Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ecvx7OgKzd_yGXwXakuaA6rT4A4.roa
File:                     Ecvx7OgKzd_yGXwXakuaA6rT4A4.roa (raw, json)
Hash identifier:          69oRlS4ak1cUvMYK+Iq1ww4Rvdf/Dn2FEmP4LTHM4kw=
Subject key identifier:   11:CB:F1:EC:E8:0A:CD:DF:F2:19:7C:17:6A:4B:9A:03:AA:D3:E0:0E
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       015B
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ecvx7OgKzd_yGXwXakuaA6rT4A4.roa
Signing time:             Wed 31 Jul 2024 01:31:21 +0000
ROA not before:           Wed 31 Jul 2024 01:31:21 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        118.151.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 347 (0x15b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:21 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=11CBF1ECE80ACDDFF2197C176A4B9A03AAD3E00E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:4e:54:36:f8:26:92:0f:06:d9:43:e6:96:dd:
                    a3:68:a6:03:f5:40:a6:eb:08:9c:27:39:0d:8b:d4:
                    55:6e:16:84:b9:3d:7e:98:01:35:35:74:bb:c3:2f:
                    bf:2f:c8:1b:bf:22:db:06:ef:e5:15:45:90:8d:f1:
                    f8:fb:e7:df:fc:1f:44:9a:33:1c:c0:db:11:10:ac:
                    85:c9:e0:9d:b5:90:62:bd:b8:54:d4:86:aa:7c:37:
                    86:3b:e2:95:24:0c:56:85:73:a7:3a:42:a4:54:c9:
                    6f:1b:76:8a:7f:65:98:04:42:46:6d:f5:36:e3:77:
                    4d:fc:94:b1:02:7e:88:f8:8a:eb:74:6b:1c:0d:b5:
                    bd:f0:95:bc:1c:23:06:ca:08:91:a3:e5:bf:70:33:
                    4a:3e:67:2c:f2:f2:1a:87:c0:e6:c8:83:1e:69:6c:
                    c9:f7:3d:ac:b9:00:63:c6:48:17:01:3d:44:80:0b:
                    6c:7f:6c:fc:6a:76:d1:da:51:0f:b6:67:06:05:ad:
                    4d:a9:d1:5a:40:47:9f:39:c0:3e:d3:c2:28:22:30:
                    b9:d6:8e:5c:fa:bf:2c:76:53:43:52:f8:ed:61:b6:
                    76:e7:46:06:4d:d1:12:85:77:88:b7:e4:08:ee:1a:
                    d3:80:3f:2f:19:2f:c0:ac:9d:32:27:4e:f3:5a:a7:
                    7d:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:CB:F1:EC:E8:0A:CD:DF:F2:19:7C:17:6A:4B:9A:03:AA:D3:E0:0E
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Ecvx7OgKzd_yGXwXakuaA6rT4A4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.151.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         16:5d:00:0b:5a:5f:eb:70:3e:1f:ab:77:5e:a4:59:33:ee:17:
         d0:b8:42:4c:80:fb:b7:c6:73:52:4a:ef:b7:2b:90:b0:4b:d8:
         ad:e8:18:ae:72:9b:46:29:3a:4f:c8:05:7f:47:db:16:91:58:
         68:12:b6:37:5e:34:8a:c0:48:cc:3f:03:64:99:6d:08:b9:a2:
         de:8b:34:58:a6:ee:42:23:e0:3a:62:00:b9:01:68:d7:1e:80:
         68:27:18:08:42:ca:c0:ca:7b:fe:d2:20:79:93:7f:ca:b7:8b:
         31:d7:83:f0:54:fd:bc:fe:9c:af:80:87:3d:73:21:b0:66:12:
         05:6a:07:48:30:e2:bc:4f:d8:ec:44:ee:95:bd:12:73:1f:59:
         84:a7:11:9e:34:37:f2:34:ab:fd:e5:e8:f7:d0:dc:6e:de:ae:
         d2:e3:2a:62:8f:58:26:02:b7:53:69:ef:84:61:24:0d:5a:1e:
         e0:ae:6e:a8:30:38:d4:07:1c:b3:3f:89:1c:bf:97:ce:d5:cf:
         8a:1e:03:be:3f:79:85:77:44:f8:98:2d:0c:aa:f4:6e:1b:0f:
         ea:7c:28:0b:15:d7:9c:a9:f8:06:92:1d:8c:66:7d:1b:af:d2:
         3d:23:34:b9:e9:c0:32:e2:7f:10:92:3b:41:f7:f3:5a:48:b0:
         84:f2:28:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org