Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/J8k_l64FQZqf4AaNmFxI_AsS2Hc.roa
File:                     J8k_l64FQZqf4AaNmFxI_AsS2Hc.roa (raw, json)
Hash identifier:          q9tmR6Z7YXTB7Azz+XV5Mn147+iX69AaEB2ca8j6WuM=
Subject key identifier:   27:C9:3F:97:AE:05:41:9A:9F:E0:06:8D:98:5C:48:FC:0B:12:D8:77
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       50
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/J8k_l64FQZqf4AaNmFxI_AsS2Hc.roa
Signing time:             Sat 31 Aug 2024 01:31:47 +0000
ROA not before:           Sat 31 Aug 2024 01:31:47 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        180.188.208.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:47 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=27C93F97AE05419A9FE0068D985C48FC0B12D877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:22:a3:e9:c3:47:0b:70:fa:0f:54:7c:e3:
                    73:d9:99:f0:a1:7f:cc:de:2e:b1:47:a7:67:3f:0e:
                    07:6d:8e:47:86:ba:32:01:aa:f5:60:20:0e:3a:3a:
                    44:37:c9:e5:e9:ad:8b:ec:79:4d:ac:dd:83:90:ec:
                    10:28:c7:c4:44:b0:8d:be:69:32:98:2c:53:23:66:
                    9f:20:eb:7a:c1:fa:7e:e6:fb:16:29:50:99:bf:a9:
                    b6:9e:2c:b9:2e:b2:ad:f7:6f:9c:b5:a5:1d:ee:25:
                    26:2a:bb:58:79:bf:e3:66:35:92:6c:12:e6:1b:12:
                    bf:1d:fe:59:54:0b:76:ab:09:7f:d2:45:0d:8c:5f:
                    b1:ca:37:4a:ab:87:e8:58:f6:c0:22:05:38:05:fd:
                    4a:8d:2b:13:c1:f7:a2:da:af:44:c3:86:29:ba:06:
                    0d:f6:4a:0d:27:d9:56:4d:66:4a:3a:b6:8a:18:41:
                    b9:02:82:f0:76:13:86:28:2f:3f:74:4e:d8:73:ea:
                    58:2d:ab:02:21:59:93:49:f9:fc:4d:50:4a:bc:38:
                    47:2f:49:39:0b:b0:ce:87:8a:9b:6e:22:21:2c:f4:
                    42:ce:bf:ee:54:8d:2d:02:db:a4:2c:1d:82:96:23:
                    10:4e:24:07:df:c6:64:cc:05:23:37:a0:a4:56:d7:
                    af:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:C9:3F:97:AE:05:41:9A:9F:E0:06:8D:98:5C:48:FC:0B:12:D8:77
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/J8k_l64FQZqf4AaNmFxI_AsS2Hc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.188.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         72:7c:61:2a:91:83:28:d3:fe:12:b4:2b:84:c7:a3:3d:9d:ef:
         a7:bf:ab:52:e3:22:6d:91:06:08:f9:3f:a9:a9:18:c2:dc:d1:
         92:5c:ac:78:20:85:46:32:1e:85:b8:52:74:cf:84:89:af:06:
         82:89:ac:e5:9c:8e:c9:f9:51:da:d6:69:5c:08:00:aa:ff:c5:
         a0:e6:de:91:e0:b4:89:96:44:d3:8d:c2:9c:fc:78:c4:ce:34:
         cc:6c:df:3b:e9:49:d2:8e:12:bf:12:3e:7e:64:94:cf:b1:5d:
         1d:c1:f1:ce:61:63:b3:06:35:f5:49:95:ba:ae:11:d4:1f:b6:
         ca:81:9a:4a:29:44:71:fc:4e:3a:e6:06:49:42:d0:52:8b:6e:
         d0:35:4f:43:63:09:ab:6d:83:0a:1a:09:18:03:c7:85:a5:91:
         ba:39:35:5e:cc:63:80:16:f4:1e:ee:53:8d:0a:65:8d:d7:67:
         f2:08:e9:a0:e8:96:61:d8:2e:d8:f3:61:55:85:cb:a0:89:fb:
         b2:d1:67:51:80:a1:c3:de:bb:71:5b:9d:f8:72:30:4e:31:b5:
         b8:b9:e2:15:14:14:26:31:31:aa:f8:46:1c:91:38:67:fd:81:
         3c:72:83:7a:a4:41:b9:4c:be:c9:5f:46:1d:80:08:3f:e7:95:
         c7:4d:cd:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org