Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/Eha7ylJp5fdH2VvSjO67zpFLqhg.roa
File:                     Eha7ylJp5fdH2VvSjO67zpFLqhg.roa (raw, json)
Hash identifier:          GFdTe69+xjyNhTiHzcB1J3gk7tDms16F2+pq5upWP6A=
Subject key identifier:   12:16:BB:CA:52:69:E5:F7:47:D9:5B:D2:8C:EE:BB:CE:91:4B:AA:18
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       03
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Eha7ylJp5fdH2VvSjO67zpFLqhg.roa
Signing time:             Sat 20 Apr 2024 00:13:27 +0000
ROA not before:           Sat 20 Apr 2024 00:13:27 +0000
ROA not after:            Sat 19 Apr 2025 01:21:05 +0000
asID:                     131931
IP address blocks:        110.4.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr 20 00:13:27 2024 GMT
            Not After : Apr 19 01:21:05 2025 GMT
        Subject: CN=1216BBCA5269E5F747D95BD28CEEBBCE914BAA18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:88:06:83:57:cb:09:b5:60:5d:65:7b:a3:5a:
                    2d:91:ba:60:d8:0a:22:bf:aa:b3:55:a7:0e:0e:bf:
                    4c:20:ef:60:cf:7f:80:6b:8f:24:81:62:0e:e0:42:
                    4e:ae:b8:f1:b2:d6:a4:7b:46:6d:95:62:41:52:b9:
                    8a:a5:06:7c:4f:10:f8:f0:d2:21:47:3e:59:25:7b:
                    0f:6d:b4:e6:1f:32:e9:ea:5c:77:08:1c:76:5e:1d:
                    99:ab:f0:4c:e6:9c:4d:5c:70:49:32:c1:a3:e8:60:
                    25:dc:ec:b5:44:11:82:d3:bd:08:f4:ad:5c:4b:ad:
                    3f:f8:91:2e:d4:aa:ce:34:f7:cc:43:05:82:a4:c2:
                    8e:00:7e:c2:e7:9a:52:1c:9d:8b:a3:97:7f:e6:df:
                    19:7e:91:bd:e6:6d:9c:4e:17:cf:f7:7b:f2:71:e5:
                    5e:b0:4d:58:30:45:7f:e9:5d:a5:7e:15:56:a1:73:
                    fd:2c:f1:16:a0:6a:2e:95:35:a4:7f:80:c4:a0:0c:
                    c9:7a:2e:90:6b:af:97:ae:12:2c:ab:92:ac:32:27:
                    2c:87:95:5a:88:9d:49:d4:6a:ee:7f:87:53:f7:37:
                    37:03:f0:36:d8:68:a6:51:6b:69:1e:66:fd:9c:e6:
                    5d:ea:4a:49:f7:ca:74:19:14:ff:e1:e0:d2:e4:a1:
                    82:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:16:BB:CA:52:69:E5:F7:47:D9:5B:D2:8C:EE:BB:CE:91:4B:AA:18
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Eha7ylJp5fdH2VvSjO67zpFLqhg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.4.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         08:b8:5e:9a:19:8e:14:e8:d9:bb:0a:94:c5:a6:05:17:db:b2:
         be:21:84:d6:b7:48:d3:19:f8:f7:e3:06:db:3b:d7:ae:82:43:
         58:45:b8:4b:bf:7a:4d:00:82:33:40:67:75:ff:e7:40:5c:4a:
         a8:63:aa:87:ae:58:12:67:ed:b8:6b:fd:48:85:08:1a:fb:a2:
         21:e5:df:cf:81:c7:09:b9:7b:d6:33:9a:3f:ba:46:de:2f:c9:
         a9:dd:f3:87:e1:28:47:00:7f:ef:89:3e:91:c2:1d:96:e9:64:
         18:3b:f6:8d:3e:d8:49:53:67:5b:85:8e:07:ff:36:4b:ae:f0:
         29:61:ec:48:5a:34:0c:e4:52:3f:99:cb:61:e1:ca:4d:96:50:
         23:d7:71:89:32:52:29:d1:e5:19:3f:48:58:d5:35:fc:63:0f:
         9c:90:89:0d:a5:60:7f:e8:e2:e8:cc:16:42:6f:84:03:ea:b4:
         08:3f:8b:8f:ca:62:fe:69:06:a6:69:af:31:08:9b:bb:91:f0:
         73:50:13:2d:2c:4d:c7:88:38:9d:eb:0e:ae:16:26:dc:1f:61:
         6e:e7:f3:4a:3f:59:b1:c0:11:38:df:44:13:ad:54:90:0e:62:
         65:6f:7a:38:d9:17:f7:b3:ad:ed:58:5e:30:21:3d:e5:93:5a:
         2d:ce:68:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org