Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/PAqq_0fyZ_eExBPt-T5UGRwFqLM.roa
File:                     PAqq_0fyZ_eExBPt-T5UGRwFqLM.roa (raw, json)
Hash identifier:          uZ6sHvDfK1rMAJC7ECzWneUffuk1NwZNMk8UblSJJn8=
Subject key identifier:   3C:0A:AA:FF:47:F2:67:F7:84:C4:13:ED:F9:3E:54:19:1C:05:A8:B3
Certificate issuer:       /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial:       0E
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PAqq_0fyZ_eExBPt-T5UGRwFqLM.roa
Signing time:             Thu 05 Oct 2023 03:26:06 +0000
ROA not before:           Thu 05 Oct 2023 03:26:06 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     4685
IP address blocks:        131.129.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 05:56:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
        Validity
            Not Before: Oct  5 03:26:06 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=3C0AAAFF47F267F784C413EDF93E54191C05A8B3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:27:c3:0f:91:8b:6d:33:11:22:a0:42:6d:61:
                    f8:d6:3f:86:60:70:46:03:1b:1f:c6:9e:e8:ef:94:
                    ad:72:a3:02:af:7f:43:f6:d6:b7:17:5f:b8:de:f8:
                    7f:03:ae:68:6d:b6:f6:97:34:47:c0:3b:0c:a3:f0:
                    f0:9e:99:b3:45:4f:86:15:ef:04:7f:3b:2f:d4:a3:
                    f1:c6:8e:73:68:3e:b9:9a:d2:2b:a1:c0:3f:0a:46:
                    03:87:69:fc:4d:af:6f:ae:d4:52:c8:6b:a6:a4:59:
                    9b:c0:ce:4a:39:d7:d9:fb:61:2f:1e:4b:ae:cb:0b:
                    6f:ce:d8:5b:33:c9:4d:97:12:4c:56:dd:7d:76:49:
                    04:b9:63:81:56:72:e5:41:ab:19:59:e3:8e:de:ee:
                    ea:36:7a:eb:9f:95:25:f4:b5:da:a3:df:3d:f8:f6:
                    f9:f5:a1:53:22:00:30:b6:3b:a5:da:63:41:19:51:
                    23:4e:c3:f1:1b:84:18:f5:0d:33:71:f8:b2:8a:c8:
                    fa:d1:fc:8e:ca:e9:b1:b6:53:f3:7d:b2:66:92:c4:
                    ca:60:56:19:51:3f:8c:55:a8:b6:b1:96:b3:0e:66:
                    37:9e:ee:74:20:2f:9e:66:d8:f0:b9:6e:80:63:12:
                    f7:17:cc:0b:83:5a:4d:9f:40:95:94:4a:09:76:7e:
                    72:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:0A:AA:FF:47:F2:67:F7:84:C4:13:ED:F9:3E:54:19:1C:05:A8:B3
            X509v3 Authority Key Identifier:
                keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PAqq_0fyZ_eExBPt-T5UGRwFqLM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.129.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         71:06:45:1c:93:00:d8:8b:28:11:52:2d:91:c6:95:50:64:10:
         cf:b8:4c:32:eb:0a:3f:7f:28:6e:f2:45:7e:88:18:f5:27:cd:
         77:79:9d:3c:3f:5d:52:57:2a:05:41:3f:a9:0f:66:47:de:7a:
         55:4c:98:c5:de:f5:11:cd:1d:a5:94:f9:9a:65:55:b3:66:84:
         69:f2:67:31:71:e8:8d:2b:80:5e:df:52:ba:75:b2:89:98:09:
         ed:50:0a:ab:d7:14:ac:56:77:2b:45:c3:70:07:a0:7d:1a:e7:
         71:07:37:f8:4a:86:d3:1e:f8:2e:a0:9d:4d:9a:1d:76:0d:4b:
         4e:c6:99:a8:11:39:cd:e5:eb:b8:72:c1:70:b1:7d:f8:da:67:
         c9:7a:1c:4b:1f:60:65:e0:fe:7f:aa:19:9b:64:88:01:a4:34:
         e1:98:35:06:13:d1:63:e7:10:58:d2:84:05:55:b5:07:d5:6e:
         5c:b2:eb:f8:e4:3f:ba:7a:f9:b6:ef:f3:9c:ad:a3:02:ae:4c:
         1f:df:b4:ff:9d:96:a5:6f:67:88:fb:1b:26:5d:d2:16:1e:b7:
         5b:36:78:67:4c:c2:24:4e:bb:f4:dd:bb:c3:a1:ad:f9:d6:11:
         e8:5f:09:e9:fe:2f:51:e2:30:ba:9f:8d:66:c3:90:0e:3b:4a:
         43:47:62:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:47 2024 by rpki-client on console-ams.rpki-client.org