e:08:09:7e:f6:b2:2a:86:dd:
                    9d:4e:17:71:9e:25:ec:8b:75:ae:82:18:e7:5f:63:
                    64:f9:a1:aa:4c:aa:81:82:cb:e3:e4:84:e4:36:07:
                    bc:dc:23:0b:4e:f0:40:bf:fa:95:db:38:68:e8:14:
                    d9:88:0b:aa:ff:66:ed:21:af:40:f1:75:5b:09:34:
                    cf:e6:ef:9b:1d:dc:e5:09:52:7f:a8:aa:06:1f:78:
                    4d:58:42:c1:4a:33:3e:e7:9c:e5:65:e0:e7:2e:8f:
                    bb:e1:de:9f:14:fe:8d:e2:da:ca:38:08:04:0f:cc:
                    97:a7:5d:32:5e:fc:d2:d2:4a:bd:c5:0a:5c:0b:ba:
                    86:1b:26:10:15:39:43:3c:da:ec:aa:ec:93:9b:a4:
                    71:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:81:19:38:96:26:24:82:E4:28:52:89:6B:39:35:96:3C:10:38:D2
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/IoEZOJYmJILkKFKJazk1ljwQONI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         9d:4d:f3:f5:66:64:15:0e:5e:00:28:ae:84:c0:2f:40:bb:f8:
         84:a9:08:14:a2:1f:56:42:f7:d9:df:a0:47:3a:c7:89:da:39:
         9b:8e:da:07:95:e1:6a:04:7b:03:a8:7f:c3:1a:ad:5e:a1:d9:
         b5:77:e2:9a:f3:b8:f6:59:4a:a3:b2:55:a4:3e:ac:33:ca:48:
         c6:a6:af:5c:f1:e7:6f:6e:06:f7:3f:1f:4a:c4:1f:f6:4a:b0:
         7c:7c:59:89:f7:19:76:6d:a1:58:1e:40:b1:11:a8:36:e8:8b:
         a5:8f:6c:9a:b9:42:b9:51:00:3a:72:ae:be:da:4b:2f:98:c0:
         1a:42:5f:cc:5d:39:99:e2:6c:b8:4a:1f:8f:5f:fd:d0:db:b1:
         73:ea:cf:a4:d5:18:31:c1:bb:68:ef:f6:d2:d0:d4:cd:51:64:
         c9:6a:85:92:28:71:95:5e:4f:c1:d9:6f:5c:96:0f:f2:8e:a4:
         71:7e:73:ba:0b:fe:9b:cf:dd:e3:4b:77:29:fc:b6:2e:7e:22:
         61:bc:32:a7:24:7d:0b:62:fe:5d:42:83:5a:20:ea:44:12:5a:
         9c:d4:e6:ac:cf:f4:da:0e:92:9f:58:ed:d5:44:15:a1:b6:21:
         54:7d:56:0b:5b:72:98:6b:08:89:75:06:2b:43:ad:0a:26:29:
         9f:2f:a6:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org