Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/713/P5u_K9I6BkkzHWJRf8WFvDcvsZI.roa
File:                     P5u_K9I6BkkzHWJRf8WFvDcvsZI.roa (raw, json)
Hash identifier:          aLaSUp/wyc1bPNk3n99XIXWVPWOiaGiD2kdm6pT4X2I=
Subject key identifier:   3F:9B:BF:2B:D2:3A:06:49:33:1D:62:51:7F:C5:85:BC:37:2F:B1:92
Certificate issuer:       /CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
Certificate serial:       1B
Authority key identifier: 1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/P5u_K9I6BkkzHWJRf8WFvDcvsZI.roa
Signing time:             Fri 16 Aug 2024 02:53:17 +0000
ROA not before:           Fri 16 Aug 2024 02:53:17 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     2519
IP address blocks:        202.88.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F288A2285024E148A27E45FE5AC90D28B303D4B
        Validity
            Not Before: Aug 16 02:53:17 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3F9BBF2BD23A0649331D62517FC585BC372FB192
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:32:0f:c8:fe:68:14:84:60:87:59:bf:60:08:
                    e4:8c:4a:c6:37:c0:ce:63:f2:7e:59:a0:eb:4f:7f:
                    f6:aa:16:90:d5:23:d0:1e:51:2b:3b:f5:96:1c:d0:
                    fc:2b:3d:dc:f3:b0:66:31:bd:6b:e7:92:08:e4:54:
                    a3:35:11:c7:4b:14:f3:11:21:10:c4:30:06:64:ce:
                    ff:93:a4:01:64:cb:53:9d:b4:da:9e:f8:13:00:fa:
                    5f:02:6d:b0:c1:01:12:21:22:94:77:19:bf:d5:8b:
                    5c:28:5b:dd:ff:73:20:94:65:f2:0f:41:b9:57:dc:
                    df:4c:68:eb:ea:8f:0f:39:88:5d:58:99:63:6c:ef:
                    a9:be:56:d4:88:30:80:36:db:45:2c:88:6d:94:4d:
                    6c:6d:05:12:b9:0b:cf:a9:ed:1f:16:b3:6b:f0:92:
                    6d:25:1f:6d:df:29:a8:14:a0:c3:4c:1b:72:be:bf:
                    65:63:fc:1e:60:eb:89:bf:3f:b9:6e:e7:58:71:b8:
                    02:2f:8e:51:b7:4c:03:f1:d4:32:99:b0:8d:c8:73:
                    d8:3e:61:b0:35:65:94:7d:57:4c:b7:4b:a6:48:b8:
                    34:d6:7b:20:ba:d5:7b:89:ee:49:90:c3:4c:3a:dd:
                    dd:b4:83:3e:cd:d0:74:1e:37:70:15:32:e7:b7:4b:
                    29:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:9B:BF:2B:D2:3A:06:49:33:1D:62:51:7F:C5:85:BC:37:2F:B1:92
            X509v3 Authority Key Identifier:
                keyid:1F:28:8A:22:85:02:4E:14:8A:27:E4:5F:E5:AC:90:D2:8B:30:3D:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/HyiKIoUCThSKJ-Rf5ayQ0oswPUs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/713/P5u_K9I6BkkzHWJRf8WFvDcvsZI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.88.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         06:72:05:88:fc:63:cd:99:15:b8:d6:ee:ac:b1:38:74:cb:f4:
         18:7e:f2:e1:4b:ca:19:44:af:fc:88:62:ba:85:25:ba:03:26:
         d8:83:ec:19:58:a4:fe:8c:7c:50:2e:d2:93:f2:6e:e8:e4:53:
         b8:37:be:fc:c7:ab:62:0b:01:e1:ad:79:b5:b5:fd:64:52:6c:
         0a:73:3e:5a:a6:1e:5c:db:46:85:55:62:21:b1:18:ee:fa:ea:
         ef:68:ed:a4:1d:83:c9:aa:11:18:71:a9:9e:fc:6d:30:d7:15:
         fa:73:d4:e4:e0:57:f4:e6:14:2b:66:ac:93:c6:fb:f2:73:b1:
         c7:58:49:4c:22:c4:04:33:e0:37:fb:8a:54:2f:68:9c:de:4c:
         93:51:92:f3:3f:68:e8:25:c0:27:f1:64:c7:9a:46:70:40:b9:
         79:d6:bd:5f:bb:7c:9d:b8:2c:c8:50:d6:50:d9:4b:72:c7:c2:
         28:4c:fc:33:90:c5:be:08:ea:ab:a4:53:59:4a:41:37:c3:0f:
         c8:96:e6:de:c0:35:88:75:31:0b:86:3a:da:74:c9:98:03:bb:
         4e:d6:77:f5:10:6a:39:23:55:2d:be:2f:dd:60:09:01:05:6f:
         21:3e:22:95:2d:90:4e:f0:ee:9a:8b:1c:3c:68:3d:d6:6c:52:
         06:d5:32:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:01 2024 by rpki-client on console-fra.rpki-client.org