Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/34kfJfzz0eHAoTMTUlNj-M8qf9Q.roa
File:                     34kfJfzz0eHAoTMTUlNj-M8qf9Q.roa (raw, json)
Hash identifier:          7ABykPoaUk+eXprBljd87VLFt+BlQcxFqqMV/IIR/k4=
Subject key identifier:   DF:89:1F:25:FC:F3:D1:E1:C0:A1:33:13:52:53:63:F8:CF:2A:7F:D4
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       19
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/34kfJfzz0eHAoTMTUlNj-M8qf9Q.roa
Signing time:             Wed 31 Jul 2024 01:32:38 +0000
ROA not before:           Wed 31 Jul 2024 01:32:38 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23791
IP address blocks:        124.246.128.0/17 maxlen: 17

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 25 (0x19)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul 31 01:32:38 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=DF891F25FCF3D1E1C0A13313525363F8CF2A7FD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2e:32:44:54:13:52:bc:4d:4a:17:75:f9:84:
                    24:f9:fe:8c:96:f7:67:c3:6d:1f:30:3d:57:a1:53:
                    b0:1b:9f:9d:57:57:51:c6:b5:03:ae:48:d3:c5:83:
                    a3:fd:96:57:2c:f7:8a:07:04:90:f2:18:fc:93:4c:
                    fa:60:d3:0c:65:09:9f:d8:64:4f:fb:a3:60:fc:50:
                    d2:3d:b3:fa:04:a6:cc:de:80:4a:77:18:43:45:f2:
                    c4:20:4d:00:a7:07:1a:1d:fd:60:c3:ad:26:99:0d:
                    f0:a9:22:91:e2:eb:24:68:42:57:63:3a:34:0e:57:
                    5d:8b:53:f6:ce:ab:a4:b5:4b:fd:79:08:4b:49:c8:
                    a0:96:6a:61:9d:a4:07:e6:c1:60:81:62:f0:8f:47:
                    ea:31:06:b8:99:77:7d:aa:f6:5c:e6:8c:71:2a:1b:
                    a5:77:00:46:f3:05:6f:17:2a:24:25:70:a8:d0:ea:
                    af:54:6b:d0:df:50:41:0b:fc:52:56:6e:8e:cc:2b:
                    65:7c:10:1e:29:e7:85:ff:10:e6:ac:14:f8:09:10:
                    ae:e0:37:3e:92:d5:76:08:d0:0e:88:df:ce:49:51:
                    90:ad:d6:d0:70:b8:44:66:30:a0:d1:2b:c6:15:45:
                    80:18:89:fd:e7:b9:3b:5c:0b:1e:2d:33:bb:d7:1c:
                    97:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:89:1F:25:FC:F3:D1:E1:C0:A1:33:13:52:53:63:F8:CF:2A:7F:D4
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/34kfJfzz0eHAoTMTUlNj-M8qf9Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.246.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         20:0e:63:ed:98:55:cc:f1:22:4b:56:a0:99:f5:b0:e6:49:04:
         b5:18:c2:38:67:46:7d:6d:bc:89:12:6c:29:e9:ec:e0:75:fe:
         13:3d:fd:62:be:bb:52:eb:68:5b:2f:c8:89:a7:d1:95:ce:6d:
         d8:61:4e:a2:36:39:c0:7e:42:fb:28:0f:20:6a:d2:e7:f5:fb:
         0b:cd:19:81:42:95:55:b3:04:9d:b1:79:0b:0d:3d:2d:2f:02:
         45:2f:04:05:6b:d4:72:b0:76:d4:d3:d2:ec:22:ce:4e:ea:ac:
         db:e6:6b:21:ad:e1:71:4e:98:cd:5e:e8:df:a1:73:45:7d:5d:
         6b:08:d0:09:62:3c:1f:8c:cc:cb:a7:e6:23:bc:4d:7c:76:c0:
         3f:f2:06:9b:ee:2e:cd:c2:c7:a9:d9:f0:2e:4d:32:c2:d3:f3:
         fb:b8:7f:67:bd:8f:9e:1d:22:15:4c:26:be:33:7d:3d:5c:4c:
         7d:f2:00:30:6b:cf:c6:c6:1b:31:e9:9f:bf:30:3d:4b:5a:6d:
         fd:9a:75:12:66:93:87:64:b0:06:15:2f:14:f9:57:04:85:c4:
         61:2a:15:8e:41:92:1f:6e:4c:36:dc:6d:67:f7:96:e9:94:82:
         03:56:b2:21:b6:ab:31:06:e4:aa:82:c4:8c:b0:6f:69:cd:00:
         1e:56:39:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org