Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/6eHGfGLe-TqwyQKLkw1MevbIA0c.roa
File:                     6eHGfGLe-TqwyQKLkw1MevbIA0c.roa (raw, json)
Hash identifier:          GGuCAFfizkKtjyvY5Dm2vwF8bBDLxRED9qBYDhj5/ak=
Subject key identifier:   E9:E1:C6:7C:62:DE:F9:3A:B0:C9:02:8B:93:0D:4C:7A:F6:C8:03:47
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       93
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6eHGfGLe-TqwyQKLkw1MevbIA0c.roa
Signing time:             Thu 31 Oct 2024 01:34:21 +0000
ROA not before:           Thu 31 Oct 2024 01:34:21 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        159.28.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:34:21 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E9E1C67C62DEF93AB0C9028B930D4C7AF6C80347
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:1b:ca:83:de:f9:3b:fe:e6:23:94:7d:1c:61:
                    4e:72:8a:89:6c:e8:11:b7:75:9d:76:62:50:c2:09:
                    d0:9e:df:ca:ba:e2:bd:53:09:98:72:35:4c:d7:e1:
                    b7:75:a5:19:ab:3b:90:61:49:3d:2b:da:59:ee:0c:
                    53:7b:66:be:a6:c1:6f:f3:e2:62:31:81:77:4d:7e:
                    25:87:c7:c0:7f:57:97:88:21:a6:53:f2:ce:a5:64:
                    6b:55:0e:ee:ac:33:bd:bf:f6:37:3b:30:90:e6:ce:
                    af:f3:08:d0:9a:f6:1f:d3:b1:ed:66:a6:ba:80:e8:
                    0a:9e:01:7a:a3:7a:fa:12:fb:cb:a7:ab:8d:73:84:
                    13:71:e5:c3:e5:c9:ff:f4:89:9c:20:bc:4a:6e:9a:
                    b3:84:fe:03:d4:b3:72:f8:de:1b:7b:d2:4c:7e:c3:
                    46:68:11:00:ef:6e:2c:c8:41:73:03:c4:59:05:df:
                    7c:87:d6:e8:9f:ed:f7:9e:cd:79:0f:0b:93:8e:97:
                    ad:26:f3:72:ed:5e:89:42:0e:fc:79:19:48:35:d8:
                    04:b7:f4:d6:69:2b:00:20:d9:96:43:ab:01:f7:cb:
                    4d:48:36:f0:60:e8:eb:88:d6:7f:08:4f:61:e3:a7:
                    3f:aa:75:0f:40:41:a1:63:76:94:39:7a:f2:ec:0c:
                    30:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:E1:C6:7C:62:DE:F9:3A:B0:C9:02:8B:93:0D:4C:7A:F6:C8:03:47
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6eHGfGLe-TqwyQKLkw1MevbIA0c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  159.28.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         d0:20:7e:bc:ad:cc:1e:81:4c:d2:72:1d:c3:82:3b:f2:31:7c:
         9d:f3:c9:25:dc:e5:32:c9:02:3c:81:e7:2a:20:03:08:90:19:
         81:01:ce:ce:f3:bb:75:ba:13:77:94:07:0e:fb:5c:7e:10:02:
         ca:32:bf:40:09:88:3c:24:ff:48:1e:88:a9:a8:d1:88:72:43:
         b3:8d:56:1a:44:36:67:51:b3:90:a9:57:35:bd:bc:63:79:0f:
         2d:a6:7c:c8:d0:7f:97:f4:87:ea:43:fc:73:46:ef:10:5c:fd:
         41:d5:ff:51:36:79:6d:2d:7d:b2:12:f5:67:55:a5:e3:81:f9:
         77:91:a7:1e:fe:8e:c0:35:74:2b:19:89:6e:fd:81:5c:e6:44:
         ef:ea:69:ae:1d:dd:3a:9a:a8:f1:16:ab:da:40:db:a3:23:6a:
         f5:99:ff:b6:60:a3:c7:9c:f6:23:50:ba:8d:18:b8:15:0f:84:
         af:cc:f7:62:ed:e7:5f:33:bc:85:e9:ac:10:59:fe:c4:df:84:
         30:ff:16:a2:91:23:92:e5:d0:ea:90:67:b5:d7:b1:d1:91:40:
         de:fe:7a:b8:74:58:ec:c4:af:e9:13:16:ad:0f:71:9e:f1:60:
         3b:96:c6:da:0b:d3:4d:b7:66:7b:ff:fd:ce:23:38:2b:36:d2:
         a1:fa:bb:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:44 2024 by rpki-client on console-ams.rpki-client.org