Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/rSGX_JkhklCsLukfMxqgvW8RG84.roa
File:                     rSGX_JkhklCsLukfMxqgvW8RG84.roa (raw, json)
Hash identifier:          kDYK3GxCX5yyeMKA3eEdLe7JkH/GuDkdfRAmKYRA0hQ=
Subject key identifier:   AD:21:97:FC:99:21:92:50:AC:2E:E9:1F:33:1A:A0:BD:6F:11:1B:CE
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       52
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/rSGX_JkhklCsLukfMxqgvW8RG84.roa
Signing time:             Thu 02 Nov 2023 07:15:52 +0000
ROA not before:           Thu 02 Nov 2023 07:15:52 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     32787
IP address blocks:        219.113.26.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 01 Jun 2024 13:36:37 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Nov  2 07:15:52 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=AD2197FC99219250AC2EE91F331AA0BD6F111BCE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b5:cb:a2:23:11:98:db:66:9a:4f:c1:ca:8c:
                    41:5b:3b:b2:6d:0c:5a:4a:ff:a1:3e:23:24:af:ef:
                    34:e3:f9:b6:e7:60:6a:53:0a:16:6d:35:f7:a8:a4:
                    f2:ae:3b:0b:15:9b:a2:fd:bb:43:f0:ec:95:ea:82:
                    ab:5d:e3:5b:63:3c:55:0d:d9:4a:21:ed:ca:61:54:
                    fd:a0:a9:1a:cc:8a:ed:13:e9:77:8b:2c:a6:01:b0:
                    45:43:1a:39:32:4b:8b:74:6e:55:09:b8:e6:85:f1:
                    22:72:de:1a:5c:fd:3b:c8:e0:e3:20:a7:93:8c:5b:
                    5f:e7:ee:69:35:30:8f:9a:c3:c5:97:d8:d8:b4:e9:
                    b7:43:6c:d3:bc:78:b9:c3:0c:b2:77:47:f2:76:b9:
                    a9:6b:d2:5c:03:6d:6a:e9:2c:47:ba:eb:28:b3:54:
                    e4:ed:a4:d2:06:32:d2:17:7d:8a:7d:8b:d8:2c:4b:
                    ad:28:2c:18:40:27:7c:b6:73:4b:56:d5:76:6b:b8:
                    48:5e:c0:d7:6a:73:9a:5d:e2:bc:5e:78:2b:00:67:
                    87:f4:3a:ef:22:38:5f:3f:f3:64:91:f8:e3:6d:34:
                    fe:6b:55:02:26:38:f6:8d:c4:40:67:56:e4:a5:86:
                    52:5d:e2:ce:77:63:09:af:05:dc:61:97:96:62:a2:
                    ba:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:21:97:FC:99:21:92:50:AC:2E:E9:1F:33:1A:A0:BD:6F:11:1B:CE
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/rSGX_JkhklCsLukfMxqgvW8RG84.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.113.26.0/24

    Signature Algorithm: sha256WithRSAEncryption
         bf:79:a0:61:bd:0d:73:a8:6e:f5:86:14:2b:e6:cb:d3:f5:86:
         ac:7a:b7:c0:a4:e2:4b:c7:a6:93:20:91:64:15:f2:d2:ee:c9:
         fe:20:60:d2:e9:59:58:58:63:91:e0:8d:75:b2:5b:74:7d:a3:
         89:fd:b5:ad:67:4d:bc:74:60:b9:9a:42:d6:e2:ba:b7:1c:73:
         5d:4a:a2:60:dd:11:6f:ed:38:99:4c:64:48:b5:cb:ee:67:e4:
         f7:63:4e:06:f9:c7:0e:8e:79:e7:94:d8:7f:ad:0b:c5:ba:52:
         fa:49:46:31:e7:e2:78:39:01:d3:83:52:e3:25:a7:16:d1:76:
         02:b6:d7:ef:ed:95:4d:42:77:ff:4f:43:b9:36:ef:39:84:74:
         d9:8e:47:c5:ac:95:93:95:7c:dc:b8:3e:a2:28:9b:68:2e:f4:
         8d:99:af:ae:eb:0d:5d:20:63:c4:a2:e0:bd:97:ce:a4:22:1f:
         75:b8:6e:c6:93:b0:28:c0:1c:d5:2c:bb:b2:8b:e0:b1:b9:83:
         68:7a:d8:d3:dc:5b:47:98:1d:21:ef:7c:61:5b:59:2b:cc:76:
         e5:05:cf:d7:e9:b2:e7:33:ac:63:5b:84:75:3d:48:80:5e:75:
         1b:11:09:25:85:64:40:92:6a:96:31:62:eb:7f:6d:b9:11:34:
         db:60:96:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 26 00:03:34 2024 by rpki-client on console-fra.rpki-client.org