Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/447/KvnFqyDvk0ktiuRGRMmKaZLBsts.roa
File:                     KvnFqyDvk0ktiuRGRMmKaZLBsts.roa (raw, json)
Hash identifier:          OmcWvu2DJGNDBsjLHLXj60zYYYfZ/bFIacsUU/k66So=
Subject key identifier:   2A:F9:C5:AB:20:EF:93:49:2D:8A:E4:46:44:C9:8A:69:92:C1:B2:DB
Certificate issuer:       /CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
Certificate serial:       03
Authority key identifier: C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/KvnFqyDvk0ktiuRGRMmKaZLBsts.roa
Signing time:             Tue 16 Apr 2024 04:05:48 +0000
ROA not before:           Tue 16 Apr 2024 04:05:48 +0000
ROA not after:            Wed 16 Apr 2025 03:56:56 +0000
asID:                     10002
IP address blocks:        61.195.128.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5034FBBCE0799A0F28683BD3BA339A9BD645BDC
        Validity
            Not Before: Apr 16 04:05:48 2024 GMT
            Not After : Apr 16 03:56:56 2025 GMT
        Subject: CN=2AF9C5AB20EF93492D8AE44644C98A6992C1B2DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:12:5e:be:6f:1b:b2:3a:fa:81:f8:62:df:f7:
                    c8:b3:a2:91:ab:0f:12:83:7c:9c:42:d9:39:13:92:
                    0e:f6:47:8f:a6:db:2b:7d:d4:2f:15:e4:3d:70:26:
                    c6:cf:f7:59:3f:de:a1:49:72:1a:40:58:93:32:5c:
                    a0:5f:81:75:e5:bb:1f:e4:c1:81:3c:11:96:4d:2a:
                    64:6c:41:60:b7:f0:55:fc:9c:0d:8a:81:1d:05:53:
                    63:5b:a1:9e:17:b2:f6:d8:44:8e:88:cd:05:a8:32:
                    45:14:59:53:9f:bb:ee:d6:b8:05:e4:89:52:ee:b2:
                    ab:e2:aa:1b:48:d6:ad:69:5b:b1:d1:9a:78:7f:94:
                    6a:3a:31:85:b6:dd:33:ca:ab:c6:26:e0:4f:b5:1c:
                    01:a6:c5:ee:c4:0c:f8:ff:ef:28:2b:ef:70:b0:1b:
                    a3:9a:96:60:7a:d1:46:53:63:3b:1a:ac:6f:f6:91:
                    9c:9b:98:c5:0f:b4:04:b5:ca:dd:bf:9a:1a:dc:3e:
                    58:9e:6c:e6:dd:3b:fb:cf:24:48:78:25:6e:a7:ab:
                    46:bb:bd:17:04:58:4e:97:64:89:49:7a:4c:1e:04:
                    7e:07:2c:7e:37:2c:65:63:de:b0:58:7d:5b:95:e3:
                    82:bb:2b:bc:cc:df:68:20:d9:60:0d:fb:7f:fe:cd:
                    c8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:F9:C5:AB:20:EF:93:49:2D:8A:E4:46:44:C9:8A:69:92:C1:B2:DB
            X509v3 Authority Key Identifier:
                keyid:C5:03:4F:BB:CE:07:99:A0:F2:86:83:BD:3B:A3:39:A9:BD:64:5B:DC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/xQNPu84HmaDyhoO9O6M5qb1kW9w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xQNPu84HmaDyhoO9O6M5qb1kW9w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/447/KvnFqyDvk0ktiuRGRMmKaZLBsts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.195.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         99:44:50:0f:11:30:6f:79:77:76:ff:0e:d6:a0:58:15:f3:f9:
         c6:a7:c0:c4:15:30:3e:4a:6e:3e:d1:01:14:4a:a5:52:ff:88:
         b4:ac:e1:7d:49:92:c2:ea:25:46:15:9f:61:77:3a:8e:6c:44:
         2e:d0:d2:f4:e4:e2:c9:27:3d:5a:4c:86:be:a3:9b:5b:ba:1a:
         81:c8:70:d2:5a:77:f5:ab:4d:d0:36:ce:e0:8e:51:ed:a1:6a:
         ec:63:c2:43:51:b1:f5:4a:93:ee:80:f8:6c:b6:ab:ff:58:97:
         b5:9e:c6:3a:ad:a4:43:d5:23:37:45:a8:13:81:30:43:36:f2:
         0c:21:99:a6:a7:70:7a:1f:e3:05:f6:5c:74:11:7f:66:cd:87:
         eb:2d:f4:58:33:88:30:d7:8b:54:e1:a4:b8:e8:35:ef:a0:25:
         67:c4:28:9e:a3:5b:c8:53:d7:f3:33:64:ed:7b:f3:86:05:f0:
         90:e9:b1:7e:e5:fa:e9:d8:0e:9a:19:9c:33:aa:f6:74:02:21:
         9e:89:59:46:e4:84:ac:38:e3:a9:fb:04:f0:cf:54:cd:49:26:
         ed:54:4e:36:07:ec:d5:13:21:6d:65:73:06:ca:96:ec:a0:77:
         48:f1:4c:95:a7:13:a9:5d:12:70:f1:95:33:d0:20:33:c7:4f:
         cd:b0:d6:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org