Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/JBo819C5AYtXtbskdiZizKgi4JE.roa
File:                     JBo819C5AYtXtbskdiZizKgi4JE.roa (raw, json)
Hash identifier:          vJnFvsxJXHT1dlUDFrgkiFrYWd0socsa4mRGktLQ/O4=
Subject key identifier:   24:1A:3C:D7:D0:B9:01:8B:57:B5:BB:24:76:26:62:CC:A8:22:E0:91
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       0F
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/JBo819C5AYtXtbskdiZizKgi4JE.roa
Signing time:             Sun 08 Oct 2023 23:27:03 +0000
ROA not before:           Sun 08 Oct 2023 23:27:03 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        180.148.144.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  8 23:27:03 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=241A3CD7D0B9018B57B5BB24762662CCA822E091
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:72:85:73:b1:92:99:ae:03:84:2a:d2:96:d5:
                    31:15:e5:91:f1:a9:4a:9c:3e:fa:fe:1a:c1:e7:41:
                    f2:73:94:32:35:d5:c5:01:0c:23:15:4c:ef:bd:85:
                    a8:4f:bd:da:dd:f6:d1:44:22:34:73:9e:6e:0e:3b:
                    6b:80:32:f1:7a:63:d9:8a:23:b2:68:b2:c5:e7:8f:
                    e1:2f:73:33:21:eb:0b:79:fb:5d:8d:a2:f9:fc:29:
                    69:fa:1e:7b:d9:fd:6c:c6:35:a3:a0:6c:ed:43:81:
                    2a:28:e5:a8:93:a5:83:29:57:c5:6b:d4:e0:c1:cd:
                    a0:62:ef:2f:aa:74:b7:f5:69:d5:44:3e:49:9f:10:
                    74:fb:35:15:cc:ab:a9:b1:73:18:14:20:8c:7f:aa:
                    17:15:1f:a0:03:00:93:3c:2d:a5:ce:ba:78:5a:26:
                    1e:5f:7c:52:6c:f1:7a:b2:6d:23:c3:e4:55:bf:6f:
                    63:de:97:5d:33:d6:46:d4:c3:6c:86:ec:08:a3:6a:
                    5a:bc:e4:83:d1:0c:6c:0c:83:65:f1:b9:f5:db:3b:
                    d9:73:b3:bc:fb:bd:18:10:2d:a0:12:00:18:81:b8:
                    36:89:9d:4e:70:be:fe:ab:e2:19:5d:c1:e0:85:9f:
                    3e:e4:d4:76:e6:2e:47:3b:23:c4:8e:24:be:50:38:
                    18:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:1A:3C:D7:D0:B9:01:8B:57:B5:BB:24:76:26:62:CC:A8:22:E0:91
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/JBo819C5AYtXtbskdiZizKgi4JE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  180.148.144.0/21

    Signature Algorithm: sha256WithRSAEncryption
         32:3f:95:68:30:d5:6f:1e:22:b4:90:32:5f:32:c8:d0:28:3a:
         c7:86:fe:e5:79:82:5a:a9:e5:de:fe:80:29:8e:e6:49:ee:db:
         01:ee:eb:f8:42:8f:2c:e7:34:1c:3e:a5:d6:bf:3f:36:a5:2b:
         81:6d:95:80:9c:f8:cc:a7:fb:60:29:bc:34:4f:4e:e7:4b:99:
         4b:29:50:99:7e:0d:cb:fb:3a:38:0c:5c:27:60:07:6c:f3:89:
         04:b6:ce:e3:9d:be:16:29:1a:35:e5:0c:81:bd:14:59:6d:06:
         8d:1d:e9:22:ee:8e:36:f7:36:bc:2b:78:b7:a0:5e:58:f5:1f:
         bd:31:bb:6e:58:b3:80:c2:64:18:65:30:a2:86:d7:57:9a:05:
         d2:72:ae:15:d7:fb:2c:43:de:d2:2e:fc:70:26:0d:79:c3:ee:
         b5:ab:b3:aa:e0:81:32:a0:d6:e3:2c:ec:3c:38:0c:1e:84:3e:
         ac:5c:6b:6d:63:d1:db:3a:d8:f8:46:a4:9e:6f:2d:5f:18:0c:
         27:43:0b:ff:3c:85:9f:5e:b6:4d:db:c0:35:b2:25:62:d2:2e:
         8a:be:58:e3:f3:6f:4a:6a:12:b0:b6:e1:82:56:d2:9d:4a:90:
         34:d0:a5:1f:bb:a8:92:6c:27:03:10:86:bd:ee:cd:ae:f7:0d:
         02:23:b1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:47 2024 by rpki-client on console-fra.rpki-client.org