Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/x5is0snApy1cWT_jbrITDSgo27A.roa
File:                     x5is0snApy1cWT_jbrITDSgo27A.roa (raw, json)
Hash identifier:          DlpXoGXgeboYj45lxRyDw/YZBh1ejmZZCLHASWoTUTY=
Subject key identifier:   C7:98:AC:D2:C9:C0:A7:2D:5C:59:3F:E3:6E:B2:13:0D:28:28:DB:B0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0166
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x5is0snApy1cWT_jbrITDSgo27A.roa
Signing time:             Wed 31 Jul 2024 01:31:28 +0000
ROA not before:           Wed 31 Jul 2024 01:31:28 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2497
IP address blocks:        124.147.64.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 358 (0x166)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Jul 31 01:31:28 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=C798ACD2C9C0A72D5C593FE36EB2130D2828DBB0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:22:e8:51:e3:7c:2a:67:e7:15:37:ab:62:91:
                    a3:ad:33:81:22:04:56:d0:8e:2c:24:82:ee:53:09:
                    5b:7e:50:c1:e2:25:ed:c1:55:b7:dd:7a:8a:7c:41:
                    dd:26:56:f9:43:4b:e1:89:d8:8a:b4:78:4c:50:ed:
                    9d:c6:e5:4a:51:cf:b0:c2:d4:fa:30:c4:c1:7b:be:
                    93:f5:99:27:68:cc:5f:b0:d7:db:ab:f1:81:23:29:
                    b0:80:ce:a7:6f:70:75:52:18:f3:e8:33:af:48:54:
                    3a:7e:42:4a:2f:1a:68:b7:7a:55:7e:0d:b3:fb:d6:
                    dd:b0:4a:9f:74:c7:a3:2a:f9:91:c1:49:38:76:33:
                    aa:83:1c:94:68:cc:63:7e:57:72:65:f9:87:15:2b:
                    26:d4:67:20:f0:48:da:cd:16:dc:0a:be:dd:2e:a4:
                    d7:1f:3b:5c:04:24:b2:37:ac:3e:cf:64:5e:b6:db:
                    53:32:40:07:44:22:cd:ae:73:af:29:25:9b:71:8a:
                    9b:c2:6b:ca:21:f5:70:b9:ab:33:4f:d7:2b:42:b1:
                    52:34:23:df:4c:65:5b:5c:2c:e3:37:ea:df:fe:20:
                    dd:ca:65:e0:3d:cc:a8:29:f4:1e:42:fd:99:ad:aa:
                    58:fb:aa:64:a8:b7:77:d9:df:f7:71:e5:be:83:2c:
                    01:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:98:AC:D2:C9:C0:A7:2D:5C:59:3F:E3:6E:B2:13:0D:28:28:DB:B0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/x5is0snApy1cWT_jbrITDSgo27A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.147.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         4a:87:1c:85:84:ee:ef:05:a4:26:3b:30:bc:c3:c3:27:2c:06:
         59:2c:84:46:7a:2c:7e:ea:4f:ce:c5:0a:86:c3:a0:9a:25:24:
         b2:3a:5d:11:d1:37:49:c8:94:70:26:89:4a:03:a4:b9:f2:39:
         a6:6a:2f:95:0b:f0:04:f2:a4:9e:ce:67:a5:3e:8a:7e:e0:8f:
         69:a4:ad:9e:63:ba:84:08:dc:2f:6e:ce:7a:e4:b1:15:37:71:
         95:9f:0c:7f:1b:5f:33:7f:ac:2a:66:6a:98:97:ba:72:97:ac:
         b6:bd:c1:52:06:fc:f2:6a:bb:c2:aa:bb:77:e5:3a:ff:ce:90:
         72:b2:86:2d:61:db:65:21:40:84:ee:7e:17:74:3d:5d:4d:43:
         60:22:ef:a1:8b:5d:51:ce:73:5d:11:39:8d:86:2c:9a:33:68:
         a0:24:16:e2:b0:04:43:40:ea:41:4f:4d:d9:6b:ea:1f:6c:65:
         c9:0b:04:60:3e:be:ad:ed:b6:67:92:2f:56:81:29:db:d1:29:
         20:f9:d2:6a:b3:bc:64:17:82:1a:10:5c:8d:56:8e:04:9b:02:
         24:e8:08:0d:14:80:92:f7:e8:3e:36:ab:4e:8d:41:0c:d4:96:
         0d:d8:27:ba:79:a2:6c:47:85:d4:ce:93:a6:de:83:99:15:3c:
         d6:d7:a0:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org