Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
File:                     utCp3437n7Cj0eyPlIcF5V31WrY.roa (raw, json)
Hash identifier:          DqwZLT/8Eun3YmDMP/+afhMHRCzouu4Z8CBqcSoVcFg=
Subject key identifier:   BA:D0:A9:DF:8D:FB:9F:B0:A3:D1:EC:8F:94:87:05:E5:5D:F5:5A:B6
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0165
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
Signing time:             Wed 31 Jul 2024 01:31:27 +0000
ROA not before:           Wed 31 Jul 2024 01:31:27 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        58.138.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 357 (0x165)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:27 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=BAD0A9DF8DFB9FB0A3D1EC8F948705E55DF55AB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:c0:7f:92:2d:3e:4f:d4:d3:99:64:83:08:7a:
                    3d:ec:98:98:be:52:6b:2d:be:70:43:a1:ce:e6:d4:
                    97:f6:ce:97:e3:f0:59:2f:e2:18:61:49:c0:1e:ca:
                    08:2b:00:81:c6:80:8d:07:29:17:2c:99:bd:7e:cf:
                    ab:8d:3d:53:1c:9f:54:7e:64:de:eb:6f:5e:62:23:
                    5f:2f:bb:51:8b:e4:94:17:75:2d:8d:ba:52:ee:77:
                    0e:de:a7:28:2e:01:9c:99:66:a8:b8:13:80:83:0c:
                    2f:bd:95:70:58:a8:4d:80:32:0b:d5:ef:8b:d2:4a:
                    8c:95:90:8c:c6:5b:f1:36:96:1a:0b:e2:e3:ef:ba:
                    77:dd:e0:69:8d:fa:ef:b5:87:f6:0f:5b:e4:b3:8c:
                    29:4a:a8:3d:08:08:56:28:a5:34:ad:26:86:b6:65:
                    3e:7b:b4:9f:67:8b:8d:c5:21:79:5c:59:7f:74:33:
                    cc:e7:76:b1:0d:03:d4:c9:f7:da:f1:d4:cf:01:f7:
                    c1:c2:ee:ea:0c:8d:ef:a7:99:17:82:a6:95:ef:c6:
                    bb:3b:84:ab:ef:27:f9:49:51:cf:c1:a1:a7:cc:c2:
                    ad:01:a6:08:d7:ca:ed:24:6f:c9:2f:0c:67:5e:c9:
                    61:b7:d2:37:c5:43:12:4f:af:23:a7:86:c6:2b:de:
                    28:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D0:A9:DF:8D:FB:9F:B0:A3:D1:EC:8F:94:87:05:E5:5D:F5:5A:B6
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/utCp3437n7Cj0eyPlIcF5V31WrY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.138.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         35:6d:5c:86:20:cf:cf:65:ed:e8:3a:37:7a:2d:39:7f:b4:0c:
         bf:57:9e:d9:86:b9:c9:0b:2c:96:68:df:cf:9f:c9:1b:6f:ed:
         66:0b:fe:f6:c7:3e:b7:48:bf:7a:5c:59:4b:89:52:40:bf:d9:
         22:8d:0c:04:d2:ab:59:b7:3f:18:43:b8:db:c9:77:8c:d0:c7:
         da:1e:8a:ac:ec:26:93:52:bb:e8:d7:3b:2b:fa:a0:e1:40:75:
         aa:ae:7c:3e:a7:3f:b2:92:49:f4:81:b0:95:d6:e8:bb:2c:ec:
         24:30:c5:b4:be:58:67:c4:55:22:86:f6:92:2a:59:57:e8:5a:
         b8:25:f6:23:e7:5a:f6:88:38:6b:3b:5a:eb:4f:7c:29:0f:b0:
         97:17:9d:9b:4e:63:7d:13:51:51:79:d1:f9:7c:09:1b:60:cb:
         39:0b:b8:46:27:01:e7:62:7c:41:83:56:82:6c:31:66:a2:b2:
         10:60:bf:dd:b2:d5:31:f9:5f:78:36:2d:ae:ce:78:a0:3c:15:
         c2:11:25:6b:6f:a3:1b:ad:3e:41:24:e2:bb:d9:c6:dc:e9:a7:
         ac:53:75:5e:25:12:68:8b:68:3c:a8:f2:b4:44:b1:de:20:84:
         e3:93:e1:20:50:af:7f:62:40:04:e2:68:39:81:b8:c1:3c:f5:
         16:02:ce:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org