Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/751/hTPtFuCpCiHHB3spbnXxWzzJvCo.roa
File:                     hTPtFuCpCiHHB3spbnXxWzzJvCo.roa (raw, json)
Hash identifier:          RAtYj2q8AZyTg4Xaww4z0nZvoCrZ4DrvQ66bcqYX43g=
Subject key identifier:   85:33:ED:16:E0:A9:0A:21:C7:07:7B:29:6E:75:F1:5B:3C:C9:BC:2A
Certificate issuer:       /CN=7B49A8775994827975AB37E6DF96064C924783F1
Certificate serial:       05
Authority key identifier: 7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/hTPtFuCpCiHHB3spbnXxWzzJvCo.roa
Signing time:             Fri 12 Apr 2024 06:15:34 +0000
ROA not before:           Fri 12 Apr 2024 06:15:34 +0000
ROA not after:            Sat 12 Apr 2025 05:59:48 +0000
asID:                     18129
IP address blocks:        119.47.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7B49A8775994827975AB37E6DF96064C924783F1
        Validity
            Not Before: Apr 12 06:15:34 2024 GMT
            Not After : Apr 12 05:59:48 2025 GMT
        Subject: CN=8533ED16E0A90A21C7077B296E75F15B3CC9BC2A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d9:9c:ad:29:02:32:19:b7:15:b8:a6:f7:94:
                    15:17:87:ec:aa:de:3b:43:40:11:51:2f:ce:80:98:
                    51:aa:94:cd:0a:4e:be:5d:10:0f:ca:61:ea:e7:87:
                    ea:d0:59:a0:50:91:c2:fb:3b:fe:24:9b:25:23:21:
                    1b:5c:bf:53:3c:37:6a:7a:bc:4f:c4:1b:2c:f6:8d:
                    7a:8c:19:8b:f5:13:a1:9d:67:c3:97:f3:8b:cc:72:
                    f1:79:f6:4e:7f:8d:e4:58:51:3e:95:c5:00:26:fb:
                    24:02:8f:51:18:b5:b0:60:4f:26:d6:23:6e:f7:3a:
                    3c:c2:c3:d4:b6:cf:c2:14:4c:7d:4a:79:2a:62:80:
                    56:47:f9:f6:c0:f7:de:f4:fe:c1:8a:47:b8:35:e3:
                    9a:f7:26:9b:64:8e:40:11:a1:90:74:ee:0d:9e:ec:
                    be:e8:25:6e:5f:76:07:74:f4:09:65:6d:1e:db:ea:
                    f4:18:db:fd:d8:21:52:49:8b:9d:fb:ee:8c:17:5a:
                    58:a4:54:45:d1:1c:bc:4c:c1:5c:8c:f0:a9:8e:dc:
                    27:3d:11:d8:13:df:21:3f:d9:57:42:a5:b9:d8:7d:
                    93:eb:2c:fb:64:15:0a:b7:57:ee:a3:76:a8:74:dc:
                    0f:7c:db:46:35:52:6b:98:d3:4f:7e:ec:2c:c5:15:
                    06:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:33:ED:16:E0:A9:0A:21:C7:07:7B:29:6E:75:F1:5B:3C:C9:BC:2A
            X509v3 Authority Key Identifier:
                keyid:7B:49:A8:77:59:94:82:79:75:AB:37:E6:DF:96:06:4C:92:47:83:F1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/e0mod1mUgnl1qzfm35YGTJJHg_E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/e0mod1mUgnl1qzfm35YGTJJHg_E.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/751/hTPtFuCpCiHHB3spbnXxWzzJvCo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         04:59:98:7e:de:d4:80:1f:07:f0:4a:ae:3a:c7:cf:b6:cf:96:
         c9:64:40:4c:87:32:93:71:69:50:0e:ce:77:22:80:c2:1e:d0:
         c5:09:69:b8:73:a1:e2:8d:f4:b3:84:24:cd:12:86:2c:61:0a:
         18:21:47:d9:72:e5:04:1e:2f:db:86:f4:91:b4:00:d2:96:3e:
         8e:9d:0a:10:7a:9b:49:a8:32:71:9a:fc:8e:39:29:e5:38:05:
         3b:00:2d:49:8e:a5:bf:d4:b9:58:38:27:07:19:bb:b9:35:26:
         82:ef:d8:6a:22:f8:94:38:86:ad:a8:39:b6:4d:e5:39:d8:3a:
         eb:30:81:1e:c2:92:da:03:1a:73:24:b9:24:7b:9a:03:d6:fb:
         68:ae:21:b5:0c:37:50:e9:27:02:50:48:e0:a6:f7:69:6d:b6:
         b1:c6:8d:98:1f:db:c9:5e:81:17:aa:df:a1:0e:88:43:63:f3:
         bc:db:16:98:d1:fb:61:fb:07:b5:9f:d7:d1:9c:f3:a4:a7:73:
         bf:08:e6:ce:a8:d7:dd:fc:85:9b:85:e9:ef:bc:00:48:9f:36:
         0c:50:f2:97:c2:8e:3a:25:25:a1:8d:2c:50:f1:6c:72:e5:70:
         60:2b:4e:84:ee:ed:10:11:09:58:0d:f2:d6:07:01:2e:f3:ad:
         8c:81:32:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org