Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/jEx4j8AeTBwVQVQWZfYxkGpAUVA.roa
File:                     jEx4j8AeTBwVQVQWZfYxkGpAUVA.roa (raw, json)
Hash identifier:          UX3o6lIZqi8kpFIcYOajHC7ZRWYmzfl5BnnvMyHjcLE=
Subject key identifier:   8C:4C:78:8F:C0:1E:4C:1C:15:41:54:16:65:F6:31:90:6A:40:51:50
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       58
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/jEx4j8AeTBwVQVQWZfYxkGpAUVA.roa
Signing time:             Thu 09 May 2024 06:02:58 +0000
ROA not before:           Thu 09 May 2024 06:02:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     24289
IP address blocks:        126.251.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: May  9 06:02:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=8C4C788FC01E4C1C1541541665F631906A405150
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:57:ba:12:81:a2:f6:09:dd:1e:cc:b7:b7:81:
                    23:30:cc:df:76:28:13:b6:cf:f3:48:1d:e9:1f:17:
                    83:14:e3:96:e2:53:dd:e1:cd:ab:b3:fd:d8:40:04:
                    ca:6f:5a:8c:40:de:93:17:f7:43:0f:fe:be:87:78:
                    df:05:c2:d3:07:b0:6f:b3:39:62:5e:db:e6:e6:dd:
                    74:2b:d3:f7:79:53:c3:a2:e8:aa:1b:50:43:4f:3b:
                    35:7b:31:d3:59:d2:90:c4:b0:d3:9b:af:fa:c3:bf:
                    69:75:5e:65:51:7b:f7:56:6c:32:68:55:58:aa:cc:
                    8e:20:ec:6c:44:eb:a5:39:aa:b6:43:e5:05:d0:83:
                    df:ed:d6:79:72:7f:92:e4:e0:b3:0f:5f:9f:e7:2a:
                    b3:7b:6d:08:f4:9c:57:02:b5:3f:e0:9f:ff:04:d1:
                    bb:ec:f8:bb:55:26:50:1b:b0:ce:7a:9b:b2:d3:36:
                    9a:05:f1:f9:7d:de:ef:b4:73:d8:99:94:47:ea:73:
                    f7:c0:d9:67:7e:67:9a:39:6b:a7:db:f7:26:c0:1e:
                    84:40:b7:9f:c4:12:67:3b:f4:28:b3:2c:0e:77:f8:
                    4d:1a:25:34:ba:86:2c:c2:18:7d:28:e8:c9:a9:a0:
                    5f:6b:a8:fa:36:2f:2f:1f:6c:11:3b:68:df:26:b4:
                    e6:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:4C:78:8F:C0:1E:4C:1C:15:41:54:16:65:F6:31:90:6A:40:51:50
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/jEx4j8AeTBwVQVQWZfYxkGpAUVA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  126.251.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d7:12:96:44:c4:30:ad:10:80:1a:92:5e:36:78:a0:97:b6:8a:
         26:04:6c:da:7b:6e:be:b8:25:b7:e3:4f:65:48:0c:94:25:fb:
         46:c0:1e:75:82:8b:a8:9b:e1:90:2c:99:e0:55:01:58:a3:75:
         c6:1b:a2:ea:0d:43:a7:d9:03:04:6f:48:c3:81:ad:e3:84:c6:
         e1:9d:c9:36:e0:f7:49:07:ea:94:82:fd:9a:37:ca:78:6c:97:
         25:a8:a8:3a:53:57:63:e1:c6:4b:23:5a:d4:91:47:b4:2d:76:
         4c:c5:26:c7:a8:77:8f:e3:a4:3d:c4:28:ac:77:72:26:05:93:
         94:e6:b2:5a:7a:9a:ab:4e:36:8e:96:66:ca:0e:65:f3:a8:63:
         f3:8c:c8:ef:9f:87:85:6c:05:9b:01:3d:ad:d3:bd:c6:5c:75:
         6d:b2:95:c1:fe:fc:6a:1b:ac:9d:ad:38:9e:9c:08:9c:03:66:
         29:0d:4c:bf:44:6a:1f:de:23:56:b4:e0:0f:12:7e:b1:bf:f9:
         d3:5d:92:27:c3:e8:b1:7f:e7:53:f3:03:00:e9:4d:e4:27:56:
         09:90:8c:26:f0:97:8d:98:58:9b:a0:ad:30:81:d1:67:31:dd:
         75:66:c7:2b:b7:61:18:47:ff:fd:e4:44:75:eb:0c:88:1d:13:
         c8:51:0b:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:14 2024 by rpki-client on console-fra.rpki-client.org