Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/JsFASyI_UbH4EZMNg9qHiiKGUQo.roa
File:                     JsFASyI_UbH4EZMNg9qHiiKGUQo.roa (raw, json)
Hash identifier:          CEbxGbMX+UGyBa+Ef11pmoPJvI5IqeD9d11Pc/NvV48=
Subject key identifier:   26:C1:40:4B:22:3F:51:B1:F8:11:93:0D:83:DA:87:8A:22:86:51:0A
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       51
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/JsFASyI_UbH4EZMNg9qHiiKGUQo.roa
Signing time:             Thu 31 Oct 2024 01:28:41 +0000
ROA not before:           Thu 31 Oct 2024 01:28:41 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        116.80.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:41 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=26C1404B223F51B1F811930D83DA878A2286510A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:b6:4f:7d:73:2b:7d:6b:60:77:79:2c:c0:77:
                    36:84:bd:74:ce:b5:33:d7:f8:c1:a0:62:55:18:78:
                    82:a8:da:43:c7:ab:a4:45:8b:bc:92:f6:d5:f2:8c:
                    72:c9:ab:64:8d:64:19:40:3f:53:86:14:c6:d7:99:
                    bd:c1:16:39:1b:54:f4:bb:e2:1f:d6:5b:c6:6f:3e:
                    01:5a:90:f2:c4:e7:b5:42:bb:64:23:26:5c:8d:ce:
                    2e:bb:81:05:c6:a5:45:6f:76:17:42:57:4a:1a:cf:
                    a0:61:fa:b1:e9:7a:91:d2:1d:f4:40:49:15:ee:a9:
                    47:33:11:17:ed:d8:72:64:2f:cf:38:60:ff:37:9b:
                    72:8f:78:a6:37:bd:d8:84:57:dc:39:ba:9b:08:7e:
                    67:78:2f:43:b5:da:66:9f:76:1a:39:4f:5f:3f:e7:
                    73:09:fb:b5:a2:d9:67:42:de:e2:57:06:4f:e9:ef:
                    a9:49:37:97:7d:15:d0:68:f8:ea:d5:e3:b7:42:7b:
                    b3:e0:7f:30:a0:83:97:93:47:cc:10:09:5c:7d:a1:
                    d9:6e:2b:5a:26:d4:67:2a:53:a2:9a:b6:0e:53:f5:
                    c8:56:e3:87:e1:09:c1:7d:d4:8f:72:5f:5e:e5:e8:
                    77:e5:2c:32:95:82:02:4c:5d:13:4c:8c:3e:10:61:
                    08:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:C1:40:4B:22:3F:51:B1:F8:11:93:0D:83:DA:87:8A:22:86:51:0A
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/JsFASyI_UbH4EZMNg9qHiiKGUQo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.80.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         9b:4c:77:a0:e6:ad:29:70:3f:f7:93:21:ce:f5:b6:32:16:cd:
         21:f6:4e:29:29:30:e8:6b:d7:54:df:c8:51:56:41:fa:1c:2f:
         cd:c6:a1:e5:ca:ed:0f:02:f0:f4:51:87:55:97:68:d3:c5:a1:
         32:f0:fa:2e:25:24:79:55:06:2d:ad:ea:85:c5:61:37:21:96:
         b5:32:9a:84:3b:5a:de:70:d5:a5:b3:8c:e7:8f:a7:f1:6b:1a:
         4b:69:51:95:e0:ba:d9:33:ae:72:ed:33:c1:28:f7:ab:a9:1a:
         c0:9b:f8:80:d0:ac:88:1c:1d:49:b3:e2:26:26:44:e2:48:c5:
         e9:e5:05:b6:5b:9a:c1:21:49:32:10:16:f2:bd:0a:70:33:d0:
         2c:74:89:67:91:c0:48:92:fb:3c:8c:58:39:ce:9b:a3:ef:36:
         c2:92:c9:35:2b:a9:8e:5d:5f:65:88:b4:8b:fc:9d:ba:a4:93:
         c3:26:ad:60:1b:df:59:fa:21:57:a0:6d:2f:80:85:70:5c:5d:
         cf:9f:be:8a:4c:6b:7c:9e:be:fa:38:9d:bc:54:b4:e4:fe:1f:
         98:5d:c1:9d:e7:4f:cb:32:c8:38:4b:50:5f:85:68:b8:b5:46:
         13:79:e0:1c:70:c0:57:da:76:7e:1b:55:3f:61:4c:1c:4e:21:
         0c:f4:f9:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org