Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jIs-aUpUvZZuXZbH9B9RJSdjQ2g.roa
File:                     jIs-aUpUvZZuXZbH9B9RJSdjQ2g.roa (raw, json)
Hash identifier:          QgNP4SNPvUegKFskfiaa1ANVopt/OAPqKeo2Ys2vmqM=
Subject key identifier:   8C:8B:3E:69:4A:54:BD:96:6E:5D:96:C7:F4:1F:51:25:27:63:43:68
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0175
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jIs-aUpUvZZuXZbH9B9RJSdjQ2g.roa
Signing time:             Wed 31 Jul 2024 01:34:18 +0000
ROA not before:           Wed 31 Jul 2024 01:34:18 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        219.126.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 373 (0x175)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:34:18 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=8C8B3E694A54BD966E5D96C7F41F512527634368
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bc:58:56:c2:91:7f:ab:6c:d0:54:6a:b9:c0:
                    0c:07:2a:36:a0:c7:b9:36:a6:be:7a:1a:10:05:5d:
                    46:35:cd:79:5b:57:50:d1:13:25:52:1b:cb:44:cb:
                    b3:dc:d2:fc:a0:ed:a5:ec:96:70:84:83:d6:9f:dd:
                    0f:5f:49:db:82:9f:6a:cf:b3:24:46:4f:41:0b:53:
                    bf:a8:94:74:cf:16:7a:4a:06:df:b7:1d:f2:4a:63:
                    3d:07:70:16:c5:80:98:a2:06:b9:c2:91:93:bf:3e:
                    95:8b:23:b6:e6:14:03:b2:71:a0:07:7e:6e:ae:87:
                    31:01:34:f7:b8:e9:2f:85:d8:39:7d:de:98:ba:d0:
                    19:e3:a7:e6:95:86:78:ad:e3:03:73:1c:02:2f:4c:
                    c8:0f:7b:3a:60:a7:b1:81:13:a0:e9:e6:9b:e6:9e:
                    1f:ce:4f:5e:5f:ad:57:6b:d4:28:05:3e:bc:ab:50:
                    90:c0:40:fb:ed:d3:58:19:a6:5e:b9:b9:3c:a4:20:
                    86:37:23:64:22:aa:ae:74:e5:aa:8b:74:a6:75:c8:
                    3a:7b:6d:b6:a2:90:e1:2a:f7:6e:83:47:68:7d:fa:
                    da:f8:2b:d4:7b:2b:4f:ab:55:8e:8a:36:f9:f2:ad:
                    2b:61:82:74:75:76:f7:80:ba:52:c7:96:b4:74:48:
                    89:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:8B:3E:69:4A:54:BD:96:6E:5D:96:C7:F4:1F:51:25:27:63:43:68
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jIs-aUpUvZZuXZbH9B9RJSdjQ2g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.126.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         2a:79:81:16:dc:d8:1b:21:25:98:4f:01:01:bd:da:29:10:26:
         58:1d:70:67:b9:a1:e0:3f:23:c7:bb:7b:86:d3:b6:0b:9d:45:
         ca:7d:e6:12:6d:11:86:bf:58:27:88:6a:6b:88:b2:e9:97:20:
         81:2b:a1:b9:d5:10:69:78:16:61:04:4d:5c:0a:d3:be:bb:f7:
         7d:0c:8f:58:12:ed:f3:6a:86:cd:01:3d:b0:15:fe:70:f0:68:
         aa:25:45:24:f4:b1:69:81:11:a6:4c:d1:1a:f5:50:a9:a9:24:
         7a:32:08:33:ac:08:46:89:22:c6:ef:84:3c:81:8e:9a:e5:ba:
         43:cf:f4:e0:1f:df:c4:16:29:e0:da:01:26:62:b0:12:ae:3e:
         87:3b:ac:48:d9:05:b3:82:04:ff:1e:cc:a8:8d:31:f9:90:68:
         ed:ad:ba:72:7f:dd:27:0b:6e:d8:ec:48:c2:a3:6d:36:8c:a6:
         af:c5:40:a8:f0:19:c0:ef:25:3f:0d:6f:a7:63:ef:8d:48:02:
         1a:29:65:e1:3e:a1:ff:1b:82:3e:35:bb:60:e8:28:07:61:14:
         83:e5:e6:7d:a1:81:eb:67:bb:93:02:89:06:30:c6:1a:a7:10:
         f0:64:9e:87:d2:d0:27:21:4e:10:55:b4:7c:98:fc:59:57:95:
         df:eb:ee:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:24 2024 by rpki-client on console-fra.rpki-client.org