Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/tPGNxUZ62Qnhoq8mbY9Tm57nHKg.roa
File:                     tPGNxUZ62Qnhoq8mbY9Tm57nHKg.roa (raw, json)
Hash identifier:          XLmVBf138B6mzBfghklU2nqfGZSf8uuH0Th+X4zJ+q0=
Subject key identifier:   B4:F1:8D:C5:46:7A:D9:09:E1:A2:AF:26:6D:8F:53:9B:9E:E7:1C:A8
Certificate issuer:       /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial:       21
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/tPGNxUZ62Qnhoq8mbY9Tm57nHKg.roa
Signing time:             Sat 31 Aug 2024 01:34:04 +0000
ROA not before:           Sat 31 Aug 2024 01:34:04 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        138.64.0.0/16 maxlen: 16

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 33 (0x21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
        Validity
            Not Before: Aug 31 01:34:04 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=B4F18DC5467AD909E1A2AF266D8F539B9EE71CA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8b:67:4e:a1:22:87:2c:dc:e7:87:10:d5:78:
                    97:5a:86:29:88:fa:81:f5:8a:4e:0b:75:6a:11:60:
                    2c:60:35:26:ca:1f:79:ff:5a:e1:1f:c6:31:2a:df:
                    fd:06:56:e0:7a:79:79:84:6a:2d:5e:ac:11:84:6a:
                    f1:f3:70:ed:df:73:c2:95:e0:dd:1a:a4:ec:2b:a5:
                    71:7f:b8:58:d5:bd:75:e6:21:5e:ae:ef:0e:94:93:
                    17:3b:f1:52:c3:0b:0e:c2:fa:c4:0e:c1:41:88:ad:
                    4f:d4:a5:3c:f0:be:c2:70:c4:e6:2b:98:0f:a7:98:
                    da:64:d5:3d:1e:b9:3d:84:ef:69:52:67:3d:9e:5b:
                    f4:8b:5b:c0:51:57:21:e0:c7:27:24:a9:b7:07:44:
                    86:80:ea:76:3c:2e:12:1c:fb:75:27:52:2c:a3:f5:
                    22:5f:25:84:e4:8d:2c:0f:dc:ff:3e:63:01:90:50:
                    3e:27:32:ea:fb:80:73:a7:32:9c:5b:02:14:11:30:
                    b9:00:2a:51:39:b5:6b:00:96:29:c7:7e:81:1e:f5:
                    26:90:32:59:48:20:e5:6c:03:90:da:2b:ba:7d:65:
                    26:29:bd:4c:5d:5c:b5:ad:df:9d:f2:13:a4:01:54:
                    99:4f:e5:64:98:65:96:43:1b:f5:86:6a:aa:41:71:
                    9b:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:F1:8D:C5:46:7A:D9:09:E1:A2:AF:26:6D:8F:53:9B:9E:E7:1C:A8
            X509v3 Authority Key Identifier:
                keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/tPGNxUZ62Qnhoq8mbY9Tm57nHKg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.64.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         49:81:cf:a5:9d:8b:c3:43:59:7d:9d:7d:5a:c7:0e:77:62:39:
         21:da:c3:5e:ee:6a:c7:ae:f5:3a:76:f5:c1:bf:ee:3a:a2:55:
         c7:99:d5:4b:95:28:66:fe:59:5c:9e:8e:bf:0b:69:83:5c:9e:
         b3:9e:d2:d0:7d:9b:23:e0:b5:85:eb:0e:26:ce:6a:fc:dd:f3:
         b3:d6:2c:18:c4:91:c5:3d:58:7f:c6:23:a2:6b:54:39:41:69:
         02:cd:85:a6:8c:40:f4:c4:6b:12:5b:b5:24:6d:75:d7:91:e4:
         93:30:4a:b9:6c:eb:98:7a:e5:2a:6b:9f:a8:6b:aa:f7:53:ae:
         29:43:e7:f1:2e:bc:ee:dd:d9:79:4b:30:e4:91:92:55:f8:fb:
         48:8b:73:3c:8d:d8:01:38:d9:56:45:c7:26:78:ee:a2:c1:53:
         4f:eb:63:c1:b6:62:27:a8:39:48:a8:8a:a6:e4:fc:f2:f8:ef:
         12:b9:7b:00:55:06:5f:94:8f:e9:31:45:af:1d:4e:60:b7:f7:
         24:d2:4c:36:dd:6e:cc:29:17:5a:ff:5e:70:77:e9:06:89:31:
         4b:a3:ab:94:41:6c:07:ec:8f:b5:f3:b4:d1:67:4c:31:e3:60:
         7b:79:d2:ef:b7:a2:4c:ca:30:42:f7:8e:51:17:03:e1:16:ec:
         1a:4a:a4:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org