Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/906/LAgcHO-Bk5gwk8n9ulEItxFpCpg.roa
File:                     LAgcHO-Bk5gwk8n9ulEItxFpCpg.roa (raw, json)
Hash identifier:          mTVAl4j6lyvDx/bKu3RDytoYzSWpZkBP/h+npUxd26k=
Subject key identifier:   2C:08:1C:1C:EF:81:93:98:30:93:C9:FD:BA:51:08:B7:11:69:0A:98
Certificate issuer:       /CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
Certificate serial:       23
Authority key identifier: 53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/LAgcHO-Bk5gwk8n9ulEItxFpCpg.roa
Signing time:             Thu 18 Jul 2024 01:47:20 +0000
ROA not before:           Thu 18 Jul 2024 01:47:20 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24259
IP address blocks:        202.127.176.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=539BDF2FE18FF387FD03842C5081A145EEEB1CF7
        Validity
            Not Before: Jul 18 01:47:20 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=2C081C1CEF8193983093C9FDBA5108B711690A98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b5:09:54:64:03:4e:71:2e:96:2e:d6:89:aa:
                    d2:dd:45:6d:44:6b:7f:d8:9f:78:0f:23:31:06:36:
                    bc:2f:35:7e:b8:43:61:73:b7:8b:f2:76:90:21:f1:
                    bf:68:2c:40:8c:d1:5d:23:45:7f:95:0a:b4:7a:11:
                    3f:56:f0:93:15:a5:10:3e:c5:06:13:9d:85:92:dc:
                    60:2c:7d:31:48:c4:26:2b:79:51:3e:6d:1e:b9:6a:
                    7d:4d:a5:62:09:53:aa:cd:ff:40:6a:83:c4:4b:5f:
                    ee:46:59:8c:4a:c2:33:4b:db:ad:fa:c0:0a:49:ea:
                    f1:1a:7a:95:0d:19:93:1d:6e:29:e6:35:57:7a:90:
                    56:57:bd:e1:5e:69:bc:87:92:ca:29:5e:bb:95:20:
                    cc:bf:a4:42:43:02:88:43:6b:c9:2c:c8:9f:92:b9:
                    df:92:22:4b:be:62:f2:cc:c3:4d:85:ac:31:b2:43:
                    c4:98:48:27:b0:64:f9:0e:52:75:75:c8:dc:6e:92:
                    1f:30:8b:0e:41:6e:20:c2:c2:e3:9d:fc:87:85:bc:
                    55:1b:04:76:a1:48:e7:07:e6:89:ba:f8:0d:45:c8:
                    a1:ea:4e:46:3e:fa:b1:d7:5a:1e:fe:92:a8:24:b7:
                    74:2c:d5:e6:79:39:ca:26:8d:08:c1:2b:db:34:e5:
                    a3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:08:1C:1C:EF:81:93:98:30:93:C9:FD:BA:51:08:B7:11:69:0A:98
            X509v3 Authority Key Identifier:
                keyid:53:9B:DF:2F:E1:8F:F3:87:FD:03:84:2C:50:81:A1:45:EE:EB:1C:F7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/U5vfL-GP84f9A4QsUIGhRe7rHPc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/U5vfL-GP84f9A4QsUIGhRe7rHPc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/906/LAgcHO-Bk5gwk8n9ulEItxFpCpg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.127.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         81:5e:7f:e4:ca:d9:dd:3e:2a:4e:4f:9b:67:7d:cc:7e:35:8d:
         cb:14:0b:92:2c:48:be:8d:73:76:98:ef:4b:97:58:4c:29:92:
         0f:cd:e2:52:06:fc:c9:e7:6b:01:49:fe:94:e7:4b:3f:be:31:
         96:05:df:6d:ab:df:79:96:97:9a:1e:67:e2:a4:57:24:0e:86:
         21:5f:b1:6a:fc:94:77:73:5e:a7:c1:7b:62:a0:75:87:73:20:
         9d:6b:2c:c6:b8:fc:42:52:39:d0:73:30:56:c6:61:8a:db:ff:
         dd:3c:27:47:3b:d4:a5:59:82:10:6b:e4:22:40:93:10:2c:66:
         e2:14:af:b3:71:56:e7:0d:11:c2:18:06:c0:96:43:59:a4:a9:
         6e:f6:fe:6d:48:da:b6:0a:65:ac:fa:0c:52:59:4a:a8:f3:6b:
         16:91:54:b5:c4:c0:61:7c:48:31:1e:fc:e6:c5:28:ae:db:8a:
         34:c7:05:c1:e9:52:0f:59:4e:43:aa:14:c7:c4:2d:87:93:6d:
         f0:ff:b3:e5:e6:39:c2:66:84:2e:9b:cd:2f:12:1c:46:72:aa:
         9a:0b:8b:ca:69:46:58:0a:a2:40:36:f0:d2:0f:00:2a:d8:fa:
         80:3e:08:9b:3f:89:2f:7d:23:94:01:fe:1f:3f:d0:7b:6e:61:
         04:94:a0:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:49 2024 by rpki-client on console-ams.rpki-client.org