Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/lppIEeZvUNXn_tWsgojdPZD_04Y.roa
File:                     lppIEeZvUNXn_tWsgojdPZD_04Y.roa (raw, json)
Hash identifier:          yoY7hCw0t0QuS7cNNm8LWUPzrkA3yn1EG9qWZE8Cah8=
Subject key identifier:   96:9A:48:11:E6:6F:50:D5:E7:FE:D5:AC:82:88:DD:3D:90:FF:D3:86
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       34
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/lppIEeZvUNXn_tWsgojdPZD_04Y.roa
Signing time:             Thu 28 Mar 2024 08:31:31 +0000
ROA not before:           Thu 28 Mar 2024 08:31:31 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23818
IP address blocks:        113.212.104.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 10 Jul 2024 04:40:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 52 (0x34)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:31:31 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=969A4811E66F50D5E7FED5AC8288DD3D90FFD386
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:4d:4b:b0:85:ea:7f:18:99:9f:43:50:8f:e3:
                    4c:62:8e:8f:42:4b:17:1f:bf:15:c8:e5:b5:fe:cf:
                    ef:c6:eb:66:5b:1d:1b:c1:a9:f2:d9:58:c9:04:1c:
                    12:42:a5:9a:75:46:c5:f9:d0:85:5c:97:00:da:a9:
                    7e:59:1f:99:19:58:24:d0:1f:c9:52:1c:78:f1:c2:
                    8e:1a:9a:9b:1a:8a:b8:1f:6f:e3:0e:32:c9:51:16:
                    03:e0:52:2e:d9:91:bb:85:a2:dc:a2:b0:a5:49:ce:
                    c4:d0:4f:c0:4a:ff:bc:d4:6a:f8:cb:9a:5a:28:ea:
                    15:38:be:7b:3f:a2:6a:a1:cf:89:58:b8:39:b3:0b:
                    e8:83:8d:dc:84:56:16:18:f5:28:3e:d1:6d:06:a4:
                    e4:9d:8f:9e:e9:6c:00:ca:3e:7a:0c:b0:23:c9:6a:
                    46:54:50:1f:8f:1d:77:f8:95:00:0f:62:17:20:6f:
                    75:69:3f:9c:88:ab:b8:8a:5c:a5:b6:9e:3b:0d:e3:
                    f5:68:88:98:f0:d2:06:2d:2c:eb:d4:06:9b:d6:e0:
                    8c:62:4d:21:32:b5:2a:00:be:7f:08:7a:8c:92:1d:
                    58:a4:13:2d:e4:86:5d:63:40:9b:0d:c9:40:9c:fa:
                    1d:d5:3e:fd:5c:90:3d:a2:48:b5:a7:f7:13:c7:86:
                    0d:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:9A:48:11:E6:6F:50:D5:E7:FE:D5:AC:82:88:DD:3D:90:FF:D3:86
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/lppIEeZvUNXn_tWsgojdPZD_04Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.104.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:6a:52:c9:5a:b2:c1:06:8f:19:7f:0f:81:5a:6e:09:9a:af:
         dc:35:f7:76:a0:73:4a:8b:92:b7:79:ae:1e:fd:bb:03:aa:be:
         ca:99:66:f8:09:00:26:de:0a:01:53:af:38:4a:a4:13:ac:26:
         4f:11:5f:36:63:99:4a:8c:83:98:33:c1:e5:f0:a8:aa:12:b6:
         f3:ec:2a:2b:42:61:77:49:55:44:db:17:af:5a:50:20:24:a7:
         57:85:d1:50:c5:c6:b4:8c:aa:69:55:d0:3c:b2:d3:f0:81:0f:
         d1:35:06:23:a6:30:82:1c:23:9b:aa:19:39:65:35:cc:a6:a3:
         ec:dd:57:2a:4f:87:91:ce:ee:71:cb:99:3b:9b:19:d9:51:09:
         63:d3:74:f8:75:49:5a:da:9a:a9:28:80:dc:a4:ff:01:a9:63:
         0a:38:29:7d:c0:55:75:c2:d2:33:e8:62:ed:ca:2d:a6:50:ae:
         46:a0:27:7d:d6:ea:9f:11:45:d0:63:2f:62:d3:15:55:8a:8a:
         86:3c:d2:26:8f:3d:ce:ba:92:c0:2f:cd:ad:73:05:ba:8d:e9:
         53:89:fe:bb:c6:12:18:54:58:70:39:83:f9:a1:0d:f6:76:a1:
         73:4f:01:fc:ae:77:94:69:90:9a:ef:05:11:67:26:2f:dd:19:
         cf:ae:11:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 3 06:12:08 2024 by rpki-client on console-ams.rpki-client.org