Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLyZ3hrcMiSSeiiNveI4Qptr2nI.roa
File:                     VLyZ3hrcMiSSeiiNveI4Qptr2nI.roa (raw, json)
Hash identifier:          LxIBlFoUKcgL7GrU2TEvANN9vHhGsmHLuYsT1Vm4RkQ=
Subject key identifier:   54:BC:99:DE:1A:DC:32:24:92:7A:28:8D:BD:E2:38:42:9B:6B:DA:72
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A1A
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLyZ3hrcMiSSeiiNveI4Qptr2nI.roa
Signing time:             Sun 30 Jun 2024 01:44:24 +0000
ROA not before:           Sun 30 Jun 2024 01:44:24 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        1.77.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2586 (0xa1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:44:24 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=54BC99DE1ADC3224927A288DBDE238429B6BDA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:4f:b4:d3:28:9e:7e:88:e2:2a:b6:fa:a3:72:
                    fb:83:26:58:26:6b:b4:75:45:25:a0:13:4a:da:0e:
                    98:70:e8:47:68:35:11:cf:3f:e6:a5:3f:84:95:d2:
                    a4:18:da:9f:cb:87:32:57:3f:0b:a6:23:86:0d:b1:
                    6b:8b:f1:f9:03:3a:11:ff:57:72:a0:cb:5f:9b:27:
                    0d:71:d2:02:2a:12:e4:23:3e:4d:80:f6:84:a7:ea:
                    ad:93:bf:4a:e6:c0:23:16:3a:f6:76:36:9f:27:ef:
                    12:b5:28:38:df:a7:4d:ab:08:a8:24:72:64:96:3a:
                    aa:72:6e:8c:17:0e:de:48:9f:67:61:e4:f4:9b:24:
                    79:44:cc:0d:2e:81:55:6b:35:df:80:89:04:2f:4d:
                    6f:a0:1d:e6:3b:6d:60:32:f6:98:cf:1a:ca:81:7f:
                    91:2f:7f:60:bd:ef:c6:62:5f:54:ba:f9:2e:18:31:
                    fd:be:65:13:33:93:08:aa:d0:74:70:4e:68:7c:0d:
                    ed:ee:26:b4:78:8c:a0:f6:bb:d9:1d:3c:a9:09:05:
                    53:d8:7a:e2:98:89:ad:ba:36:03:f3:6d:c3:5b:92:
                    1c:16:ad:f9:82:5e:00:40:c0:4a:14:6f:ca:ed:3a:
                    9f:8d:0e:66:01:c6:d8:5a:c9:91:87:cf:c9:fc:92:
                    1b:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BC:99:DE:1A:DC:32:24:92:7A:28:8D:BD:E2:38:42:9B:6B:DA:72
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/VLyZ3hrcMiSSeiiNveI4Qptr2nI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  1.77.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         54:fa:0a:0d:28:2d:8e:c5:49:b1:a5:2e:70:aa:63:2c:de:57:
         1f:bf:44:31:a9:64:65:95:88:e6:2a:0e:83:55:7c:94:e1:92:
         6c:3b:73:d0:cf:68:55:65:a2:b5:c7:70:d4:4b:36:87:4d:69:
         20:18:bf:b4:07:c2:66:e2:a4:f2:d6:a4:ec:5b:b2:7b:0e:2e:
         70:d6:8f:5b:67:18:14:6d:47:c0:57:20:b3:89:d5:4d:b2:6a:
         db:eb:21:3f:52:19:1a:06:c6:93:a1:dd:c1:b0:c8:f7:af:5a:
         74:54:e9:60:7c:eb:43:5d:1a:7e:75:61:0c:91:fa:80:fe:45:
         9a:94:53:93:80:d8:8c:c6:09:1e:85:a5:75:1d:9b:48:23:37:
         77:a1:e9:9e:ed:b2:2a:6e:01:f6:cf:c8:dc:d1:27:52:c9:35:
         cc:6a:75:89:b4:dd:4c:b9:b6:6b:e0:00:99:c9:77:8c:eb:ec:
         54:27:c1:2e:15:a6:b2:ce:a6:7e:51:9f:a7:9e:7c:67:53:a8:
         4e:76:46:e3:24:b0:95:9c:9b:35:24:19:8f:68:a1:b3:70:27:
         e1:ac:5d:63:49:54:a5:af:ca:9c:c0:3d:33:92:b3:53:57:94:
         81:c7:5a:28:91:4d:0e:0e:99:7f:2c:c4:2c:df:0d:1a:16:41:
         1e:ed:2a:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:00 2024 by rpki-client on console-fra.rpki-client.org