Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/Ufg5f6buHJ1ucq6rP2Jc1LkQg0A.roa
File:                     Ufg5f6buHJ1ucq6rP2Jc1LkQg0A.roa (raw, json)
Hash identifier:          hwLogSL6Ym3hwJsdf7FuZzqOUbW21wDKC2EjBEKqD/E=
Subject key identifier:   51:F8:39:7F:A6:EE:1C:9D:6E:72:AE:AB:3F:62:5C:D4:B9:10:83:40
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       65
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Ufg5f6buHJ1ucq6rP2Jc1LkQg0A.roa
Signing time:             Fri 31 May 2024 01:28:14 +0000
ROA not before:           Fri 31 May 2024 01:28:14 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     17675
IP address blocks:        219.96.96.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 101 (0x65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May 31 01:28:14 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=51F8397FA6EE1C9D6E72AEAB3F625CD4B9108340
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:b8:f8:fb:01:63:98:98:06:f3:2a:f8:f1:af:
                    7c:2e:f9:56:ed:36:77:b4:55:5b:0b:73:bd:7c:16:
                    c6:f5:b5:df:26:7b:3d:73:d7:69:a2:8e:8d:38:df:
                    37:30:11:bd:1f:d4:38:a7:d4:62:6c:72:33:95:ee:
                    0b:d8:38:24:30:b4:4e:8e:c3:28:64:98:55:f9:59:
                    da:4a:cf:17:6f:bf:0d:52:f7:69:f5:bc:66:c6:85:
                    a6:66:20:b0:04:28:5d:d0:6b:b0:e6:8b:b8:8e:1e:
                    7a:5f:6b:1a:96:61:12:24:3e:9c:06:51:11:61:50:
                    d6:21:10:60:8e:b4:fc:e6:83:7d:f7:30:a7:8d:53:
                    fc:c1:bb:55:d6:87:d3:1c:e7:c2:87:ca:46:cc:86:
                    ef:d5:79:36:da:21:4f:a6:45:0c:16:c6:c7:59:3d:
                    00:3a:7a:71:1a:c3:86:30:d3:7e:3d:3b:2e:c0:ee:
                    77:0a:1a:09:d1:8d:35:25:03:a1:ce:8e:7a:8f:12:
                    0f:78:01:1c:da:52:18:ff:e7:79:ac:64:e8:92:72:
                    36:e2:84:af:1c:65:6c:6d:8a:a1:40:24:3d:d4:2f:
                    f2:49:76:c7:8e:c6:08:86:63:df:31:b7:52:f4:f4:
                    fa:bc:ed:c7:2a:a1:4e:6e:44:62:b1:c3:b9:de:d3:
                    fd:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:F8:39:7F:A6:EE:1C:9D:6E:72:AE:AB:3F:62:5C:D4:B9:10:83:40
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Ufg5f6buHJ1ucq6rP2Jc1LkQg0A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.96.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         60:21:02:61:24:88:ec:37:2c:17:38:1e:10:ae:23:b6:96:c8:
         fc:ce:1c:5c:45:97:3f:2c:48:5f:af:de:9b:fa:b1:09:be:7d:
         13:cb:b6:43:a8:6e:4e:d1:04:4d:ff:9f:48:ee:79:e5:fe:bd:
         bb:f9:28:d3:cb:b5:e5:af:12:a4:96:23:98:13:2e:9c:15:3c:
         40:30:64:34:4f:0d:a5:95:1d:0b:cd:09:77:da:74:31:db:d8:
         64:3a:b2:3c:db:df:46:d6:6f:32:02:de:7f:d7:e5:4b:b9:4e:
         af:53:c8:fd:42:05:92:e2:b1:79:7a:e1:69:f7:f0:49:19:cb:
         b3:e7:fd:56:86:d6:38:d2:a8:22:f1:eb:9c:02:32:c4:ac:62:
         b7:7c:0c:97:9d:82:37:8e:3b:bb:7a:e5:fc:d0:52:0d:ae:82:
         de:15:89:cc:85:40:bc:f6:f5:c7:72:04:86:9c:63:ba:30:c3:
         8b:93:62:0d:f7:6e:0b:e4:6f:e2:a0:6b:d7:b8:48:73:40:a1:
         96:4b:2c:c8:48:75:4d:d1:06:e5:c7:3b:bc:f8:64:6b:c2:6b:
         39:45:0e:38:25:31:62:57:5c:5d:74:fa:f4:29:1d:91:a5:66:
         4e:db:38:07:6d:77:e9:f1:02:ff:81:17:e6:a4:88:b8:05:77:
         12:ae:e5:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org