Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/1LYDe-aw9ioIiZ0twTMbuD7b6L8.roa
File:                     1LYDe-aw9ioIiZ0twTMbuD7b6L8.roa (raw, json)
Hash identifier:          Q+UI4OuFTuEbY7LyxUk8Hv4qphBUa624lhherNNjgiI=
Subject key identifier:   D4:B6:03:7B:E6:B0:F6:2A:08:89:9D:2D:C1:33:1B:B8:3E:DB:E8:BF
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       30
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/1LYDe-aw9ioIiZ0twTMbuD7b6L8.roa
Signing time:             Sun 30 Jun 2024 01:32:30 +0000
ROA not before:           Sun 30 Jun 2024 01:32:30 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9615
IP address blocks:        202.129.176.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 30 01:32:30 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D4B6037BE6B0F62A08899D2DC1331BB83EDBE8BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bd:bc:cd:b8:fe:51:54:e1:37:c3:88:cb:24:
                    70:59:7c:33:4a:df:4d:30:14:fb:34:8b:27:02:37:
                    34:8a:cb:b6:8c:03:93:88:38:43:ba:4a:71:04:80:
                    e9:b3:92:48:4f:fe:30:67:0d:36:5e:ba:0c:73:9f:
                    01:bb:15:f3:f1:b0:c5:32:ff:51:7e:63:50:da:06:
                    cd:18:be:82:d9:25:b8:cd:de:10:8e:9c:23:e2:4c:
                    96:f2:cc:3b:77:87:53:1e:8a:22:c3:88:30:1c:f7:
                    31:fa:a9:bc:8f:78:19:59:2e:59:95:b8:e2:fd:25:
                    6a:ec:57:bf:c9:5b:cc:bc:76:02:2d:d8:50:43:f7:
                    f0:18:50:5a:95:eb:d3:90:31:bb:e2:b5:3c:14:8d:
                    6d:d5:48:7d:bf:bc:84:b0:49:24:68:c1:4f:23:76:
                    7e:43:ad:34:a4:62:99:b9:c0:ee:3e:92:94:37:dc:
                    f4:c8:d1:9a:76:af:4a:8a:fa:00:8d:18:16:e6:7b:
                    6e:00:bf:d7:41:af:31:89:9f:7b:38:66:00:a8:72:
                    89:00:99:e0:ff:db:96:f4:6e:aa:48:f6:fc:37:ac:
                    94:b9:b3:a9:e0:83:26:5e:ad:f3:6a:93:77:11:b9:
                    42:c6:5b:18:ec:55:bf:55:75:f2:81:70:74:1b:e6:
                    88:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:B6:03:7B:E6:B0:F6:2A:08:89:9D:2D:C1:33:1B:B8:3E:DB:E8:BF
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/1LYDe-aw9ioIiZ0twTMbuD7b6L8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.129.176.0/21

    Signature Algorithm: sha256WithRSAEncryption
         63:e0:41:5c:70:07:c3:41:aa:c9:7e:88:f8:80:56:d9:ce:cc:
         e0:f5:d5:de:77:c8:02:a3:8f:19:1f:aa:da:43:f0:a7:a6:1c:
         8c:ef:37:48:59:9c:e2:d7:88:75:31:ac:1f:81:e4:9c:97:06:
         3b:f1:ff:fc:af:bf:4e:d4:2e:9b:51:38:3e:96:bf:41:bf:f7:
         5c:5e:79:64:50:eb:94:be:b4:54:d2:63:fd:f2:09:c2:8f:3c:
         32:be:61:7b:ae:34:46:6c:3c:1e:91:48:9a:58:43:40:a5:32:
         f8:ed:16:46:0c:ab:4d:09:de:64:2f:cf:9f:d8:14:98:61:13:
         e3:df:63:a7:45:cf:e8:35:e0:e5:6d:5b:e3:4b:44:14:12:fa:
         49:4e:fe:1b:48:fb:43:75:a3:c8:2e:fc:73:cf:0f:47:30:ba:
         93:90:d6:33:7d:e9:27:8b:d5:1a:9d:3c:a3:bd:74:6d:f5:b9:
         c0:28:0f:29:14:df:dd:4a:31:00:c0:e5:1e:78:95:3d:d5:f5:
         d5:ee:57:77:87:79:b8:31:55:fa:85:47:23:5d:a5:cb:53:70:
         ee:02:1e:4e:3d:94:bb:22:19:1c:7e:ff:42:54:96:94:d5:08:
         64:97:36:55:e6:4f:95:e9:63:3e:7f:da:92:d8:8f:79:c6:6c:
         47:70:ea:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:42 2024 by rpki-client on console-ams.rpki-client.org