Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/l8xxXSWk_eufHKdrIqQJevexJBU.roa
File:                     l8xxXSWk_eufHKdrIqQJevexJBU.roa (raw, json)
Hash identifier:          PB43HmTTlzzeiJJ43tvgh0IGnCziuoyP3oIwe0YfvjQ=
Subject key identifier:   97:CC:71:5D:25:A4:FD:EB:9F:1C:A7:6B:22:A4:09:7A:F7:B1:24:15
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       04
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/l8xxXSWk_eufHKdrIqQJevexJBU.roa
Signing time:             Thu 26 Sep 2024 21:09:34 +0000
ROA not before:           Thu 26 Sep 2024 21:09:34 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        211.1.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 26 21:09:34 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=97CC715D25A4FDEB9F1CA76B22A4097AF7B12415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:3d:c8:83:55:f8:a2:bf:95:4c:fc:52:5a:02:
                    5e:03:1d:17:7d:78:94:05:e4:23:1a:f3:d7:ff:94:
                    69:6c:97:e0:42:31:36:e3:3c:8e:a9:d8:aa:03:5c:
                    a0:0f:49:1e:9f:4f:33:58:9d:74:96:76:de:a0:e3:
                    2a:19:f7:ec:f8:8d:60:f1:b8:58:1e:7f:11:0d:34:
                    88:35:a4:df:76:9b:d8:07:0f:26:00:4d:cc:44:b0:
                    6c:ea:a8:d3:a0:cc:d5:10:13:ba:46:b7:44:ac:d3:
                    b0:39:b9:86:1a:e3:78:fb:46:ac:e4:cf:10:6d:0e:
                    04:89:3a:c5:5f:43:a7:f9:63:0d:2d:fc:b0:a1:ae:
                    fa:3d:9b:3c:32:ec:68:12:63:0c:b8:6d:43:d2:02:
                    47:91:00:95:c0:d8:47:c7:62:2f:1a:6e:4c:37:74:
                    77:3b:37:1d:9f:f8:1f:9d:7c:39:45:54:fd:21:4f:
                    7e:6e:06:32:02:38:f0:63:e3:8a:44:a6:2d:28:f4:
                    ee:a2:31:06:a0:cb:e6:36:08:89:db:c1:26:04:1b:
                    f6:9f:ae:6a:c8:4b:87:e6:0b:31:29:96:51:26:43:
                    94:42:06:57:05:4b:3b:5b:5f:06:fb:c2:00:cb:1b:
                    63:08:25:63:50:f9:f5:0e:f1:c4:fa:76:4e:fd:c5:
                    f6:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:CC:71:5D:25:A4:FD:EB:9F:1C:A7:6B:22:A4:09:7A:F7:B1:24:15
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/l8xxXSWk_eufHKdrIqQJevexJBU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.1.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:20:02:a4:d2:fd:80:15:47:d9:52:5f:6d:d2:d7:7a:34:da:
         fb:2d:8c:8e:11:10:3d:29:63:b3:6b:77:8e:69:90:0c:c0:39:
         48:d0:db:b5:81:4e:04:e0:90:76:55:dd:57:12:fe:95:bc:d4:
         a4:3e:e5:dc:cc:0d:26:54:03:96:43:32:ef:f5:f1:6a:b9:22:
         19:81:c1:70:80:67:88:a0:0a:88:14:ba:5c:88:03:33:b1:5f:
         d9:8a:3b:c5:86:a0:ce:67:2d:18:bb:1f:ab:c3:c9:61:21:2b:
         18:45:90:b1:32:84:1e:83:47:fc:02:34:e8:d9:7b:13:17:86:
         95:23:b7:db:69:87:17:7c:ca:80:3f:ef:75:a2:c2:b9:03:a0:
         d6:f5:73:2a:dd:65:d0:6c:3d:cb:44:d0:78:07:c4:10:e8:98:
         b8:af:1d:67:8f:5a:d7:43:be:8b:47:87:e7:83:d7:92:91:5a:
         98:24:51:d5:df:7a:51:0a:63:d0:59:9e:f2:e4:67:a3:a3:f7:
         6d:0c:3c:ab:30:06:f2:74:63:86:3d:71:4d:23:82:ce:33:d2:
         22:21:09:1d:6e:ff:91:66:50:7a:16:2b:ab:30:a3:aa:39:70:
         fb:69:bd:26:e3:9d:10:e1:bb:a0:46:ba:75:7f:f4:58:02:6b:
         7e:3e:17:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:13 2024 by rpki-client on console-fra.rpki-client.org