Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/8_lapDd5j7SqAHtw_QW-4pt6TO4.roa
File:                     8_lapDd5j7SqAHtw_QW-4pt6TO4.roa (raw, json)
Hash identifier:          BC/2ouoXNYc14Tyov8DTwTlvRbbuF/+aCJVn8f3Ugp4=
Subject key identifier:   F3:F9:5A:A4:37:79:8F:B4:AA:00:7B:70:FD:05:BE:E2:9B:7A:4C:EE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0162
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8_lapDd5j7SqAHtw_QW-4pt6TO4.roa
Signing time:             Wed 31 Jul 2024 01:31:25 +0000
ROA not before:           Wed 31 Jul 2024 01:31:25 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        220.156.128.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 354 (0x162)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:25 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=F3F95AA437798FB4AA007B70FD05BEE29B7A4CEE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:f5:47:15:f7:88:b2:f9:f5:9b:af:d3:95:5c:
                    da:17:4e:0d:64:b7:90:2f:d6:71:f2:50:53:04:fd:
                    c1:94:32:10:e2:d1:d4:23:85:39:06:5d:8d:69:8c:
                    58:0e:e1:52:f4:86:c5:eb:11:83:0a:60:09:11:ae:
                    52:a0:19:f7:c1:1a:fb:f5:4e:69:d0:7a:2b:fe:27:
                    4f:da:c8:f2:5b:0c:a6:e5:b3:ee:f7:12:35:64:ab:
                    31:7f:e1:54:87:e8:fc:bb:4b:b8:bf:b6:c5:3f:2a:
                    4c:32:7f:e9:17:ed:f8:2c:72:a3:6f:fc:93:22:7c:
                    54:6f:6f:b4:dd:eb:e9:03:3c:82:6b:92:fe:d2:88:
                    fb:0b:10:f1:9a:5b:b6:9e:3b:35:a6:3f:ec:90:ad:
                    26:75:30:5a:bf:1a:ca:2e:dc:9d:99:90:b8:a3:89:
                    14:d6:b0:d9:b6:17:c9:3e:f2:c6:7e:6a:c4:bb:79:
                    8b:c8:a8:4d:21:71:1b:b6:bd:f2:5b:d1:02:01:12:
                    78:96:6d:08:8e:20:85:83:23:23:2f:4d:27:6c:23:
                    20:be:2b:22:12:88:a0:10:d4:ae:7c:41:c7:54:3c:
                    a4:73:e5:f9:f4:ad:5e:ae:d1:d7:a0:2e:3f:9f:b0:
                    90:bf:7d:d5:9a:84:40:59:e2:51:35:7d:08:c9:ae:
                    c1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:F9:5A:A4:37:79:8F:B4:AA:00:7B:70:FD:05:BE:E2:9B:7A:4C:EE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/8_lapDd5j7SqAHtw_QW-4pt6TO4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.156.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         37:3b:ec:40:bc:01:48:27:91:a2:07:40:27:01:5f:81:c0:dd:
         90:bd:24:e2:46:9e:ce:bb:19:72:90:b9:a0:95:42:b9:94:80:
         a7:5b:b1:23:7b:11:7b:6e:5d:c2:ca:18:1f:77:f1:52:00:23:
         5b:32:95:98:f8:4f:90:04:96:2b:fd:b3:3e:1b:7e:97:b0:b7:
         af:fe:1c:be:cf:e2:06:08:d2:e4:7d:7a:6b:e2:14:bb:5e:0f:
         fd:2b:44:92:af:d6:ba:c8:d6:4d:d3:d3:dc:84:d5:1e:df:6d:
         10:9d:9f:fd:4d:b9:47:7c:e0:80:7c:fe:73:b4:ca:b5:cd:66:
         87:35:5d:c8:be:44:dd:67:ad:98:df:78:2c:a1:18:67:fa:a0:
         7c:32:b4:f9:57:c5:aa:2a:55:6f:9d:02:6f:96:f1:66:20:18:
         b1:6c:f1:6f:94:f3:4c:d6:9e:95:0f:e1:60:c0:66:db:e7:e2:
         e6:07:c4:3b:90:af:84:5e:71:f6:89:68:0a:44:0f:2f:23:82:
         46:68:26:29:a1:55:78:92:45:db:09:a0:e6:da:86:ba:32:67:
         a3:25:e0:5a:82:bf:e5:14:93:c4:a8:85:e2:3d:02:06:68:70:
         3a:31:87:af:e8:e5:22:4c:2e:28:43:1d:49:02:c0:0e:49:5a:
         6d:04:1e:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org