Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa
File:                     BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa (raw, json)
Hash identifier:          Gu9Euv8qQPFKbirJ2sdIn0U9waJ9P8x0vSmO5/F4VSI=
Subject key identifier:   05:31:27:35:8B:24:F3:F1:78:EA:72:90:D3:21:94:D4:A7:73:02:84
Certificate issuer:       /CN=296966DD720C30575F62D8FD4149458A90AACAA4
Certificate serial:       6B
Authority key identifier: 29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa
Signing time:             Wed 31 Jul 2024 01:31:16 +0000
ROA not before:           Wed 31 Jul 2024 01:31:16 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        172.122.0.0/15 maxlen: 15

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:32:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 107 (0x6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=296966DD720C30575F62D8FD4149458A90AACAA4
        Validity
            Not Before: Jul 31 01:31:16 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=053127358B24F3F178EA7290D32194D4A7730284
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:22:14:48:55:ef:25:f0:d8:f8:c7:51:4b:e1:
                    2d:94:5b:d0:1f:81:f5:df:c9:14:32:8e:e3:4d:79:
                    c4:7a:e7:5d:44:04:fb:37:fd:58:87:2b:f5:a5:fe:
                    cd:7f:06:23:91:bb:d7:7c:22:f6:e3:8a:57:bb:e6:
                    dd:53:57:8e:55:c2:2c:8d:08:be:8f:13:29:65:a9:
                    b9:91:56:0d:54:ba:f7:24:dd:80:e1:74:f5:9b:41:
                    3f:0c:d8:08:92:fe:4a:6c:d7:75:1b:5d:84:6a:e5:
                    4a:3d:54:30:e9:a8:6b:9d:72:b1:03:bc:10:16:a9:
                    5b:97:76:c8:34:ed:18:04:96:91:77:f9:9e:24:91:
                    dd:5d:5e:09:0b:6b:4c:63:79:8b:69:ea:c8:b7:cc:
                    c2:2e:f1:3f:ce:77:34:e9:c0:d5:34:c9:cc:91:c0:
                    10:ea:e9:52:a8:75:d7:89:c2:ea:34:1c:e5:dc:73:
                    f6:76:ce:bc:d9:c0:58:0e:73:81:0f:1a:d0:00:cc:
                    44:d1:5a:c5:63:ec:5d:28:e9:67:03:fc:b6:a0:2a:
                    62:16:4b:42:c9:c2:c2:66:3a:ce:45:4f:ed:35:69:
                    db:6b:e0:e3:e4:16:b3:aa:ad:ce:db:2f:1a:94:25:
                    2d:b7:53:82:22:d6:d9:0c:fe:45:23:1f:67:8a:62:
                    a3:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:31:27:35:8B:24:F3:F1:78:EA:72:90:D3:21:94:D4:A7:73:02:84
            X509v3 Authority Key Identifier:
                keyid:29:69:66:DD:72:0C:30:57:5F:62:D8:FD:41:49:45:8A:90:AA:CA:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KWlm3XIMMFdfYtj9QUlFipCqyqQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KWlm3XIMMFdfYtj9QUlFipCqyqQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/BTEnNYsk8_F46nKQ0yGU1KdzAoQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  172.122.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         b9:d3:09:e1:de:67:05:4e:06:ca:51:8c:39:be:09:a7:06:dd:
         9e:b8:6f:2c:6a:cf:94:d0:6c:fa:6d:8b:5f:19:8b:8b:35:32:
         aa:df:0e:48:e3:5c:6e:8f:af:d3:cc:7d:7f:73:ae:74:f9:ec:
         6d:86:92:6b:82:1f:6e:63:ca:50:b9:47:e0:17:fa:30:f5:bb:
         38:10:54:a2:c6:95:cd:d3:5e:8d:19:bf:ca:aa:9f:04:8b:55:
         01:e9:d8:de:c0:5f:b2:a2:51:c1:14:96:28:d1:1d:9f:f1:b4:
         fe:9f:e5:0d:c7:fa:b2:93:e9:06:69:24:79:70:e2:2a:96:58:
         ab:6a:56:65:0e:3b:4c:5f:5a:54:49:e1:3a:ae:fb:19:53:b1:
         14:9e:69:2b:73:33:b0:3b:1f:21:9f:41:40:dd:a5:74:36:09:
         7e:9a:37:70:b1:10:3f:52:76:34:14:7c:0e:3c:d8:65:f6:da:
         92:8b:ba:0f:82:f5:f1:1a:90:7f:ed:46:aa:f0:bf:f6:bd:e0:
         40:fe:a9:00:92:d5:a7:2a:c8:14:b4:e4:e1:5a:66:23:c3:4c:
         12:55:d7:c5:1b:40:32:5f:7a:66:c3:0f:5f:ce:5b:30:5a:5d:
         f2:4b:8c:f8:46:a0:34:25:8e:b8:92:6f:cd:1a:11:91:45:97:
         c1:3e:f5:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:05 2024 by rpki-client on console-fra.rpki-client.org