Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/873/EyagjfngUgQKF_iEkccfypma1Dk.roa
File:                     EyagjfngUgQKF_iEkccfypma1Dk.roa (raw, json)
Hash identifier:          D+MgzWZTXOtMOlKd3wt9W50JG3f9BmSqlo+vZHsFG/g=
Subject key identifier:   13:26:A0:8D:F9:E0:52:04:0A:17:F8:84:91:C7:1F:CA:99:9A:D4:39
Certificate issuer:       /CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
Certificate serial:       06
Authority key identifier: 80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/EyagjfngUgQKF_iEkccfypma1Dk.roa
Signing time:             Mon 26 Feb 2024 08:11:07 +0000
ROA not before:           Mon 26 Feb 2024 08:11:07 +0000
ROA not after:            Sat 22 Feb 2025 06:48:19 +0000
asID:                     23831
IP address blocks:        202.179.32.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 20:43:15 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=80CACF70A4B6C1B6F624EF43484072406B8D3F36
        Validity
            Not Before: Feb 26 08:11:07 2024 GMT
            Not After : Feb 22 06:48:19 2025 GMT
        Subject: CN=1326A08DF9E052040A17F88491C71FCA999AD439
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:18:08:13:cf:ec:a6:d0:49:e5:d0:ea:43:47:
                    9f:a2:8f:ad:da:82:5b:38:ac:f7:f0:32:6a:5d:e5:
                    57:03:88:1a:62:e6:eb:a7:e9:3a:63:fe:9c:61:79:
                    8c:8b:f4:75:12:40:dc:e5:c3:9b:1b:33:49:41:73:
                    6b:de:d5:31:5b:3c:3a:f6:85:30:ef:ee:dc:37:45:
                    34:9f:3d:20:80:63:f6:44:73:1d:c1:3b:f1:ff:92:
                    8f:89:46:85:64:3c:c0:02:82:fd:99:24:ea:ef:2f:
                    17:94:bc:45:42:72:67:7f:3e:c0:fe:73:66:b8:1d:
                    27:58:7e:6c:da:da:69:8a:c3:f8:50:74:27:9d:fc:
                    47:f7:f0:5c:a4:8e:cf:e0:0e:13:6d:4b:7d:e0:1c:
                    ee:bf:7e:14:0a:fa:6f:ad:f2:20:7c:1d:a5:ee:66:
                    15:d2:ff:ed:1e:9d:0d:6c:df:69:7b:56:6e:b0:cb:
                    db:33:a3:59:d1:2e:93:22:5b:73:5c:43:d6:00:da:
                    40:bc:e3:3c:c0:6c:8b:8d:be:39:e5:0c:f8:8b:c2:
                    54:48:5f:d1:12:0a:c7:c6:3f:39:79:e6:66:5d:72:
                    83:4b:ef:08:92:ea:5c:b8:37:d4:f6:54:de:f6:87:
                    01:5e:d1:69:a5:36:32:9c:93:6e:20:3b:40:b0:a7:
                    dd:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:26:A0:8D:F9:E0:52:04:0A:17:F8:84:91:C7:1F:CA:99:9A:D4:39
            X509v3 Authority Key Identifier:
                keyid:80:CA:CF:70:A4:B6:C1:B6:F6:24:EF:43:48:40:72:40:6B:8D:3F:36

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/gMrPcKS2wbb2JO9DSEByQGuNPzY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/gMrPcKS2wbb2JO9DSEByQGuNPzY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/873/EyagjfngUgQKF_iEkccfypma1Dk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.179.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d5:eb:b3:d9:95:fd:d3:6d:9a:7d:03:f7:5a:17:8d:e0:ab:3e:
         67:ec:9b:46:51:13:99:1d:f0:39:e3:a0:4e:7b:47:ea:54:f3:
         d1:29:a5:85:a0:d2:c6:73:ba:6e:8c:ac:34:76:bd:8b:17:f5:
         76:66:e2:22:48:e9:2d:6c:94:43:37:88:ad:69:01:8c:63:4d:
         9d:cc:c6:ab:f8:d4:cf:90:ca:c8:b6:86:a4:eb:50:8c:1b:9f:
         e3:41:78:57:b0:3f:de:b9:91:b7:f1:30:47:24:a7:45:fa:33:
         df:f3:b5:ef:6a:98:21:65:38:02:d3:01:c3:09:2f:3e:bc:fa:
         65:ab:af:e8:01:93:79:48:b3:61:8c:3e:04:8b:ff:ee:87:d0:
         f8:dd:04:4a:34:55:4d:f3:b5:05:e5:75:9f:29:a4:35:98:8c:
         1f:c9:cc:54:65:e9:2c:25:2f:cf:e7:26:7e:5e:75:db:38:5e:
         ee:69:97:4f:6f:83:eb:84:dc:91:56:b5:2f:f1:a3:74:98:b4:
         16:72:97:01:79:c6:2f:3e:4f:ff:48:68:be:fc:b4:fe:ce:73:
         5c:44:49:af:be:4e:5f:7e:ac:9e:bc:52:db:c5:a6:26:1f:d7:
         eb:df:ad:3f:0f:a4:e4:d1:9d:b2:b2:28:2e:e6:58:81:ad:bf:
         95:41:7f:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Nov 23 02:30:30 2024 by rpki-client on console-fra.rpki-client.org