Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
File:                     TeFIAGh8mHNW7jDEdYkliGIdtO8.roa (raw, json)
Hash identifier:          5b0Y94Vigzy7DrmZGS1PbZ4/u13TJN0XsRkIi/YX71o=
Subject key identifier:   4D:E1:48:00:68:7C:98:73:56:EE:30:C4:75:89:25:88:62:1D:B4:EF
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0158
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
Signing time:             Wed 31 Jul 2024 01:31:20 +0000
ROA not before:           Wed 31 Jul 2024 01:31:20 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        202.141.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 344 (0x158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:20 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4DE14800687C987356EE30C475892588621DB4EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:66:d7:14:de:c9:54:a5:09:fb:43:72:09:d4:
                    65:3d:a7:70:42:29:11:ca:fd:7b:43:1f:19:e4:fb:
                    b9:f4:95:dd:fd:7c:32:d2:6b:e7:6a:c2:52:db:d7:
                    3f:d3:52:f6:e3:79:5b:32:96:85:23:db:f1:7b:4d:
                    ce:3b:6a:e0:2d:21:82:8d:ae:66:e5:00:e4:16:f2:
                    4a:6b:e3:ae:1f:2f:0f:34:79:69:c8:5d:c4:dc:15:
                    5d:a7:71:6d:94:6f:aa:4f:97:77:aa:0c:7a:a3:34:
                    67:99:7d:f6:f9:58:5a:f1:95:76:86:05:dd:dd:ef:
                    ed:c8:f0:18:76:32:f3:58:4c:97:d6:d6:86:51:01:
                    b5:82:9b:cd:c5:64:d0:33:ae:84:98:b7:4d:37:5d:
                    ae:f1:36:2d:e9:81:89:8d:e0:0f:a1:db:18:d2:e7:
                    05:bc:c0:2b:8e:b9:00:dd:ed:6b:d9:85:a0:ac:90:
                    be:33:63:de:29:4a:97:3a:da:8c:d7:3f:78:05:b5:
                    49:c7:e5:4f:d8:17:95:44:0c:25:1a:4c:55:64:85:
                    0e:e9:1c:7f:f2:d4:49:6a:7a:cb:14:db:02:50:e1:
                    0c:07:86:04:f1:4c:56:f2:df:3e:50:03:c5:51:ef:
                    05:2a:27:56:38:39:c6:e3:fe:34:2e:b1:92:09:16:
                    54:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:E1:48:00:68:7C:98:73:56:EE:30:C4:75:89:25:88:62:1D:B4:EF
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TeFIAGh8mHNW7jDEdYkliGIdtO8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.141.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         1d:52:5c:93:fe:db:a9:18:63:d6:e5:b7:f8:38:09:38:07:3c:
         9c:97:ce:71:e2:d5:76:db:25:39:6a:fc:4a:2f:95:ee:09:97:
         e8:68:26:99:52:37:29:38:c3:23:91:49:5c:da:55:48:1b:28:
         9c:9b:e1:4a:db:2a:1e:0d:fe:63:fd:7c:4a:df:a8:76:98:b4:
         9a:fe:f6:d2:41:60:87:50:ba:91:a7:74:50:c7:26:ab:1f:0d:
         5f:b7:9b:b5:3c:f3:84:1f:b7:16:4d:ff:43:af:04:43:27:76:
         5c:b8:9b:6c:8e:a4:b3:17:07:e4:fc:99:4c:4c:cb:b5:5c:1d:
         65:19:1c:3d:4e:5b:5c:b3:77:0c:3a:d3:3c:f9:3c:72:c5:e5:
         1f:0f:08:61:2c:5b:a3:a6:37:65:fa:49:b3:b6:38:a7:26:f0:
         75:07:12:e8:1d:32:bc:04:c1:db:83:0d:1e:c6:6b:4f:01:ed:
         86:bf:ce:ee:b0:19:d1:f9:63:35:5d:c8:50:3d:fa:1a:a9:4e:
         cc:25:66:41:68:82:00:f6:c7:7d:11:6d:1f:c0:86:91:79:b0:
         a2:9a:b8:14:e4:c2:74:73:69:f0:0f:37:da:e7:1f:aa:14:87:
         d0:01:80:73:d5:8e:18:37:0b:78:40:05:9b:6d:5a:cb:a4:3b:
         fc:ff:f1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org