Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/eUrBWQgCjiEK0mg0QeN4qDO93Yc.roa
File:                     eUrBWQgCjiEK0mg0QeN4qDO93Yc.roa (raw, json)
Hash identifier:          RDRhWuXO0vPesaMfFl00mxzb58mks2YVgtn6eAe1qBI=
Subject key identifier:   79:4A:C1:59:08:02:8E:21:0A:D2:68:34:41:E3:78:A8:33:BD:DD:87
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       2C
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/eUrBWQgCjiEK0mg0QeN4qDO93Yc.roa
Signing time:             Fri 06 Oct 2023 06:05:41 +0000
ROA not before:           Fri 06 Oct 2023 06:05:41 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     9374
IP address blocks:        124.108.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Oct  6 06:05:41 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=794AC15908028E210AD2683441E378A833BDDD87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:fb:90:5a:8d:d3:66:c6:2a:5a:f2:59:02:36:
                    38:0c:7e:d2:ff:b5:06:d0:95:7f:d6:50:6b:42:39:
                    83:de:19:df:64:48:dd:b5:b4:b6:a9:60:a6:ed:fa:
                    05:07:34:6d:4f:92:61:f2:5a:79:cd:cc:b9:71:07:
                    81:7f:12:68:21:06:30:0f:11:e8:8a:ea:12:ee:39:
                    b5:49:ce:22:e6:cd:57:5c:14:3b:db:ee:0d:46:86:
                    da:3e:e9:ea:23:a5:fa:a1:aa:ab:e6:8e:66:80:54:
                    47:a9:c7:30:da:1f:39:49:89:c5:85:af:83:eb:fc:
                    ee:9e:90:8a:8e:09:00:ca:47:60:91:5b:24:d0:52:
                    b8:e2:a9:3c:98:64:a7:c1:34:6e:35:c3:0f:91:b4:
                    19:e6:d4:6d:35:84:29:49:56:4a:92:8d:ce:9e:ff:
                    0b:2c:e1:a9:20:28:0a:75:87:f0:b7:59:97:06:6b:
                    9f:54:02:81:e6:e5:f2:c5:6b:f2:2c:c5:bc:5f:56:
                    8b:39:e3:6b:2e:1d:94:d7:0e:a5:df:39:fe:7a:4f:
                    cf:af:55:67:1e:be:69:a7:05:04:fd:b9:15:12:44:
                    04:a5:f0:39:e1:67:31:c1:0a:a0:c1:d7:19:a2:39:
                    31:a3:f3:3f:b4:18:fe:c1:73:52:19:e1:ea:c2:cb:
                    eb:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4A:C1:59:08:02:8E:21:0A:D2:68:34:41:E3:78:A8:33:BD:DD:87
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/eUrBWQgCjiEK0mg0QeN4qDO93Yc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.108.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         78:93:17:1d:2b:cb:22:74:9a:8c:08:0c:50:3b:36:44:fa:a1:
         6f:d8:e8:af:da:69:b7:3c:ab:41:41:3e:40:80:94:60:33:a8:
         f4:e8:f4:df:ac:45:39:f0:ce:48:1d:83:73:6b:8e:d6:de:3d:
         f1:8a:7d:fb:db:8e:03:cf:3e:ec:33:11:00:b3:17:a0:c8:3b:
         12:c9:a4:3e:63:3e:b5:6b:0e:45:c9:28:16:45:49:14:19:22:
         e9:cc:ee:6c:1e:dd:9c:9d:e9:64:e8:85:34:3a:d5:d3:56:44:
         4e:04:56:0c:3a:07:07:ad:ee:62:8e:4c:cc:2c:13:82:2f:94:
         de:5a:8b:57:8b:98:2e:a6:0b:ba:2d:b0:13:60:1f:d2:d5:71:
         da:8b:ca:60:3b:07:64:fe:07:cb:9d:0c:0c:82:62:8e:7d:ad:
         89:4c:7e:b6:5d:01:55:8f:f6:f3:09:4e:c9:b3:47:97:3b:63:
         6f:13:6f:e5:1f:ff:50:c4:d7:04:c1:ec:d6:bf:2e:de:1c:10:
         e7:d4:6f:40:f3:17:ba:d9:03:09:6b:16:a2:ba:2b:8b:bb:c5:
         aa:4e:7b:42:e3:9d:ca:0f:12:89:94:4e:61:09:52:a8:7e:1e:
         4f:8a:1f:ea:55:0e:8a:d7:76:f5:05:f1:19:73:72:5d:a8:d3:
         f5:ef:60:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:21 2024 by rpki-client on console-ams.rpki-client.org