Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/TifLDvU0aPvw8RvGWzoafDvZxf4.roa
File:                     TifLDvU0aPvw8RvGWzoafDvZxf4.roa (raw, json)
Hash identifier:          UuUfh8l9qyKQsIB/MFdadg9u2DVh9EAkrIgJ0A4QCWY=
Subject key identifier:   4E:27:CB:0E:F5:34:68:FB:F0:F1:1B:C6:5B:3A:1A:7C:3B:D9:C5:FE
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0155
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TifLDvU0aPvw8RvGWzoafDvZxf4.roa
Signing time:             Wed 31 Jul 2024 01:31:18 +0000
ROA not before:           Wed 31 Jul 2024 01:31:18 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        49.239.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 341 (0x155)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:18 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=4E27CB0EF53468FBF0F11BC65B3A1A7C3BD9C5FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0b:1e:54:cc:72:31:2f:5a:e0:5f:3c:3f:19:
                    9b:d4:1f:d5:7b:21:7b:f9:c9:72:91:8d:ad:0a:d8:
                    c4:e9:b0:19:16:b5:b8:4b:19:6c:de:cd:35:37:8a:
                    52:fa:19:66:09:81:3f:b2:88:b2:5f:2a:55:07:f4:
                    ff:69:a7:25:20:3e:a8:f9:85:18:93:4d:e4:e6:a9:
                    df:73:c0:ff:46:df:b4:5b:0c:d5:d7:08:a4:7c:73:
                    8f:93:0b:3a:90:f2:89:f8:32:59:3d:55:b4:c2:45:
                    21:be:46:e3:e4:50:3f:d9:f1:67:5a:ad:5b:b0:a1:
                    61:f3:17:31:2f:cd:23:ac:89:1c:3e:c9:6b:f8:c6:
                    00:ec:23:f1:bc:9e:69:18:99:2a:b4:00:3f:e0:d4:
                    e3:86:29:62:ee:0d:96:5c:9c:c2:16:8f:7a:bc:6c:
                    ae:ef:90:cc:ab:27:ad:d9:f9:37:4d:30:7f:04:5c:
                    87:51:67:b8:fa:5d:5d:c4:e3:ad:56:a4:46:f6:09:
                    b7:a4:6a:80:b0:48:97:16:d9:66:72:a9:86:b8:c7:
                    bb:dd:7c:c9:66:6c:91:66:a5:7b:90:da:99:d9:5e:
                    40:0c:ea:31:77:0f:d7:94:8f:c4:90:1c:df:b8:69:
                    d3:a3:14:a5:5f:a2:ed:cd:c2:71:b1:8c:bd:95:5c:
                    35:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:27:CB:0E:F5:34:68:FB:F0:F1:1B:C6:5B:3A:1A:7C:3B:D9:C5:FE
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/TifLDvU0aPvw8RvGWzoafDvZxf4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         74:18:83:b9:8c:67:c9:75:3b:70:c0:77:ea:90:5f:f1:23:6c:
         d8:a5:55:19:45:93:1d:92:65:99:2f:80:49:9f:98:81:3d:08:
         8a:a1:fe:c3:ac:94:81:15:dd:69:73:91:d4:9e:a2:dd:55:00:
         aa:cc:c2:1d:cc:c1:9d:4f:4e:94:99:6f:9f:7f:50:1a:2d:2a:
         65:34:52:e9:39:4d:79:65:26:5a:72:2a:b8:97:fd:db:ca:68:
         3d:c4:3a:76:a0:f2:96:1a:bf:50:01:20:e1:bc:a8:70:b2:28:
         72:44:f0:8b:a5:2f:5a:6e:ca:b9:cc:67:d1:19:25:97:d6:9c:
         4c:57:a5:87:81:89:5b:77:37:1d:b9:74:6d:71:e4:59:f9:a6:
         c1:cd:9b:0f:3b:ab:f2:fe:46:63:3d:0c:aa:55:b4:5a:84:b6:
         23:ab:04:6b:08:c2:95:96:99:74:34:ba:68:df:9d:f6:78:d9:
         9d:44:fa:2a:f3:37:da:24:dc:df:9c:1c:95:60:6a:ca:8e:63:
         c9:c6:f3:51:58:91:71:de:f4:f5:b6:28:0a:32:40:5a:45:9c:
         4f:27:81:67:27:49:a1:05:47:ae:f6:c9:eb:b4:ad:49:6d:81:
         db:6c:79:d2:07:bd:d3:df:72:9a:17:c3:95:23:0a:98:ae:76:
         0e:5d:c6:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org