Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/RqBr8jv8Dgub4nv_4bT0VT81YvQ.roa
File:                     RqBr8jv8Dgub4nv_4bT0VT81YvQ.roa (raw, json)
Hash identifier:          7U7HpHMFqD156+Vi6cwogHzaesmhN5OlxKtYso16/bc=
Subject key identifier:   46:A0:6B:F2:3B:FC:0E:0B:9B:E2:7B:FF:E1:B4:F4:55:3F:35:62:F4
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0159
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/RqBr8jv8Dgub4nv_4bT0VT81YvQ.roa
Signing time:             Wed 31 Jul 2024 01:31:21 +0000
ROA not before:           Wed 31 Jul 2024 01:31:21 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        113.197.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 345 (0x159)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:21 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=46A06BF23BFC0E0B9BE27BFFE1B4F4553F3562F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:6a:74:08:07:47:0e:19:bf:8f:31:a2:2e:8f:
                    d1:77:5d:5d:79:00:3a:55:bb:cf:94:36:dc:a5:d2:
                    40:ee:a2:b7:65:6a:1b:de:b0:81:34:d7:9c:37:2b:
                    ac:8a:8e:d0:ef:52:c8:51:4e:9a:cd:b1:4a:c0:65:
                    cf:b3:27:db:1b:04:53:ef:c4:5d:15:af:70:c9:23:
                    29:e2:0f:04:8a:ce:1f:d9:e8:19:5e:ae:e0:cd:f6:
                    ba:d5:09:df:d4:7d:c0:24:5a:1d:34:72:ba:9a:ee:
                    9b:d3:a8:6e:f1:3a:3e:c0:d9:44:49:db:8e:68:e5:
                    a3:5c:22:a6:b3:18:7f:1f:0e:c3:e2:e4:c2:9a:8d:
                    5a:e8:31:9c:7b:a5:a8:09:6f:01:7d:41:f1:de:d8:
                    04:cf:55:b5:09:32:41:43:5a:54:91:b5:dd:7f:96:
                    41:d9:db:d6:08:20:01:a7:88:f3:b2:6c:3e:55:db:
                    99:b3:d2:6f:19:e8:a6:70:f4:35:18:bb:2e:4c:9b:
                    cf:2d:4f:00:7e:57:6d:f2:5f:ba:f4:a6:87:36:f1:
                    1e:37:b4:c9:8d:69:36:9e:73:4f:44:69:aa:4f:dc:
                    31:53:04:0f:87:c6:2d:0a:1f:66:22:78:ad:29:76:
                    a2:53:c9:e3:dd:45:00:d1:98:70:ba:41:91:3f:5c:
                    57:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:A0:6B:F2:3B:FC:0E:0B:9B:E2:7B:FF:E1:B4:F4:55:3F:35:62:F4
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/RqBr8jv8Dgub4nv_4bT0VT81YvQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.197.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         29:7a:4c:4f:81:df:53:79:48:8a:3b:77:b8:3d:85:8e:54:77:
         f4:6d:b8:29:5f:81:a4:eb:35:02:1b:7e:a5:01:27:55:9c:4e:
         39:08:11:a7:0e:9e:14:8b:db:71:52:17:97:35:2a:32:d7:62:
         e5:ca:b6:75:08:12:9a:80:7c:60:9a:24:76:77:55:a6:e1:b3:
         e8:34:d3:0c:a1:d9:a4:fb:ce:ff:36:79:57:52:08:4f:fa:0d:
         42:6e:5c:1c:82:ea:a7:a2:25:78:4b:48:04:54:17:89:83:41:
         6e:bc:e7:de:bf:46:94:1a:bd:98:cf:f6:d3:5d:c0:8f:bc:ea:
         15:6b:3f:5a:60:c0:0a:d4:55:09:33:64:52:dd:cf:74:c7:02:
         c3:8c:b7:0f:3e:6b:00:13:48:a7:b3:e2:d9:06:47:2f:07:aa:
         4d:c5:d6:1d:6d:ab:8b:ef:da:2b:7a:54:68:df:f6:a5:e0:48:
         a5:82:e5:42:3b:e4:16:7c:f0:a7:a6:fd:f5:d9:c5:da:f6:72:
         c5:f2:d1:52:3e:6e:32:d3:a7:13:41:b6:84:48:8b:21:d1:b3:
         38:7d:9a:cf:7b:b9:a9:9f:77:32:bb:1a:de:a4:59:7f:f8:f2:
         fd:50:e1:6d:6c:f6:c5:6c:66:09:59:0f:8c:85:8d:b3:81:2d:
         53:da:c9:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org