Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
File:                     XbbFmmsY9vQhaJdAxMyouDpiDn8.roa (raw, json)
Hash identifier:          yHZaXnwFAt4kiDW0w8SEps+21Cn/umSEbgexuBLO0EI=
Subject key identifier:   5D:B6:C5:9A:6B:18:F6:F4:21:68:97:40:C4:CC:A8:B8:3A:62:0E:7F
Certificate issuer:       /CN=DD829D646D53ECF298950B687532DE926EC7EBC0
Certificate serial:       04
Authority key identifier: DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
Signing time:             Mon 08 Apr 2024 06:28:08 +0000
ROA not before:           Mon 08 Apr 2024 06:28:08 +0000
ROA not after:            Tue 08 Apr 2025 06:20:08 +0000
asID:                     23827
IP address blocks:        115.31.80.0/21 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD829D646D53ECF298950B687532DE926EC7EBC0
        Validity
            Not Before: Apr  8 06:28:08 2024 GMT
            Not After : Apr  8 06:20:08 2025 GMT
        Subject: CN=5DB6C59A6B18F6F421689740C4CCA8B83A620E7F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:5d:34:67:c0:8d:9d:08:36:d3:19:ae:c7:63:
                    47:22:32:a7:bc:ae:5c:11:65:38:09:6d:0d:fb:53:
                    7c:2c:67:25:5b:4e:97:53:ee:ba:e4:fa:de:58:9c:
                    e6:53:b8:21:c6:bc:b8:9a:80:03:93:1f:70:bf:38:
                    e8:7d:4e:89:e5:15:40:32:80:9c:de:a4:cd:df:7b:
                    a0:57:ea:b4:7e:99:50:a2:40:6f:2f:2d:45:74:3e:
                    47:15:03:9d:e2:f3:82:ce:58:31:f3:c4:7e:1f:83:
                    d6:b3:ab:d2:49:ee:e7:5b:24:f9:96:c3:ba:90:74:
                    f9:ff:ae:79:f7:f6:aa:9b:f2:14:f8:3f:fe:2d:83:
                    37:d9:8f:94:88:ad:d1:28:00:0b:7e:09:f5:20:aa:
                    b4:0d:54:23:12:02:6f:33:42:5b:4f:0b:e9:cf:1f:
                    9e:90:ba:60:01:24:6d:ce:15:82:6e:b5:e3:ef:27:
                    0d:b0:ba:1f:a1:d8:e8:22:48:ea:1a:1b:2c:d3:58:
                    90:a0:21:9d:4a:81:62:d6:31:9c:71:5a:5b:32:70:
                    72:22:24:f8:e4:d6:47:cf:5c:f8:71:4f:bb:61:f9:
                    07:c8:0f:9b:d9:2f:1e:a9:01:40:4f:66:e7:b0:1a:
                    cc:2c:87:1f:83:36:d1:de:90:18:07:0e:e7:73:bc:
                    d6:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:B6:C5:9A:6B:18:F6:F4:21:68:97:40:C4:CC:A8:B8:3A:62:0E:7F
            X509v3 Authority Key Identifier:
                keyid:DD:82:9D:64:6D:53:EC:F2:98:95:0B:68:75:32:DE:92:6E:C7:EB:C0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/3YKdZG1T7PKYlQtodTLekm7H68A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3YKdZG1T7PKYlQtodTLekm7H68A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/891/XbbFmmsY9vQhaJdAxMyouDpiDn8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.31.80.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8b:70:25:fb:80:e3:0a:c9:cc:b5:14:de:e4:66:c2:6d:9e:2e:
         68:f3:be:34:51:8a:c9:d8:89:bc:59:48:8a:28:ff:08:5b:7e:
         01:9b:aa:d7:cd:01:db:9b:5f:e9:79:bd:a8:1f:94:4f:2b:dc:
         04:4e:cf:f9:14:54:2a:f0:dd:7a:b6:26:1e:8a:07:ea:a2:b3:
         ac:df:92:b4:b7:0d:2e:25:0d:b0:e9:6a:1f:ab:9c:e0:34:1c:
         cd:97:ca:c4:bf:60:75:d0:e5:b7:20:71:0b:40:f6:16:47:34:
         a5:dd:d1:64:36:02:ab:74:7a:76:5c:31:68:99:93:b6:43:93:
         80:c5:bb:07:31:4f:11:c4:ba:39:01:66:34:92:86:58:47:55:
         37:93:83:e4:86:a2:8c:69:84:ea:dd:7d:50:fd:6e:21:75:f6:
         41:a0:54:70:2c:9f:cb:cd:b5:fb:a6:67:10:13:79:dc:3f:3c:
         bc:e2:41:60:7c:ed:c2:e0:85:20:cc:0c:df:eb:40:59:25:64:
         9d:46:79:5b:fb:be:96:b7:59:9e:6a:d6:b5:b2:f5:64:b3:24:
         2a:dc:58:e9:55:a2:ec:42:1a:30:b7:0f:5c:df:20:31:db:e6:
         5a:58:dc:98:1e:f4:85:55:de:7c:7e:11:c6:53:4c:a9:bd:b4:
         f8:8e:13:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:25 2024 by rpki-client on console-fra.rpki-client.org