Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/YF0B6Ndg2F7jJvPr7WaOISNr3cg.roa
File:                     YF0B6Ndg2F7jJvPr7WaOISNr3cg.roa (raw, json)
Hash identifier:          bzWOX1yaGRK9tFmfIh1E/Pd3Mse1bQDeZnmcJqXd5/w=
Subject key identifier:   60:5D:01:E8:D7:60:D8:5E:E3:26:F3:EB:ED:66:8E:21:23:6B:DD:C8
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       09
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/YF0B6Ndg2F7jJvPr7WaOISNr3cg.roa
Signing time:             Fri 12 Apr 2024 06:15:36 +0000
ROA not before:           Fri 12 Apr 2024 06:15:36 +0000
ROA not after:            Sat 12 Apr 2025 05:59:48 +0000
asID:                     18129
IP address blocks:        218.231.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Apr 12 06:15:36 2024 GMT
            Not After : Apr 12 05:59:48 2025 GMT
        Subject: CN=605D01E8D760D85EE326F3EBED668E21236BDDC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:d8:fe:ee:b6:f6:b7:e2:0f:98:9d:a7:2c:48:
                    3a:8a:bc:6a:b8:d2:ff:3a:bb:a4:bc:96:ef:81:6c:
                    78:b5:08:56:20:81:c4:6a:c7:17:da:30:9f:a1:bc:
                    7b:cb:6e:90:a7:76:7a:88:51:ac:5a:bb:c1:dd:1e:
                    69:ff:11:0c:7f:5b:e7:51:06:b5:27:f6:75:0e:22:
                    b6:01:83:f8:73:19:08:f3:db:c6:a2:84:1f:10:df:
                    3e:02:71:2a:40:cc:54:6d:79:fe:1d:e7:27:a8:31:
                    53:a3:45:48:6d:ef:31:41:c3:68:1e:99:9c:24:fe:
                    77:1a:71:02:58:06:67:2a:d6:6f:17:d9:fc:c4:b0:
                    d8:a0:22:ce:dc:01:e4:37:ed:d3:cd:7f:f6:b1:e5:
                    97:99:2d:c7:ab:48:2d:69:f9:07:a5:5c:ef:a1:28:
                    a0:1b:b5:f8:3f:3b:c7:ee:fd:50:cd:ce:31:f3:a0:
                    b6:d0:0b:88:a3:3c:72:01:2b:78:d0:c2:a0:97:9c:
                    a3:cf:76:37:7a:a5:ef:53:fe:3c:9f:4a:58:ca:38:
                    92:ed:89:76:48:4b:25:ec:f9:05:8c:12:c7:f8:cd:
                    74:1b:c3:29:ec:05:41:a9:e6:1d:f7:6c:ab:06:fb:
                    9e:61:57:21:17:a0:db:6e:08:09:b5:1b:48:9a:f0:
                    21:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:01:E8:D7:60:D8:5E:E3:26:F3:EB:ED:66:8E:21:23:6B:DD:C8
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/YF0B6Ndg2F7jJvPr7WaOISNr3cg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         61:06:f3:87:14:bd:3b:bf:f5:af:18:4d:5b:7c:21:0d:38:0f:
         6c:17:58:6b:aa:a1:cb:36:bb:95:1b:aa:98:b2:b3:a2:0d:77:
         65:c5:6f:39:1d:3e:5b:c2:76:b3:0f:2a:fd:da:50:a4:5f:ec:
         16:1b:87:2d:2a:70:43:e8:e7:f0:c1:3b:c2:00:1a:ce:05:8c:
         70:6e:85:84:41:af:41:c2:97:7d:ab:e6:45:0e:65:a0:27:8e:
         18:3f:d4:74:9f:fa:81:45:84:2a:a7:3a:ba:fc:b1:47:8d:ff:
         87:ff:4c:42:6f:39:47:84:29:31:b9:ad:4b:c2:3f:2b:8e:57:
         1e:8d:7d:a0:22:80:fa:91:01:0e:30:58:84:f1:35:d9:34:02:
         13:0e:2a:c6:9f:17:9d:44:15:62:1d:fc:36:ee:c6:82:a3:e9:
         60:7a:5c:76:8d:61:04:05:0c:06:5c:a9:09:36:06:59:ce:4c:
         96:c6:3a:fa:19:e2:54:ce:7d:20:b4:1d:57:79:d9:18:ef:92:
         53:aa:7b:45:9b:f8:62:1e:f8:a5:a6:fd:01:0d:92:30:7d:9e:
         a2:74:b1:f8:4f:ae:ba:98:7a:1a:d0:af:91:d8:c2:c1:06:11:
         16:12:42:31:80:99:0a:18:0b:22:bc:46:45:a3:a1:0d:95:e0:
         5c:d2:7b:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org