Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzP0oG_4w7AIXT02zUhwGHEZV2Y.roa
File:                     jzP0oG_4w7AIXT02zUhwGHEZV2Y.roa (raw, json)
Hash identifier:          n9m7mCpJdWHHuHVXhrCuILRhQo5hK/n0zZjcrG4py70=
Subject key identifier:   8F:33:F4:A0:6F:F8:C3:B0:08:5D:3D:36:CD:48:70:18:71:19:57:66
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       1C
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzP0oG_4w7AIXT02zUhwGHEZV2Y.roa
Signing time:             Wed 06 Dec 2023 01:44:31 +0000
ROA not before:           Wed 06 Dec 2023 01:44:31 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        119.245.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 28 (0x1c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec  6 01:44:31 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=8F33F4A06FF8C3B0085D3D36CD48701871195766
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:cb:48:f4:1b:5b:0e:9b:7c:02:2b:c1:48:58:
                    f8:d2:14:d4:1a:b0:f4:97:e1:22:cd:63:64:74:dc:
                    81:23:1e:85:94:31:6a:b3:51:34:0c:5f:12:95:3a:
                    cc:0e:3d:65:8d:71:65:01:75:b3:03:33:02:e7:af:
                    28:ab:69:eb:05:bc:16:61:b3:54:30:c9:fc:ad:ba:
                    a1:6c:55:4f:45:e3:ce:6d:ae:02:50:12:e8:81:f3:
                    2b:c5:54:97:e6:86:26:4c:df:e4:a8:cf:64:4b:50:
                    b6:2b:27:8d:09:f4:2b:b6:69:2c:8c:c4:a2:7f:81:
                    e5:99:0a:ae:83:0e:e0:a1:b7:57:e9:7f:eb:cd:54:
                    54:15:03:4c:ed:27:e9:aa:2f:b4:77:97:4c:2a:74:
                    73:7f:e8:d5:5a:39:af:9c:0b:bb:7b:f0:79:9d:de:
                    c0:0a:b4:b7:87:5d:fb:d3:5b:94:37:77:47:98:1f:
                    87:1a:e6:42:bc:3f:70:9f:22:d7:90:75:57:bc:7d:
                    02:23:cf:8d:ce:65:11:ca:1c:1f:59:3e:f0:a7:69:
                    e1:da:b8:38:f1:f0:c4:30:07:5d:70:dc:b2:a1:d3:
                    eb:09:12:7d:20:94:98:c8:5a:e9:93:0a:f7:b2:2d:
                    85:96:03:4a:91:b1:a9:99:e6:5d:99:91:58:7c:d9:
                    47:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:33:F4:A0:6F:F8:C3:B0:08:5D:3D:36:CD:48:70:18:71:19:57:66
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/jzP0oG_4w7AIXT02zUhwGHEZV2Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         75:3a:63:4e:5f:71:02:18:51:e1:5f:b6:5d:4c:04:7d:29:f3:
         4d:24:be:d9:0d:16:d0:c0:8b:b1:b0:1e:61:4d:7d:b6:0b:13:
         aa:cf:7c:c6:d5:85:1c:c9:0e:41:3c:91:c0:a3:b0:10:a7:44:
         d5:ba:e0:4e:9d:2c:43:c4:90:15:8f:75:90:4e:42:5d:eb:c3:
         d0:04:f3:a5:43:7b:c4:ab:79:4a:43:29:70:81:cc:97:f7:9b:
         16:66:99:47:84:db:a1:77:72:de:89:d4:21:db:dc:6a:01:e9:
         63:e6:db:48:08:20:7e:5a:d7:3c:ae:c5:7f:31:b2:5a:30:47:
         fb:35:61:87:92:15:30:e0:48:9f:f6:88:ce:b2:61:08:f1:f7:
         63:30:cb:94:60:02:a0:63:c6:19:0e:ae:51:63:29:74:b4:ce:
         88:38:c2:6a:ae:b9:cc:eb:c1:03:e1:e5:ae:2a:a9:53:a0:1b:
         35:9a:e0:de:c9:7e:3a:04:c2:d1:99:de:78:58:ce:7d:9f:10:
         5e:05:87:a9:a8:e5:e6:33:eb:9e:ae:de:f8:db:7c:0a:8e:59:
         84:4d:42:5a:7d:3b:6f:44:3e:5a:1d:5f:eb:c1:a6:44:bf:47:
         52:ac:68:21:5b:6b:bb:5b:c8:81:fd:ec:72:eb:15:c6:39:3f:
         d8:89:fa:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:15 2024 by rpki-client on console-fra.rpki-client.org