Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/tixRbk2mpxrCHEb6ABNqnAJMoYc.roa
File:                     tixRbk2mpxrCHEb6ABNqnAJMoYc.roa (raw, json)
Hash identifier:          1yh030SIs1I6t5d6hvQkcNe5Lzb577K3N0WsatdIYao=
Subject key identifier:   B6:2C:51:6E:4D:A6:A7:1A:C2:1C:46:FA:00:13:6A:9C:02:4C:A1:87
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       05
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/tixRbk2mpxrCHEb6ABNqnAJMoYc.roa
Signing time:             Thu 26 Sep 2024 21:09:35 +0000
ROA not before:           Thu 26 Sep 2024 21:09:35 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        211.2.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 26 21:09:35 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=B62C516E4DA6A71AC21C46FA00136A9C024CA187
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:72:99:e7:ca:9f:7c:b3:87:8c:a4:e4:3a:d7:
                    72:09:df:c0:81:72:e0:f2:65:fc:b2:fc:28:f4:d4:
                    f9:fb:3a:3c:12:ad:a4:1b:71:96:39:5a:d0:82:0f:
                    91:e3:52:a7:85:b6:a2:ae:61:ea:63:87:2f:c7:8b:
                    52:08:65:f5:e4:94:84:c6:06:4f:e7:65:bd:8f:84:
                    4d:a6:94:05:37:e8:ac:61:4c:0e:53:7b:d3:4b:af:
                    2e:48:e9:bd:ac:f7:27:53:60:21:1d:c9:c6:32:27:
                    42:f8:ac:6e:0e:41:85:89:d8:6a:95:d3:be:ca:a1:
                    79:95:f9:71:16:1d:d4:90:15:df:7e:da:7e:29:b4:
                    53:f9:73:d6:d1:0e:f5:07:16:62:e8:ca:0a:82:0a:
                    c4:0a:46:87:d2:a0:b9:7e:5a:36:cf:06:fa:8e:3d:
                    36:28:0a:09:0a:4f:e0:f2:6e:34:b7:b1:69:7c:09:
                    50:7a:02:d8:9c:81:a2:2a:50:8a:fe:42:15:de:ca:
                    1e:2b:5c:d9:c8:9a:71:72:f8:58:af:19:fc:a3:69:
                    58:1a:85:8d:22:07:73:55:0a:48:1d:22:bf:9c:19:
                    ec:a1:70:fc:45:38:ac:a6:d9:40:12:67:d9:00:7f:
                    f0:e0:cc:ce:22:80:42:88:d1:93:4f:8b:c4:7e:0b:
                    27:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:2C:51:6E:4D:A6:A7:1A:C2:1C:46:FA:00:13:6A:9C:02:4C:A1:87
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/tixRbk2mpxrCHEb6ABNqnAJMoYc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.2.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:7b:a9:79:3f:0b:f3:08:9f:64:75:cb:df:c8:4e:3d:0d:
         3a:da:b2:83:e4:9f:e9:a7:72:e2:f6:5f:d7:e5:ed:d7:22:c1:
         6d:64:e7:8a:19:78:8c:80:ab:a0:c9:d0:bd:ff:8b:89:a1:e5:
         69:db:8d:f3:e8:eb:b7:9e:37:d4:8b:83:01:cf:e4:4b:55:9b:
         de:a0:6b:72:37:d8:8d:11:52:af:44:0e:90:bc:a8:b3:a5:23:
         1a:9c:e9:41:f4:ed:84:b9:f2:30:bb:c1:45:7c:db:bc:ea:0d:
         d9:f8:f8:32:2c:8e:6d:a2:23:53:64:5c:f6:fc:ec:55:eb:3f:
         0a:94:9c:2a:fb:19:02:5c:99:29:d0:46:a4:c2:62:7c:7d:a6:
         00:ab:d4:b3:37:74:3f:8d:05:5e:7b:64:2a:20:0c:00:5a:93:
         c4:e2:4c:87:d9:39:7e:2c:62:9c:44:ac:6f:8a:a3:66:11:16:
         3c:a7:16:94:9a:d4:c5:dd:6f:56:1b:78:f5:5b:ba:3f:c6:3d:
         2b:35:b5:15:75:77:58:7c:52:5e:20:96:84:99:b0:91:89:99:
         a2:a4:13:10:02:c7:7c:1b:9e:dc:53:c1:25:56:05:c3:4c:13:
         9b:8e:1c:21:56:16:8b:10:49:c7:61:a1:e5:36:90:5b:ca:c4:
         c9:d2:96:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org