Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/gZqV67PG-OeSBMWeaaGxnsuJrGo.roa
File:                     gZqV67PG-OeSBMWeaaGxnsuJrGo.roa (raw, json)
Hash identifier:          HsNZg9BQJyRFQnnMW1rrnZLTiZT/CIU5H7J+F7AR/ok=
Subject key identifier:   81:9A:95:EB:B3:C6:F8:E7:92:04:C5:9E:69:A1:B1:9E:CB:89:AC:6A
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       54
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gZqV67PG-OeSBMWeaaGxnsuJrGo.roa
Signing time:             Thu 31 Oct 2024 01:28:44 +0000
ROA not before:           Thu 31 Oct 2024 01:28:44 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        124.154.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 84 (0x54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:44 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=819A95EBB3C6F8E79204C59E69A1B19ECB89AC6A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:cb:af:40:42:10:43:36:94:48:64:c2:10:4c:
                    ac:71:d9:a4:08:01:de:fe:90:96:c9:8d:a0:75:ae:
                    5d:57:cb:82:35:a2:80:a4:73:9f:5d:9a:77:aa:d2:
                    ed:1a:14:67:47:6c:ac:6f:54:01:72:3b:c9:8a:e4:
                    33:87:ee:8c:87:b7:be:2d:f9:4e:6d:37:23:b3:a4:
                    bb:f8:54:20:9c:32:84:b8:1e:d0:69:d5:9a:02:ad:
                    8e:01:27:09:d2:ba:e3:4a:c7:95:ce:04:54:38:a7:
                    43:3e:c4:87:d2:82:0d:c5:ba:6c:3b:7c:d1:b6:46:
                    6f:9d:3b:41:13:94:d7:98:ac:4f:5a:ae:b0:12:5a:
                    7a:ec:f6:cf:94:25:97:ac:f0:0f:3b:2d:8e:0d:ff:
                    62:cf:19:fe:7d:46:6b:96:32:80:25:90:61:0c:ba:
                    d2:b0:aa:81:d2:46:e9:de:11:f4:48:c8:1f:c3:8e:
                    fb:01:d1:41:eb:fd:69:e1:f9:d2:3d:67:08:c7:19:
                    29:78:48:8d:a6:3b:a2:52:98:96:96:4b:4e:3c:74:
                    fc:37:3b:dd:b2:41:a1:00:12:09:96:1c:86:36:b4:
                    1d:3a:97:d8:e5:cc:8d:ac:81:6f:79:b0:3e:07:b0:
                    2a:14:62:b7:28:a0:ba:5e:74:23:8c:67:ac:8a:ea:
                    0f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:9A:95:EB:B3:C6:F8:E7:92:04:C5:9E:69:A1:B1:9E:CB:89:AC:6A
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/gZqV67PG-OeSBMWeaaGxnsuJrGo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.154.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:91:8e:a2:01:3d:3c:23:af:57:f0:a2:3e:a0:a8:6e:f3:b8:
         1a:8b:f8:59:1d:d0:e3:c3:fb:d8:06:70:b5:9a:8f:a1:1d:e9:
         21:f2:47:69:f5:9e:08:5d:df:54:fa:3c:04:b8:d4:bb:85:ab:
         65:1a:bf:b3:3c:29:19:eb:b0:4c:ca:0a:12:6a:82:a0:02:61:
         9b:74:a4:9d:3b:4a:98:a4:00:c2:15:a3:a8:b6:c5:c0:7b:b9:
         b6:4c:54:dc:98:9c:f1:35:b1:d0:3d:29:fc:fe:71:46:f7:ae:
         7a:c8:1b:99:f8:0c:69:d6:3a:d2:54:57:83:aa:12:bf:e1:39:
         57:72:90:03:b4:06:11:81:7d:45:3a:cc:ef:7a:a1:82:d3:b5:
         d9:2f:e4:5e:91:da:a9:a7:01:77:fd:31:6b:9b:04:fd:4d:ac:
         7f:67:e2:00:01:e1:fc:3a:98:ce:93:02:68:33:75:23:a0:d4:
         49:61:e4:bb:fb:30:97:88:84:07:b5:6d:e1:5a:38:07:29:1a:
         df:3b:77:68:10:47:e0:49:9b:7a:c0:37:72:c1:92:7c:ca:d9:
         0b:d5:da:52:e7:92:d1:5c:e4:3e:b6:ac:dd:d6:e6:58:84:fe:
         35:b6:83:3a:09:34:14:d7:c7:d5:84:bb:6c:6c:0e:f2:a7:59:
         5c:7d:a7:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org