Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/_J_08Xey7VHgu72--o5FHE_wmLc.roa
File:                     _J_08Xey7VHgu72--o5FHE_wmLc.roa (raw, json)
Hash identifier:          x/39rpKAalfZJOGCSyCqhmwM7Q0IZBMIQeLSYoL8KjU=
Subject key identifier:   FC:9F:F4:F1:77:B2:ED:51:E0:BB:BD:BE:FA:8E:45:1C:4F:F0:98:B7
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       2D
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/_J_08Xey7VHgu72--o5FHE_wmLc.roa
Signing time:             Thu 01 Feb 2024 01:30:25 +0000
ROA not before:           Thu 01 Feb 2024 01:30:25 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     17683
IP address blocks:        202.227.96.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Feb  1 01:30:25 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=FC9FF4F177B2ED51E0BBBDBEFA8E451C4FF098B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a7:09:5b:3a:ec:fa:59:9b:fc:07:a9:02:98:
                    29:cb:43:07:b6:8e:0d:84:40:f2:ca:02:fb:c9:74:
                    12:6b:3e:74:f9:59:af:b6:a5:6e:6f:b3:a7:80:34:
                    6f:f7:18:b3:5a:56:53:86:d3:ee:4c:4a:56:77:2d:
                    a2:d4:ec:9b:99:f8:65:2e:22:85:0a:54:41:43:25:
                    65:e0:06:cc:ee:3a:13:51:34:fd:42:22:45:ea:dd:
                    e1:8d:8a:9e:61:20:d0:a8:07:3d:42:0f:bd:19:33:
                    95:c2:fb:b5:a8:c9:92:d4:17:ce:41:c7:c4:39:f7:
                    6d:72:e2:e7:38:e2:84:8d:48:90:8f:41:4e:4d:5c:
                    91:01:37:bd:ba:9e:28:b4:01:19:6c:4c:13:c8:53:
                    1f:45:d1:47:4d:7d:25:d2:d3:86:bc:a2:7a:27:cf:
                    f4:ec:f5:65:8e:dc:e7:15:a9:b3:74:b0:52:4f:70:
                    5d:e1:9d:4f:2a:98:90:5a:6a:79:ef:e0:63:be:1c:
                    b8:7e:3e:d1:e8:56:3c:61:a0:60:66:95:e8:ac:d2:
                    12:63:d2:8f:c3:67:ac:7a:e0:26:2c:a9:c4:78:ff:
                    5d:81:53:fe:b2:43:e6:91:1f:74:55:10:c8:90:7a:
                    d4:35:0f:60:de:9f:66:bb:3a:15:c8:95:b6:70:a5:
                    33:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:9F:F4:F1:77:B2:ED:51:E0:BB:BD:BE:FA:8E:45:1C:4F:F0:98:B7
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/_J_08Xey7VHgu72--o5FHE_wmLc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.227.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         6e:a2:47:df:fa:65:65:db:90:0b:85:bf:f6:81:0c:80:7a:4b:
         e9:ec:e4:c1:f8:4e:17:b2:4e:29:5f:3e:96:90:f2:01:4d:fa:
         d6:e8:91:db:2a:66:00:05:ff:24:24:e3:46:5e:f7:c3:4d:d7:
         f4:a3:e6:8f:16:36:4d:f6:ac:0d:5c:b9:f1:54:76:48:36:92:
         19:3a:67:07:7a:a1:1e:cf:56:be:6f:c2:44:58:53:3f:e5:d1:
         50:cd:90:8e:47:3d:11:e0:b3:8e:3c:90:43:ed:4b:08:f3:2c:
         d4:f4:b9:3f:d0:05:07:86:b3:30:85:5d:08:b5:cb:1d:da:fb:
         59:83:6a:9b:2d:1e:72:e4:1d:25:cc:88:41:bb:bb:a8:74:b1:
         5f:5a:8d:81:6c:ec:0c:b1:4f:9b:8e:58:9e:10:b8:9a:71:e3:
         0a:37:db:c1:35:e7:c5:58:76:fe:cc:6a:74:3c:22:c1:1b:e8:
         b9:55:65:0a:6c:9f:bc:4e:8b:28:5c:6f:a9:8c:06:6d:b6:84:
         fc:23:9e:20:e4:3e:8f:fe:43:2f:79:43:a2:4a:d0:19:22:f4:
         df:40:1e:04:d0:43:38:e4:03:ad:26:2c:b5:07:15:4a:9f:ed:
         00:79:c5:03:2b:4a:47:6a:75:c4:82:f5:7c:ff:b1:7b:da:c0:
         94:c2:20:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org