Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/hx8cc8IkviuAZyVZrBFHA4drHa0.roa
File:                     hx8cc8IkviuAZyVZrBFHA4drHa0.roa (raw, json)
Hash identifier:          aag7RO3SF8L65hcp3AkrAOnBB8yNuUpUOzSOJDmqyGA=
Subject key identifier:   87:1F:1C:73:C2:24:BE:2B:80:67:25:59:AC:11:47:03:87:6B:1D:AD
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0177
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hx8cc8IkviuAZyVZrBFHA4drHa0.roa
Signing time:             Wed 31 Jul 2024 01:34:18 +0000
ROA not before:           Wed 31 Jul 2024 01:34:18 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        210.133.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 375 (0x177)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:18 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=871F1C73C224BE2B80672559AC114703876B1DAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bc:09:e8:02:69:10:60:7d:b1:d7:5c:ff:43:
                    e2:c6:6e:a4:dd:20:0c:26:84:42:75:51:9a:bb:54:
                    dd:94:70:af:4e:d7:0e:de:10:7d:67:a6:91:1e:67:
                    d7:c3:df:fd:af:15:13:d4:cd:e8:be:26:7b:48:00:
                    a1:20:2d:95:ce:21:e5:95:3a:2c:79:da:e8:20:0e:
                    0d:7a:30:7f:ec:ad:18:fc:2f:07:e8:c7:27:8e:27:
                    36:be:34:7b:af:9b:f5:eb:d1:31:51:a7:a0:c5:98:
                    15:90:bd:9f:98:2e:f1:f0:74:51:62:64:49:e4:ef:
                    e1:7b:74:25:8b:10:0a:e0:5f:12:2a:32:72:9b:6f:
                    2e:40:a4:03:3a:fa:84:50:10:ac:ef:54:ad:f0:db:
                    14:ff:ba:34:f5:04:13:eb:be:61:3b:a0:d2:66:89:
                    26:d1:b2:99:25:5c:9c:e3:93:ee:73:5b:f9:2a:a8:
                    a5:7b:5f:1d:12:d3:ed:b4:da:87:95:c2:9c:bd:cd:
                    f7:29:6a:93:3f:73:be:8c:d7:40:c9:88:1f:0d:82:
                    e5:7a:62:cc:06:86:71:ed:ed:00:cb:61:fe:7f:98:
                    4f:dc:eb:ee:18:4b:ae:3e:9f:77:54:d1:d1:82:57:
                    59:a6:0e:c1:a0:b5:84:23:f6:1a:35:90:6e:26:28:
                    e0:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:1F:1C:73:C2:24:BE:2B:80:67:25:59:AC:11:47:03:87:6B:1D:AD
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/hx8cc8IkviuAZyVZrBFHA4drHa0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         2f:8a:b7:e7:5b:99:4f:a8:1c:0f:a3:cc:78:e3:35:fd:cd:05:
         29:47:7e:d2:fc:b6:59:c4:11:c3:00:d5:83:d7:b5:04:0a:63:
         8c:aa:e1:4d:5e:a3:bb:1e:3d:96:52:a5:d6:1e:63:5b:3c:36:
         b5:4e:32:cf:2d:b4:2d:67:9b:e4:01:8a:8b:bd:13:7b:18:0d:
         fa:44:6a:c8:e4:30:af:f1:3f:22:47:0e:22:05:44:18:35:e5:
         06:c0:89:6d:81:73:b7:b1:22:f0:1a:2c:9c:9d:1d:7b:12:c7:
         2b:f0:3b:d4:2b:7c:23:18:26:e6:1e:2f:4c:73:e1:ba:60:44:
         94:1d:38:85:cb:4a:ed:41:d4:6f:34:c1:bf:5e:52:94:b0:61:
         18:48:cf:da:df:4c:05:c3:12:c4:12:1f:4c:8a:9a:3c:c1:de:
         69:a1:6b:aa:28:c1:b9:86:80:e9:4a:16:5d:e5:1d:dd:ca:b1:
         36:c6:d1:fb:cc:45:7f:5d:e5:2f:14:44:40:8c:f2:9a:de:78:
         d7:57:b8:2a:c7:61:a5:f8:3d:6d:13:6c:c4:32:da:a3:0c:79:
         77:83:03:eb:71:b9:af:40:97:2c:f7:7f:d1:82:6c:f1:81:42:
         2d:cd:aa:87:b1:44:7f:ad:d2:54:31:f0:75:db:f8:8d:20:cf:
         0a:cb:2e:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org