Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/653/6t6SXR1D8hoejYRxvzm3UW_PEOk.roa
File:                     6t6SXR1D8hoejYRxvzm3UW_PEOk.roa (raw, json)
Hash identifier:          /FEI+XS8tSPZFKhc3wrnlC3RvocRpwZ6zTzE5XZxW2U=
Subject key identifier:   EA:DE:92:5D:1D:43:F2:1A:1E:8D:84:71:BF:39:B7:51:6F:CF:10:E9
Certificate issuer:       /CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
Certificate serial:       06
Authority key identifier: EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/6t6SXR1D8hoejYRxvzm3UW_PEOk.roa
Signing time:             Tue 16 Apr 2024 05:01:47 +0000
ROA not before:           Tue 16 Apr 2024 05:01:47 +0000
ROA not after:            Wed 16 Apr 2025 04:54:04 +0000
asID:                     17931
IP address blocks:        211.19.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE5C4F77377D7F5075C64BA4B57998BC79326C5E
        Validity
            Not Before: Apr 16 05:01:47 2024 GMT
            Not After : Apr 16 04:54:04 2025 GMT
        Subject: CN=EADE925D1D43F21A1E8D8471BF39B7516FCF10E9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:8f:23:81:ec:44:54:3e:c8:8a:99:80:cc:b1:
                    88:30:db:e6:da:8a:6d:9c:e9:5e:c3:48:b0:49:49:
                    f5:22:b7:09:11:fb:2d:bf:63:10:70:94:9c:0b:00:
                    5d:1f:4f:91:3e:65:6c:41:77:9f:7d:3f:41:83:0a:
                    a5:98:d6:21:c3:0d:fe:a1:cf:ef:e9:ff:15:f6:e5:
                    d8:32:28:8c:18:c4:dc:c6:78:66:fd:c3:7c:df:2a:
                    8f:af:40:45:82:f1:66:3a:cf:5d:74:9f:6e:46:b2:
                    f0:0f:64:fc:e1:52:4b:e8:8d:ab:1a:07:1a:52:f4:
                    f1:e7:27:c8:2c:91:af:37:27:0c:69:5a:98:46:cd:
                    e4:b3:ac:ca:fe:07:62:d3:46:32:05:7e:de:b7:39:
                    21:2b:55:30:5f:be:33:33:04:56:b0:b5:3d:2a:51:
                    82:dc:7c:a0:e4:7a:25:77:07:18:28:ba:a8:df:d7:
                    43:55:27:83:12:78:95:b4:6a:32:77:7e:b9:e5:79:
                    af:9e:20:eb:76:eb:3c:91:be:ed:41:48:15:5f:fe:
                    aa:9f:4c:bb:48:af:15:f8:83:cc:6e:ad:93:af:39:
                    45:d8:cc:3e:64:73:eb:3a:a6:f6:14:1a:b5:b2:9a:
                    78:ae:3f:24:35:fa:bc:bf:78:3e:2a:97:7a:35:98:
                    3a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:DE:92:5D:1D:43:F2:1A:1E:8D:84:71:BF:39:B7:51:6F:CF:10:E9
            X509v3 Authority Key Identifier:
                keyid:EE:5C:4F:77:37:7D:7F:50:75:C6:4B:A4:B5:79:98:BC:79:32:6C:5E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/7lxPdzd9f1B1xkuktXmYvHkybF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7lxPdzd9f1B1xkuktXmYvHkybF4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/653/6t6SXR1D8hoejYRxvzm3UW_PEOk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         43:25:78:bd:7a:0e:10:bd:b5:3e:78:8e:00:c4:03:3e:c4:e7:
         db:8c:fc:9b:71:10:3d:c0:26:1b:5b:58:c3:b0:08:6f:ad:29:
         8c:88:18:c6:2f:9b:13:cf:dd:1b:73:7f:4f:3b:80:66:33:c2:
         49:35:d6:3a:bd:dc:8b:3c:2c:a7:9a:c6:e1:da:2c:9e:20:31:
         b3:42:9f:c2:02:79:98:82:7f:f0:73:56:84:d0:8a:59:49:a8:
         50:b0:23:61:70:aa:15:1e:cb:1e:b2:84:2c:5f:7a:f9:27:86:
         b8:69:7a:de:b6:5f:e5:d0:ef:77:77:b0:30:35:ce:5b:cb:43:
         c2:d1:9b:97:6d:30:03:00:8e:90:85:29:0e:39:f1:27:73:91:
         8d:8c:3f:21:44:76:62:25:86:ee:40:0c:8d:9f:d3:c3:bc:e5:
         51:c3:a4:74:40:06:73:c9:6d:cf:7b:ea:9c:dc:a9:0c:3a:0f:
         40:bc:35:a4:32:45:ac:47:f0:ae:25:58:c6:07:f1:00:ff:0a:
         a4:f2:a8:fa:6c:9d:c5:cc:5f:c5:48:c0:a8:a6:ba:a8:a5:2d:
         87:06:fa:4d:dd:23:18:d5:17:1d:e0:6f:93:d6:dc:f4:f5:84:
         61:65:00:39:c0:9d:83:49:42:40:d1:db:f7:27:eb:88:32:da:
         77:53:4d:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org