Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/wlyQ8reuN8V6EzgPFSbUtXmqI2c.roa
File:                     wlyQ8reuN8V6EzgPFSbUtXmqI2c.roa (raw, json)
Hash identifier:          0qxv82hEb9d1mw1z80i2q92oxnDtPQVrROBIF0GVNwE=
Subject key identifier:   C2:5C:90:F2:B7:AE:37:C5:7A:13:38:0F:15:26:D4:B5:79:AA:23:67
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       2B
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/wlyQ8reuN8V6EzgPFSbUtXmqI2c.roa
Signing time:             Thu 01 Feb 2024 01:30:24 +0000
ROA not before:           Thu 01 Feb 2024 01:30:24 +0000
ROA not after:            Tue 14 Jan 2025 01:30:02 +0000
asID:                     55385
IP address blocks:        202.174.58.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 43 (0x2b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Feb  1 01:30:24 2024 GMT
            Not After : Jan 14 01:30:02 2025 GMT
        Subject: CN=C25C90F2B7AE37C57A13380F1526D4B579AA2367
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:bd:a2:53:2f:b5:35:0a:9f:ea:95:b9:1e:ab:
                    2a:76:44:98:46:9b:80:99:26:bc:ba:77:14:6d:b1:
                    81:1e:b8:e4:cc:54:65:57:87:de:6e:66:87:f7:0f:
                    cc:96:94:44:25:ee:4a:f8:d3:92:dd:8f:59:60:dd:
                    6a:23:50:25:38:27:cb:8d:6f:d7:c3:36:cb:38:d5:
                    50:6e:42:89:4d:94:07:17:58:c4:83:7a:f0:6a:10:
                    4d:4c:d3:d8:a0:ad:e3:21:b1:59:76:71:a7:3a:eb:
                    8b:ea:30:e5:f2:7e:41:96:95:43:73:ad:e3:0f:77:
                    e6:ae:fa:0f:bc:c9:49:50:19:9d:fb:01:98:79:0f:
                    80:db:86:10:2a:7a:4d:2b:97:d2:02:d5:7b:6b:90:
                    b4:1e:1b:6f:41:73:cc:e5:1f:9c:fd:8c:5a:72:f0:
                    97:1b:ff:f2:63:d0:71:9d:e7:9f:1b:0e:0f:ae:8d:
                    23:de:9d:d8:ef:b9:93:cf:1f:6d:ef:a4:20:9f:2f:
                    a1:ba:4a:50:95:75:93:aa:63:d2:58:9f:23:06:c8:
                    5a:4e:e6:c4:03:11:5a:97:2d:b8:fe:83:55:42:29:
                    cb:d0:59:6e:38:0e:f2:33:08:d4:43:c2:5b:66:4d:
                    2c:ed:50:7a:42:96:6a:53:19:bd:59:d6:4d:e6:7e:
                    aa:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:5C:90:F2:B7:AE:37:C5:7A:13:38:0F:15:26:D4:B5:79:AA:23:67
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/wlyQ8reuN8V6EzgPFSbUtXmqI2c.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b6:15:19:80:d1:20:f4:3a:65:7c:a0:d8:49:3a:be:5f:01:5b:
         8b:af:dc:69:65:e0:19:a4:3b:ae:c3:e8:39:ed:b8:ad:70:84:
         ee:f9:18:07:a2:fd:bf:ab:09:0d:56:52:70:e4:51:62:25:7e:
         b6:85:71:d4:db:6b:da:4c:a4:bd:59:0e:ea:7e:9b:04:7b:10:
         48:61:1b:90:8f:b6:39:6e:51:5d:af:b1:75:dd:4f:db:df:03:
         bb:9c:01:47:04:c3:66:70:f1:d0:73:b1:75:64:fb:24:ef:9f:
         2d:51:44:01:67:9b:a4:75:30:5b:86:74:68:c3:ff:6e:54:6f:
         9c:9d:09:57:68:2a:b3:c2:7e:7d:6a:8a:e5:48:26:05:78:7b:
         bd:7b:bc:10:b3:55:cf:86:0b:a6:67:69:ef:96:44:92:74:b6:
         c7:4f:de:24:77:90:1b:f3:2a:01:77:d0:38:4e:eb:b3:12:81:
         07:0e:2b:5b:d8:83:b9:5c:0f:57:83:4e:8f:61:2f:29:89:f5:
         6c:73:a8:4a:17:d0:39:1b:64:f6:49:60:4c:b3:a2:3e:79:b1:
         d6:6b:f1:90:b2:da:00:b2:e3:52:ea:2f:d2:cb:f2:e2:af:97:
         79:5c:57:d3:c4:ff:76:84:4d:d4:25:84:b7:6e:a1:b3:4b:bb:
         89:0c:59:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org