Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/wf6rhgufaDBU8yhsFlYoxWCR7JQ.roa
File:                     wf6rhgufaDBU8yhsFlYoxWCR7JQ.roa (raw, json)
Hash identifier:          /hkJP3uoVLbYVQQ4RDpBzfIBj+IPGTOp2XiBS7m3El0=
Subject key identifier:   C1:FE:AB:86:0B:9F:68:30:54:F3:28:6C:16:56:28:C5:60:91:EC:94
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       47
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/wf6rhgufaDBU8yhsFlYoxWCR7JQ.roa
Signing time:             Mon 01 Jan 2024 01:30:32 +0000
ROA not before:           Mon 01 Jan 2024 01:30:32 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     10011
IP address blocks:        124.108.56.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Jan  1 01:30:32 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=C1FEAB860B9F683054F3286C165628C56091EC94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:bd:15:60:95:fb:28:77:0b:cb:c8:36:c3:
                    a8:e3:1f:48:d3:ca:0c:f1:95:22:d2:f0:fe:5e:1c:
                    c5:1e:91:79:a8:ea:2b:a9:dc:9d:46:a3:42:75:79:
                    ba:d7:98:f9:d4:48:9c:92:7e:5f:28:c5:5d:ad:cb:
                    1d:32:bf:8f:07:c9:bf:4f:2b:66:42:a7:50:d5:f0:
                    dd:a4:47:5e:1e:0d:a1:95:61:13:6b:81:8a:e2:36:
                    34:90:83:cf:c8:83:51:53:7e:48:4d:7b:7e:4b:d8:
                    82:41:c7:15:bf:12:a7:e9:c4:e9:63:09:bb:eb:8c:
                    00:2e:87:da:34:f7:07:93:e8:8a:de:86:0f:a5:e3:
                    b9:c4:2d:a6:f6:8c:f1:c1:c1:53:37:f1:6a:20:37:
                    f0:ac:76:56:cc:09:ea:60:e8:a9:38:bf:7b:a0:c3:
                    b7:cd:45:3a:00:82:a1:fe:ff:1f:51:10:6d:c0:e4:
                    ac:8d:c9:d6:8d:a4:a5:a3:dd:7e:f3:1a:6e:c5:94:
                    dd:46:90:72:ec:71:89:a0:a6:6e:ae:bf:26:5b:23:
                    b6:04:85:e2:65:0a:23:76:13:8a:2b:e3:67:18:93:
                    a7:ad:26:dc:6a:d5:7f:f7:74:d1:37:78:85:bf:47:
                    f8:e9:ef:dd:20:09:9d:c9:2a:41:26:22:dc:56:db:
                    33:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:FE:AB:86:0B:9F:68:30:54:F3:28:6C:16:56:28:C5:60:91:EC:94
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/wf6rhgufaDBU8yhsFlYoxWCR7JQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.56.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:05:bd:1f:b9:5c:39:64:54:7d:28:59:83:e2:b6:52:03:8e:
         ed:4f:66:00:88:10:a3:e3:bf:2e:56:e3:86:39:3c:63:ba:17:
         47:ba:67:2b:64:b5:f6:34:e2:c8:3c:a0:ec:b1:48:37:6e:96:
         e8:8a:02:eb:ed:cc:6e:13:1e:c3:8b:b2:8d:64:b8:80:40:ea:
         d1:b3:08:74:4c:00:60:57:ee:9a:c1:ee:54:a7:72:4b:95:68:
         27:3a:92:cf:f5:dd:8d:cb:c0:9f:7b:99:27:6e:56:bc:76:1f:
         8d:c1:69:63:ca:b8:d1:b5:99:c2:9c:1d:c7:a9:c7:79:6f:02:
         25:c3:57:05:ab:ab:a0:8f:03:dc:b3:a3:55:a4:fd:96:d8:5b:
         81:2a:24:3a:41:0b:d9:f8:a0:35:c3:ea:f8:1c:01:f9:f4:49:
         a2:0d:eb:9f:ee:ab:12:bb:2a:cc:08:29:22:0e:39:25:2b:6a:
         a3:6b:27:dc:a2:b2:ff:e7:39:86:e6:19:2a:7a:de:a4:51:17:
         e6:71:39:18:b7:df:48:85:c0:df:3d:b7:8a:e3:6f:97:e1:b2:
         fe:13:56:14:fc:0b:ec:11:3a:e9:b1:b4:b7:d4:d3:08:85:9b:
         60:db:f9:9c:f9:17:cd:6b:38:e2:be:c1:7f:18:b7:a1:39:e1:
         dd:18:74:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:44 2024 by rpki-client on console-fra.rpki-client.org