Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/T3ivU0LHvvrifqNbDkAYHJdZva4.roa
File:                     T3ivU0LHvvrifqNbDkAYHJdZva4.roa (raw, json)
Hash identifier:          ISejhrCJpO2IqJiOD0fB0CPTG9SMhy816aoFnw0ERmk=
Subject key identifier:   4F:78:AF:53:42:C7:BE:FA:E2:7E:A3:5B:0E:40:18:1C:97:59:BD:AE
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       B1
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/T3ivU0LHvvrifqNbDkAYHJdZva4.roa
Signing time:             Fri 31 May 2024 01:31:53 +0000
ROA not before:           Fri 31 May 2024 01:31:53 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        211.13.0.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:33:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 177 (0xb1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:53 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=4F78AF5342C7BEFAE27EA35B0E40181C9759BDAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:1c:1f:6b:25:46:e6:13:13:c7:9d:55:e6:97:
                    cd:21:f3:cf:8a:02:9d:71:73:79:67:82:44:c3:0b:
                    2a:a3:35:ec:1f:dc:65:b7:68:42:eb:01:14:ea:ff:
                    c5:38:cd:fe:76:3b:4b:93:82:b7:41:44:f9:35:e1:
                    ba:ab:ab:aa:d8:88:c8:ad:a9:0a:05:5c:af:b6:f4:
                    0c:a3:a5:54:60:f2:42:4e:82:c3:17:39:87:95:12:
                    85:7c:df:8a:ed:db:ba:f8:9e:9c:8c:83:45:60:c0:
                    1d:29:07:3b:ec:79:06:1d:37:a8:22:8d:ed:72:52:
                    03:67:18:5c:b1:72:dc:f8:34:87:64:0c:05:86:32:
                    85:e9:bb:f6:f2:2c:62:99:0f:64:bf:e5:81:11:fe:
                    46:28:c2:84:ce:d3:69:be:37:65:3d:5a:ae:63:49:
                    dc:c0:e2:26:d3:5c:34:44:4f:b0:96:71:23:39:55:
                    e9:fa:f4:69:80:f2:ff:c9:60:b3:79:74:af:80:e0:
                    c2:6d:af:72:b5:87:40:77:32:ef:0a:dd:ab:f7:a3:
                    65:9b:82:80:d3:a6:95:5e:86:e4:45:76:a9:c6:40:
                    77:e3:a4:2b:52:d4:a7:7f:d4:8f:ea:58:23:5e:81:
                    57:d1:95:59:61:38:25:7a:62:63:39:60:66:a7:f6:
                    59:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:78:AF:53:42:C7:BE:FA:E2:7E:A3:5B:0E:40:18:1C:97:59:BD:AE
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/T3ivU0LHvvrifqNbDkAYHJdZva4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.13.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9a:df:8e:2e:d2:31:fe:1d:28:1f:3a:53:be:fd:eb:45:88:0f:
         c4:60:cf:ee:bd:98:73:57:d6:7c:ea:f3:dc:10:b1:38:8c:a3:
         f2:1a:12:53:09:cb:fc:f6:ae:69:df:a2:c3:b8:7c:6e:98:cc:
         61:d6:0e:3c:19:96:0f:92:f9:7b:24:54:fb:f6:9d:d7:d6:8e:
         2f:7a:6f:0f:b5:08:52:ba:f3:f0:a6:10:f0:4c:0d:b2:d9:c6:
         89:c6:82:6d:e0:8c:ba:b3:b7:62:a6:da:a6:a9:1c:c3:c3:34:
         dc:9c:ae:9a:61:19:e9:f1:64:f6:c8:e8:f5:99:ac:0d:8f:db:
         38:e7:d0:14:78:09:ee:05:36:80:67:6c:71:e5:34:83:bd:8f:
         e2:ee:88:46:cc:28:8d:a0:bf:75:c3:80:b9:4e:7c:d8:b8:6c:
         47:3d:a3:63:de:00:51:2f:a3:90:fe:e4:33:5e:51:16:9b:1b:
         61:94:e9:c9:47:d5:a7:55:34:c7:38:d7:61:10:e8:d3:d5:8c:
         ae:28:a3:03:94:0b:20:6d:f8:44:e8:41:ea:15:ad:78:95:b3:
         af:93:aa:77:00:36:9f:8c:7c:20:12:1a:09:38:b8:13:af:b6:
         5e:9a:ae:8e:82:9a:9a:e6:de:12:3e:47:64:e3:89:9c:3e:ef:
         86:58:ff:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 20 10:52:09 2024 by rpki-client on console-fra.rpki-client.org