Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/f8IRvPDinJLedt08f60cEp8EqGY.roa
File:                     f8IRvPDinJLedt08f60cEp8EqGY.roa (raw, json)
Hash identifier:          /cLtp42vSB6UIHnQfdrHvOInCrcOTS7HLvUFrxY+WCI=
Subject key identifier:   7F:C2:11:BC:F0:E2:9C:92:DE:76:DD:3C:7F:AD:1C:12:9F:04:A8:66
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       20
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/f8IRvPDinJLedt08f60cEp8EqGY.roa
Signing time:             Wed 10 Jan 2024 01:07:00 +0000
ROA not before:           Wed 10 Jan 2024 01:07:00 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        157.65.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 23:53:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:07:00 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=7FC211BCF0E29C92DE76DD3C7FAD1C129F04A866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:02:05:42:a7:65:7c:4b:20:ee:dd:63:9f:1e:
                    b8:00:d0:e6:b9:e9:16:f4:6d:41:57:4b:3b:6d:87:
                    3c:ec:92:d5:67:42:61:e2:44:19:8f:85:dd:1d:20:
                    c2:9d:93:21:23:8f:cc:a1:7d:49:9d:53:a2:82:eb:
                    a3:bd:0c:01:3c:10:e7:79:eb:02:0c:d3:5e:aa:97:
                    1c:92:66:55:4c:f7:9b:8d:b5:3f:63:97:02:8d:4f:
                    55:12:8c:1e:6a:df:01:8f:24:b2:41:6c:29:4d:72:
                    61:82:83:8f:15:2c:3a:cd:d2:41:9a:c2:f1:83:98:
                    33:ce:f7:17:89:72:69:36:6e:af:bb:9e:a8:52:de:
                    9d:e2:28:9b:3e:2d:60:37:01:30:84:55:39:2e:24:
                    67:b5:26:f1:44:0a:18:c9:ac:05:15:da:ca:34:99:
                    b4:0f:e6:65:d7:da:52:6d:5c:59:05:5c:34:7e:8b:
                    2d:e1:7e:3e:7d:a3:f5:6b:3f:c8:73:8b:27:1e:fa:
                    35:eb:bf:68:d2:0c:5e:b0:5d:37:2e:bb:a3:6d:ac:
                    37:d4:93:1b:dc:28:ab:13:fa:8e:7b:e9:26:c7:ce:
                    b9:b8:74:7c:a5:76:00:ce:a4:62:15:d1:31:51:81:
                    73:b6:56:71:4b:75:0f:90:2b:0c:4e:de:b4:ad:82:
                    e1:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:C2:11:BC:F0:E2:9C:92:DE:76:DD:3C:7F:AD:1C:12:9F:04:A8:66
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/f8IRvPDinJLedt08f60cEp8EqGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.65.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         88:5b:f0:de:6a:c6:58:8f:06:7f:18:eb:90:4d:1c:3d:9d:73:
         5f:c7:8d:6d:b2:c8:32:36:eb:27:a3:75:fa:58:6c:44:be:68:
         23:0c:07:37:eb:72:69:7c:d6:c4:39:24:c2:81:19:30:86:03:
         5d:3a:46:62:fb:e2:10:39:f3:45:23:6a:3c:71:45:ee:ac:01:
         88:a2:12:45:70:b0:5b:bf:c1:f7:7d:21:e5:86:98:cf:b7:09:
         f0:7f:81:f4:6d:8e:16:97:e7:d6:8a:58:6b:2f:9d:bc:18:de:
         a6:be:b5:29:f7:bc:38:63:cb:ed:86:79:65:a2:dc:7e:08:a6:
         21:3f:e5:d1:5d:ac:34:50:85:1c:4b:01:95:27:65:51:8a:73:
         73:4c:22:d7:98:0a:35:06:2c:fc:95:ba:00:65:f2:08:cb:93:
         f3:23:bc:56:56:3c:6f:18:06:b2:0b:c6:a8:6d:30:fa:ae:bf:
         b4:48:80:30:06:4b:f7:9a:1e:a0:53:f5:ba:c5:05:c6:1b:aa:
         0e:6e:01:8f:ee:33:52:05:e9:f5:70:64:da:22:ab:07:fe:c0:
         45:b1:c0:3a:85:ae:f7:38:ee:5b:9b:ff:04:f9:3b:9a:8d:49:
         2d:ec:c5:d0:f1:a1:a7:73:3d:71:29:11:0b:9e:c8:f1:38:39:
         81:6b:62:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:27:03 2024 by rpki-client on console-ams.rpki-client.org