Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/803/5ZUq6SgyHlMhiu-_NBOiUxFoHLo.roa
File:                     5ZUq6SgyHlMhiu-_NBOiUxFoHLo.roa (raw, json)
Hash identifier:          jcxrC6/p3yuHTVTsJmQjlgnUt4+xowGTf6d1H8rPVr4=
Subject key identifier:   E5:95:2A:E9:28:32:1E:53:21:8A:EF:BF:34:13:A2:53:11:68:1C:BA
Certificate issuer:       /CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
Certificate serial:       02
Authority key identifier: 6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/5ZUq6SgyHlMhiu-_NBOiUxFoHLo.roa
Signing time:             Mon 21 Oct 2024 06:39:19 +0000
ROA not before:           Mon 21 Oct 2024 06:39:19 +0000
ROA not after:            Tue 21 Oct 2025 01:29:24 +0000
asID:                     18281
IP address blocks:        124.66.192.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DA63A2CBADC92DFDE0A744ED80E9D57772E2467
        Validity
            Not Before: Oct 21 06:39:19 2024 GMT
            Not After : Oct 21 01:29:24 2025 GMT
        Subject: CN=E5952AE928321E53218AEFBF3413A25311681CBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5e:f6:c5:b3:1e:64:49:01:a1:7f:ca:4f:df:
                    15:b7:8f:73:5d:95:2c:5f:12:53:52:a8:85:4a:31:
                    81:39:c1:86:4d:2f:32:2c:8a:62:a2:1e:27:a3:db:
                    d2:00:09:df:18:23:7d:2a:d8:9a:56:ea:38:11:f9:
                    19:25:7d:19:a9:2c:49:7e:07:93:1c:28:fb:7a:ec:
                    44:8e:39:86:a2:14:59:a3:5b:fd:28:84:39:d2:81:
                    91:af:ec:46:9a:6d:77:34:06:b6:b4:73:b7:b5:af:
                    c7:9c:5b:79:f7:ea:70:8a:59:c3:d0:5e:de:4f:9c:
                    08:97:d5:b3:b4:73:03:4f:3a:f8:3d:43:49:e6:9d:
                    81:d0:a4:a8:4e:28:6e:cd:4d:1e:6d:67:a3:bf:f0:
                    e7:75:a0:01:3a:92:72:28:12:b3:43:f1:d0:59:77:
                    49:50:92:df:ee:48:f2:27:4a:95:ee:2a:11:5f:57:
                    ea:b4:af:7b:e0:05:a6:f1:7f:1c:0a:18:3b:bd:a9:
                    d7:8e:33:9c:83:ec:ca:bb:aa:10:9b:82:df:b0:f2:
                    db:89:3a:e1:b4:ad:17:98:f1:1d:bd:4c:2e:88:4d:
                    5a:c2:5a:18:06:97:9a:fe:44:4b:85:f5:d8:d5:6c:
                    e8:f3:a9:d9:e4:11:b0:92:d3:3e:66:ab:c1:85:f5:
                    6a:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:95:2A:E9:28:32:1E:53:21:8A:EF:BF:34:13:A2:53:11:68:1C:BA
            X509v3 Authority Key Identifier:
                keyid:6D:A6:3A:2C:BA:DC:92:DF:DE:0A:74:4E:D8:0E:9D:57:77:2E:24:67

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/baY6LLrckt_eCnRO2A6dV3cuJGc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/baY6LLrckt_eCnRO2A6dV3cuJGc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/803/5ZUq6SgyHlMhiu-_NBOiUxFoHLo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.66.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         b4:0e:c3:7e:da:bc:f8:ce:0e:b0:23:1d:3c:82:f2:98:a2:8d:
         7b:f6:70:fc:b1:fb:60:84:ce:ee:2a:3a:1a:48:d1:e9:f9:7b:
         4c:c5:c7:28:f3:7c:2f:bb:97:35:f3:97:51:a5:99:39:f0:75:
         0a:f7:19:12:bc:c0:ac:94:7a:4a:d3:3d:fa:97:07:99:fe:49:
         cb:d6:35:9a:75:47:49:f6:07:b6:69:f2:92:94:f3:1e:ba:8b:
         61:1d:bc:d9:01:4c:63:1a:2f:da:ff:c5:42:59:f1:c2:74:9c:
         ef:6c:52:68:37:74:3f:5b:a0:36:5f:a0:b4:16:c5:ff:99:84:
         10:bd:f9:f0:a4:a1:2f:98:11:b8:79:53:44:84:bf:4b:a2:96:
         48:fa:63:42:96:a8:9e:94:73:d0:23:17:85:3b:f8:ab:26:71:
         f0:4b:b7:c2:af:ae:e1:8f:f9:f0:30:a9:2e:b4:63:14:20:e1:
         59:5e:03:63:45:89:db:87:2b:68:48:d3:f8:b5:de:09:7b:59:
         17:31:5f:2e:36:df:d3:7c:00:32:9d:46:10:57:fe:1e:c7:07:
         89:7b:69:42:46:85:ba:f9:dc:9b:7c:31:de:37:7a:ef:27:0d:
         1a:e9:55:b4:a5:08:2e:89:ff:25:62:33:e2:ec:a5:68:8d:14:
         43:2d:2d:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org