Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/N80CBEgEJYMzrU5gcvRxNX7UwAI.roa
File:                     N80CBEgEJYMzrU5gcvRxNX7UwAI.roa (raw, json)
Hash identifier:          pJVDbSSXZNCoWALJYCcvL1BO9tEucwd71/Ig1jBVOXw=
Subject key identifier:   37:CD:02:04:48:04:25:83:33:AD:4E:60:72:F4:71:35:7E:D4:C0:02
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       1D
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/N80CBEgEJYMzrU5gcvRxNX7UwAI.roa
Signing time:             Wed 06 Dec 2023 01:44:31 +0000
ROA not before:           Wed 06 Dec 2023 01:44:31 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        124.146.128.0/17 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  6 01:44:31 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=37CD02044804258333AD4E6072F471357ED4C002
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:3f:dc:0d:ab:bc:e2:64:7d:d2:17:53:8e:59:
                    9b:76:7f:8c:04:59:8a:a6:20:50:09:2c:10:17:21:
                    b1:cd:f5:99:d6:b3:4b:d2:bd:00:c9:39:89:e9:23:
                    7a:f7:f8:61:a2:32:e4:1a:9e:53:76:a6:b9:58:b4:
                    b9:d0:77:8a:4b:7d:6b:34:f9:fd:ce:51:fe:65:0d:
                    ca:fc:89:05:00:b7:05:82:1a:01:be:cd:2c:f5:98:
                    7a:f3:32:ff:49:97:8d:c5:90:df:2b:a9:df:c0:0d:
                    a3:82:c3:19:fd:ad:4d:2b:f4:26:a6:32:37:6d:eb:
                    b6:20:b1:67:87:6f:75:65:27:8b:7d:dd:f2:13:a0:
                    b4:8c:84:f7:53:be:d2:5d:d8:9b:64:53:2f:f2:9f:
                    83:75:50:c0:d7:e5:d8:88:86:21:82:32:bc:d1:cf:
                    69:bd:5a:31:4d:e0:9c:5b:63:9f:dd:20:3f:5d:97:
                    b6:19:74:ca:2d:01:a2:ee:81:34:62:c2:0e:4c:91:
                    06:5c:53:81:7d:3a:f7:8a:f8:99:94:b0:5b:bd:b3:
                    1f:38:b6:0d:3d:fe:3f:9e:bc:b9:e0:d6:9a:1d:4f:
                    9b:23:1b:1c:7e:a7:1c:19:91:a5:72:aa:e4:a9:e3:
                    0f:d1:3a:7d:f2:f3:ad:20:47:d8:a5:b9:a5:89:e1:
                    e2:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CD:02:04:48:04:25:83:33:AD:4E:60:72:F4:71:35:7E:D4:C0:02
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/N80CBEgEJYMzrU5gcvRxNX7UwAI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.146.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         42:cd:71:79:57:a8:dc:b6:e9:f1:06:a0:9c:0b:32:f2:ff:10:
         07:c3:55:d0:a3:23:6f:7d:1b:5e:07:ce:71:d1:3a:e9:8e:fe:
         20:0c:41:44:de:b9:14:99:db:df:82:02:09:49:c6:0c:77:7c:
         c8:c6:1d:71:6a:3e:36:15:0f:7d:16:23:ec:ba:21:d1:67:af:
         28:4c:5b:d6:9e:6b:87:e8:0c:76:4f:d8:ce:0a:a3:66:e0:f8:
         e1:74:85:8f:a2:3f:ce:82:02:f6:c8:08:2f:31:93:cd:e3:d9:
         68:fe:0d:7c:52:2b:c7:8b:ab:e6:27:76:0c:57:d1:fd:23:25:
         84:d4:08:a7:0c:0e:62:e8:a1:a5:25:e4:6a:c3:22:e6:46:20:
         f8:fb:6a:f7:31:0a:83:ea:c6:b5:54:75:da:12:85:e2:1c:1f:
         00:11:21:93:0e:65:1c:46:a5:f7:1a:d3:96:e4:3b:84:a8:48:
         1e:a6:c5:49:9b:85:7b:43:64:6f:1e:cd:b8:01:f8:80:7b:4f:
         23:6c:50:40:53:9b:43:d1:3a:bf:f3:ec:73:b6:20:bf:5f:18:
         ec:8b:cb:8a:4b:99:71:eb:be:73:33:9b:ae:f1:40:54:dd:2a:
         63:0c:25:b2:84:40:a0:ff:df:6e:33:9f:be:ca:89:41:43:cb:
         3d:24:1f:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:44 2024 by rpki-client on console-fra.rpki-client.org