Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa
File:                     Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa (raw, json)
Hash identifier:          BCM0nQY2wDWVu8RU+LODuFNiunxPNbphZtRsD39RUxA=
Subject key identifier:   16:BB:38:95:37:82:E8:9E:B7:FE:5D:9C:8D:F1:B3:67:44:29:99:2F
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       46
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa
Signing time:             Sat 31 Aug 2024 01:31:29 +0000
ROA not before:           Sat 31 Aug 2024 01:31:29 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10000
IP address blocks:        114.134.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Tue 03 Dec 2024 00:11:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 70 (0x46)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug 31 01:31:29 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=16BB38953782E89EB7FE5D9C8DF1B3674429992F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:66:70:01:43:08:a7:85:b9:a7:89:6e:41:
                    ad:35:a3:26:5f:0f:cd:42:48:bc:9a:6d:39:1d:b7:
                    3e:dc:a2:c1:88:ee:91:55:b7:c0:0d:79:a8:e7:54:
                    22:e7:ed:bf:5e:e5:60:98:5f:a1:2f:f1:25:0e:ed:
                    c5:12:c6:f8:f6:ba:48:d3:bd:d4:1b:60:76:14:6d:
                    e0:47:bc:ea:d1:bf:77:0a:da:71:fa:23:fc:c0:4e:
                    51:30:e6:e4:f3:b9:93:54:05:d6:71:51:16:da:31:
                    e0:1b:f4:69:1d:2d:c1:d2:82:41:a1:53:28:f3:23:
                    49:01:55:17:fe:6e:7d:6d:47:f4:8f:21:62:e9:c6:
                    3d:c1:de:7c:f4:0e:e3:35:83:81:62:97:5d:2a:de:
                    1d:cd:22:2c:89:3a:70:65:98:d4:60:5a:be:d5:71:
                    a6:e4:7f:b9:78:c7:49:42:e9:43:c3:5a:f0:fb:33:
                    2a:81:6f:77:06:48:8c:1a:c2:ab:d9:c5:0d:c8:cd:
                    e4:ae:e4:f0:7e:92:5e:b2:ca:f6:c3:b3:57:7a:51:
                    4b:67:d2:77:8f:f3:e0:ed:c5:08:17:42:ed:12:87:
                    ac:4e:7a:77:74:b5:b8:6f:73:a5:19:48:37:23:49:
                    6b:d1:7f:ab:55:60:29:37:e1:55:28:d9:83:29:d4:
                    ab:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:BB:38:95:37:82:E8:9E:B7:FE:5D:9C:8D:F1:B3:67:44:29:99:2F
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/Frs4lTeC6J63_l2cjfGzZ0QpmS8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  114.134.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b0:aa:6e:0d:ec:2d:66:27:3b:54:5e:bf:6d:f3:af:17:78:1b:
         36:35:33:ab:0f:45:e9:71:4e:8e:70:88:d9:0a:30:bc:3a:dd:
         43:9a:72:70:ab:a1:11:b4:94:a0:32:72:de:89:17:e6:af:c4:
         b0:ec:e8:bf:0e:2d:5b:7a:f1:2e:5c:a6:86:f3:07:81:d7:6b:
         55:b5:cb:a7:f8:2c:f3:1f:fa:96:37:f6:8a:f1:68:55:75:c6:
         5b:82:61:68:a2:a1:9f:dc:63:db:77:81:58:bf:39:46:44:e0:
         bc:d1:a0:9f:8f:f8:e4:5d:11:be:32:4e:78:b1:a0:d6:d1:dd:
         3e:45:40:cc:68:d1:8b:c5:0d:22:0f:a5:17:87:e7:d7:da:68:
         af:8e:11:64:78:4b:9e:50:4a:3a:93:73:72:80:40:7c:fc:91:
         a2:1a:a1:ca:9d:ee:f8:2f:5e:87:7f:d6:55:bb:db:32:2e:96:
         d0:00:f6:e2:ef:be:1a:21:38:0d:ba:2d:64:38:c7:d3:ce:96:
         28:fd:a5:59:66:e3:bd:f8:ad:e2:95:bd:77:77:10:0f:45:8d:
         58:2c:be:45:18:1f:07:07:c4:37:5f:d9:e5:97:73:b5:d8:87:
         f9:e4:b8:af:34:f4:a5:e1:18:3d:3f:64:4d:34:9b:12:7a:fb:
         aa:ff:f7:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 26 02:17:15 2024 by rpki-client on console-fra.rpki-client.org