Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/5LX6-mThiTzmcczUaivF6X2BIQA.roa
File:                     5LX6-mThiTzmcczUaivF6X2BIQA.roa (raw, json)
Hash identifier:          Ul+ZTHRlv0ObqsMjcIZI80Yd86FKSFsXgJCIiAuSWEE=
Subject key identifier:   E4:B5:FA:FA:64:E1:89:3C:E6:71:CC:D4:6A:2B:C5:E9:7D:81:21:00
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       18
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/5LX6-mThiTzmcczUaivF6X2BIQA.roa
Signing time:             Fri 16 Aug 2024 02:53:12 +0000
ROA not before:           Fri 16 Aug 2024 02:53:12 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18121
IP address blocks:        180.94.208.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug 16 02:53:12 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=E4B5FAFA64E1893CE671CCD46A2BC5E97D812100
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:bc:29:dd:fb:26:ab:24:1a:fc:83:a3:2f:7c:
                    e1:f8:12:0a:53:0d:99:46:d9:4b:a4:95:a7:d6:94:
                    70:fc:42:f3:f4:5f:b6:b3:1b:43:ff:73:99:f3:6e:
                    ef:07:6d:a7:c6:7a:21:b0:c4:97:e0:6d:74:1f:cd:
                    a5:4c:01:01:89:cb:66:bf:59:2c:39:31:a4:84:b4:
                    fb:1c:8a:ef:e5:c6:2b:a9:fe:de:8d:62:8e:c5:7a:
                    f8:8d:f3:4f:81:50:1f:1a:81:f8:07:67:4d:3a:ea:
                    19:93:af:05:96:a7:41:51:f8:13:f7:c5:3c:71:cd:
                    0b:67:f1:78:c6:06:53:37:3e:67:3f:f4:bb:ba:28:
                    3b:ef:f8:2a:71:c4:e9:7a:ae:17:02:b9:a2:2f:3d:
                    84:47:20:58:fc:f4:b3:34:bc:0f:67:69:a0:5d:bc:
                    34:fa:44:88:5e:b6:0c:c7:b2:e8:89:b0:bf:0c:6f:
                    d6:fd:4c:ea:6a:27:03:6a:0d:a7:1b:5d:aa:d1:6a:
                    99:88:c1:92:89:35:50:50:40:c1:8f:8a:75:55:28:
                    42:53:85:19:4f:77:16:1a:df:40:3a:6e:ad:b2:68:
                    0b:1e:8f:72:3d:75:c9:d2:3f:df:7c:fa:60:c0:5d:
                    3c:cf:80:c0:5b:31:1a:32:32:10:4f:80:4d:ab:70:
                    2b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:B5:FA:FA:64:E1:89:3C:E6:71:CC:D4:6A:2B:C5:E9:7D:81:21:00
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/5LX6-mThiTzmcczUaivF6X2BIQA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.94.208.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5f:93:1c:9b:00:07:38:de:04:47:da:44:8a:31:40:b3:a7:6b:
         c4:36:00:3b:dc:85:e5:2d:ae:9d:7c:94:97:8c:06:8e:19:65:
         6c:60:ab:1d:4a:bc:82:bb:82:20:22:a1:d2:47:34:7f:fd:11:
         2a:55:79:c9:fe:94:fd:87:8f:a0:22:a6:2b:dd:cc:a8:e3:e3:
         1e:7e:47:85:f7:64:38:5e:75:62:9f:e1:a3:40:65:03:76:c9:
         10:1c:d7:2a:4a:2a:08:13:2e:a8:87:87:bc:bf:21:53:95:ab:
         a1:75:3e:12:c0:6a:cc:10:cd:19:ae:f8:a3:b0:17:c8:f8:65:
         0e:00:0c:78:ae:4f:7a:26:93:b3:a0:df:78:41:32:b4:21:20:
         ab:31:74:9e:9b:a1:ae:9c:23:91:94:11:80:b4:55:75:25:58:
         59:ac:b5:40:cc:d8:14:49:3d:06:8e:ef:da:81:45:ae:e5:96:
         6f:a8:04:98:3d:86:75:2b:23:c6:df:bd:db:3c:42:79:85:00:
         20:bc:e9:bb:ff:1a:61:12:d6:3c:a8:39:89:ea:11:ed:76:d9:
         f4:83:34:c3:61:77:1a:cc:a9:8f:11:2a:97:02:28:7c:96:33:
         84:3d:5d:57:88:0f:18:1c:0e:5c:6f:44:c2:cb:2f:b3:68:88:
         8c:bb:e7:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org