Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/g3vspw65wxv0pmb4LRaBV7bJSnU.roa
File:                     g3vspw65wxv0pmb4LRaBV7bJSnU.roa (raw, json)
Hash identifier:          +LiBgbLP+KwISphauyEf5bH1CUymX+rHJtSltk/07qA=
Subject key identifier:   83:7B:EC:A7:0E:B9:C3:1B:F4:A6:66:F8:2D:16:81:57:B6:C9:4A:75
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       0B
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/g3vspw65wxv0pmb4LRaBV7bJSnU.roa
Signing time:             Wed 16 Oct 2024 06:27:19 +0000
ROA not before:           Wed 16 Oct 2024 06:27:19 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     9354
IP address blocks:        125.2.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Oct 16 06:27:19 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=837BECA70EB9C31BF4A666F82D168157B6C94A75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:76:a5:e8:c5:8c:8e:c3:5b:7b:8d:03:3d:ca:
                    8f:cd:74:5e:62:ac:02:d7:bb:e9:a3:dc:9e:02:47:
                    a7:d2:f8:41:11:d9:b0:00:66:64:7d:5a:0a:9c:cb:
                    0f:ed:81:95:60:97:fc:34:79:8b:c5:b4:56:ab:74:
                    2b:e0:91:cd:13:5d:3c:dd:41:2a:c5:9e:5f:d6:d9:
                    8a:08:ea:61:4c:4e:73:f7:2e:7e:e7:c4:ac:d6:81:
                    42:b1:00:7c:cf:10:97:ca:b6:87:29:d2:f1:f5:4a:
                    22:f5:ed:86:e8:11:5a:7c:9b:80:68:c6:0b:7f:a3:
                    91:49:df:c3:24:8c:72:85:ed:73:0a:dc:68:28:3c:
                    19:cf:fc:0b:07:80:ba:a2:15:73:5b:d0:be:d3:db:
                    35:0d:bb:33:43:69:19:eb:1a:50:c3:bc:e1:66:a1:
                    8c:51:f8:40:fc:41:84:cf:9a:c7:76:9f:be:10:15:
                    2c:0f:00:71:8c:8b:03:24:88:20:b0:da:66:57:35:
                    6d:85:c0:c7:d9:4f:fc:b7:89:37:31:d4:34:47:da:
                    22:d0:18:e0:42:bc:98:a1:cb:eb:32:03:74:8e:dd:
                    b7:7a:82:05:cc:11:29:a9:d2:2b:37:78:8e:a5:60:
                    d8:8a:bc:dc:f6:64:37:33:a0:45:90:14:1b:87:0d:
                    04:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:7B:EC:A7:0E:B9:C3:1B:F4:A6:66:F8:2D:16:81:57:B6:C9:4A:75
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/g3vspw65wxv0pmb4LRaBV7bJSnU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  125.2.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         38:7e:f6:f8:67:a9:b2:58:78:33:03:a2:6d:1d:cb:54:c3:25:
         b2:5e:d1:0d:87:ea:60:9e:4c:eb:75:b4:68:a3:f1:1b:93:4e:
         77:ae:34:d8:b8:97:f0:5a:a5:e7:63:18:1f:67:a7:03:99:42:
         25:29:89:bb:d5:b3:30:af:0e:d0:bc:ce:ae:d6:18:17:69:d8:
         cb:06:48:0b:b0:5f:3f:85:82:4b:ee:a8:5f:13:57:3e:82:4b:
         e2:ac:b3:fc:82:0c:e1:62:99:fe:53:82:ae:66:33:ec:49:97:
         1d:7b:9e:96:37:bd:3d:b2:2d:24:47:c8:58:9a:d8:37:79:da:
         e6:d4:16:5c:1a:58:18:7a:15:cd:9a:65:7e:e5:28:24:6d:2f:
         d2:c5:36:dd:75:fb:e1:12:d1:a9:10:37:b0:7b:86:8c:da:25:
         5e:bc:24:6d:37:a9:d2:60:c4:38:dc:bf:45:94:ae:31:07:52:
         45:f7:e4:cf:14:aa:d3:b9:48:b5:01:14:0b:d9:cc:44:7c:ed:
         5d:cb:00:df:de:4c:ae:f0:49:d6:5a:f0:fd:a6:87:0b:aa:e1:
         c8:00:92:43:ab:9c:56:b5:4e:fa:83:2a:97:e4:35:13:61:7a:
         cc:4d:c6:f5:d0:50:4f:97:85:d8:8f:42:e0:cb:d7:fb:fb:94:
         e6:5b:7b:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:20 2024 by rpki-client on console-fra.rpki-client.org