Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/k-7qHFGR12_oJfGJ4aEaDNwGRU4.roa
File:                     k-7qHFGR12_oJfGJ4aEaDNwGRU4.roa (raw, json)
Hash identifier:          9A7GN9ITbC5cCqBt+t6/P2XzS1r7j4x+tFYnQzEWGto=
Subject key identifier:   93:EE:EA:1C:51:91:D7:6F:E8:25:F1:89:E1:A1:1A:0C:DC:06:45:4E
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       62
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/k-7qHFGR12_oJfGJ4aEaDNwGRU4.roa
Signing time:             Thu 31 Oct 2024 01:28:45 +0000
ROA not before:           Thu 31 Oct 2024 01:28:45 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        128.53.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Oct 31 01:28:45 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=93EEEA1C5191D76FE825F189E1A11A0CDC06454E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:7f:67:d4:5e:78:ac:c1:56:c5:fb:e1:1f:0d:
                    a0:aa:6a:76:ca:54:6f:c9:4d:e0:48:b0:5c:8d:19:
                    50:89:6d:eb:07:cb:32:bb:31:25:b6:9b:0b:a8:59:
                    c8:6c:21:28:7f:d6:67:36:67:31:b7:42:e1:2b:b1:
                    9a:cb:9f:8a:f3:66:aa:f3:9b:c3:b5:ae:2d:76:63:
                    67:46:2c:01:3a:0f:88:bf:4e:84:e4:7d:ad:e4:cc:
                    9b:be:b0:61:74:5c:08:7d:db:79:61:e9:29:71:8a:
                    c3:35:fa:3f:04:cb:30:f5:4b:95:bb:cc:1b:a8:7a:
                    1b:4a:99:3c:1b:05:ab:ac:71:37:42:3d:d7:7e:75:
                    cb:81:98:91:6c:45:63:26:ec:f8:d8:91:62:e7:80:
                    1b:8e:75:67:df:b0:cd:f1:99:86:f1:e7:1e:ce:d0:
                    76:7a:ea:12:94:ee:e0:88:0a:d9:de:5f:18:c3:a3:
                    89:6e:41:7e:0d:b3:0b:0e:c3:0c:6d:ec:cf:d1:d2:
                    1a:83:f7:4f:35:11:f4:93:c0:02:6b:04:03:eb:23:
                    78:c1:e5:21:06:ff:df:13:3b:42:a2:99:fa:09:2a:
                    a4:22:6a:28:18:dd:2c:5a:1c:c2:15:eb:41:99:45:
                    df:ee:6d:d2:97:28:cf:d9:c6:77:69:2c:2c:78:7d:
                    9b:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:EE:EA:1C:51:91:D7:6F:E8:25:F1:89:E1:A1:1A:0C:DC:06:45:4E
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/k-7qHFGR12_oJfGJ4aEaDNwGRU4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5d:a1:4e:94:99:6b:9b:b7:57:17:c7:00:a3:5f:c6:f8:5f:22:
         44:ac:41:8a:25:cf:d8:46:1d:55:20:b0:ec:d0:08:0f:f8:2c:
         6a:1d:75:29:26:da:86:fa:fd:b5:90:c3:52:b3:d4:a6:c9:b9:
         06:42:44:c2:e9:4f:10:38:7f:ad:77:23:e0:3c:26:64:ce:ca:
         ee:0a:71:f8:41:96:06:92:47:5b:6d:d1:08:01:ad:0f:22:50:
         62:32:95:8f:37:21:f8:b8:13:98:87:4b:b3:1b:e0:60:f6:5d:
         5d:8e:0c:e1:7d:e7:3e:ce:85:4b:b0:39:7a:22:b5:23:45:73:
         34:99:16:6c:20:54:1c:b6:1e:6a:5d:2f:35:1b:44:14:c0:41:
         b6:8b:db:d2:36:28:6b:7b:2e:b5:14:73:b2:71:21:46:dd:4a:
         b5:f3:8e:75:8c:ad:aa:af:dc:36:4d:b1:7c:d3:70:86:35:59:
         93:9e:91:15:a8:85:2e:d3:d8:19:45:a4:86:2f:3a:35:ad:08:
         ac:c6:16:1e:66:8d:33:e8:2d:9e:5f:c3:ea:d5:49:4e:f8:6f:
         6d:88:c7:ef:c5:ca:d9:9d:0f:9f:96:b6:d4:be:df:69:ec:f9:
         b8:ad:d5:91:c6:f0:24:8e:7a:e4:20:2b:ab:0a:d8:6b:56:83:
         be:30:2d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:57 2024 by rpki-client on console-fra.rpki-client.org