Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/e9vfVMqMiQAxVQmlt0K8ZmlXqTA.roa
File:                     e9vfVMqMiQAxVQmlt0K8ZmlXqTA.roa (raw, json)
Hash identifier:          27AoPhmvcJr+eIMgduyygSuno+hjgMffDSNU+2BsnOE=
Subject key identifier:   7B:DB:DF:54:CA:8C:89:00:31:55:09:A5:B7:42:BC:66:69:57:A9:30
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       E9
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/e9vfVMqMiQAxVQmlt0K8ZmlXqTA.roa
Signing time:             Thu 29 Feb 2024 01:29:45 +0000
ROA not before:           Thu 29 Feb 2024 01:29:45 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9607
IP address blocks:        124.147.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 233 (0xe9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Feb 29 01:29:45 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=7BDBDF54CA8C8900315509A5B742BC666957A930
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:44:53:14:4c:10:39:cb:d1:06:45:3a:d5:56:
                    cf:5f:12:60:d7:86:21:39:f2:b4:d2:90:d4:3b:f8:
                    11:ac:ad:2d:27:da:db:08:a0:fc:5d:a2:52:23:c4:
                    d3:4e:7a:96:64:9d:a1:a2:77:d8:3f:76:ae:3b:a1:
                    0c:de:d4:e7:a7:30:9d:d6:09:36:ed:85:dd:e9:c7:
                    30:a4:ec:bd:09:9d:b0:67:4d:46:55:53:e9:69:b1:
                    b5:3a:16:b8:35:2a:d1:76:2e:85:e4:38:89:27:22:
                    5f:ec:37:d5:8c:3e:db:11:f3:b9:e9:67:d6:cf:57:
                    d8:e4:ab:08:b0:61:a4:1a:e8:6a:a7:fd:54:50:31:
                    87:e0:a7:03:14:80:36:ff:ff:fc:3a:2f:09:69:c7:
                    20:34:64:e3:97:c2:57:ef:4f:b9:3d:73:a7:6f:8f:
                    09:c9:2c:9c:34:19:68:3d:ad:65:f3:61:d7:92:ee:
                    bc:05:7d:ec:7d:83:4b:d4:91:2b:5c:6a:5e:6f:45:
                    33:9d:6f:b7:f0:b4:3f:0c:5a:f2:f7:31:50:28:a2:
                    35:e1:cc:69:01:27:76:bf:ba:8e:44:fc:7a:f0:48:
                    86:ae:06:16:2d:e9:41:be:52:4e:19:82:9f:58:93:
                    3a:c8:df:62:0f:8f:9e:cc:92:60:ce:be:06:98:e4:
                    0b:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:DB:DF:54:CA:8C:89:00:31:55:09:A5:B7:42:BC:66:69:57:A9:30
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/e9vfVMqMiQAxVQmlt0K8ZmlXqTA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:01:7c:56:19:67:89:f1:95:6f:a2:63:63:8f:d9:42:d7:10:
         36:47:20:0d:2b:0d:06:40:e1:b2:74:87:f0:0f:66:37:33:12:
         44:50:2b:ec:9e:42:27:ed:02:d7:a2:2c:bf:7c:6f:2d:d9:71:
         e7:f4:59:06:c0:cf:c3:70:c9:a0:90:8e:61:2b:34:90:e7:5c:
         04:ee:1b:e0:98:70:3d:ce:05:12:56:2a:a2:8e:a3:c7:d9:4d:
         3b:49:43:6b:8e:c1:45:dc:f7:41:f2:5f:bf:8b:b0:0b:02:ff:
         46:14:eb:f2:c4:af:30:c8:88:e3:6c:3d:7c:a8:13:87:f7:a2:
         15:6a:88:c1:d9:ba:60:ce:00:6a:a9:35:43:24:8e:60:a5:5c:
         59:81:4f:5e:be:07:22:a3:9d:ca:9e:7a:0f:14:77:f9:51:e6:
         e7:4a:2d:bb:8a:77:4d:23:8f:44:e4:04:7c:74:c2:95:fc:fd:
         79:31:bd:85:0f:fd:35:1e:2a:ad:90:1b:ff:cf:65:6e:32:4f:
         84:d2:aa:0e:e6:b3:32:81:a8:70:1f:19:55:49:7c:69:5b:c7:
         7c:6d:43:97:73:2f:81:85:95:fb:c0:d9:ce:c7:2e:d8:64:5e:
         8c:e1:11:b5:29:6c:4c:80:20:63:7d:42:d9:60:5d:79:96:83:
         0f:f0:ac:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:49 2024 by rpki-client on console-fra.rpki-client.org