Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/fhE-I8Q4E8di05r7ulo47AkDRBg.roa
File:                     fhE-I8Q4E8di05r7ulo47AkDRBg.roa (raw, json)
Hash identifier:          /r0qFgPCbnC5wlFuJO6htbPH6mvQhP5ERzRxO9/TFkI=
Subject key identifier:   7E:11:3E:23:C4:38:13:C7:62:D3:9A:FB:BA:5A:38:EC:09:03:44:18
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       9F
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fhE-I8Q4E8di05r7ulo47AkDRBg.roa
Signing time:             Fri 31 May 2024 01:31:44 +0000
ROA not before:           Fri 31 May 2024 01:31:44 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        122.130.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 06:55:40 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 159 (0x9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:44 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7E113E23C43813C762D39AFBBA5A38EC09034418
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:85:cf:39:bc:48:5d:4a:e6:38:98:91:28:8f:
                    bc:e2:6d:4c:07:f5:ab:34:d5:30:57:9d:16:c4:84:
                    98:70:cc:5d:54:ca:1f:d9:f6:7e:88:64:33:87:ee:
                    65:37:ec:db:90:cb:1e:52:60:9a:a9:4d:64:1d:47:
                    6a:f1:40:b4:3f:8b:84:ee:18:bd:d8:a6:f7:5e:20:
                    3c:4f:fd:e8:ca:76:5b:99:5f:41:3d:98:1a:99:ed:
                    b1:3f:a5:2f:14:46:b7:f3:7f:b3:23:b9:69:a2:ed:
                    98:19:e7:f6:04:fa:d9:88:8d:2f:bc:bc:ee:ea:91:
                    8b:36:46:21:ec:b2:dc:ed:58:46:7a:30:fc:c2:cf:
                    33:a1:fb:1c:40:8a:68:ae:35:cb:b2:5a:e4:5e:4a:
                    60:b1:d4:91:4d:26:ec:7e:97:52:5d:42:d4:11:8e:
                    55:45:80:d9:c8:f4:d5:2c:f9:93:19:d8:5c:47:5c:
                    a7:ad:d6:5b:58:05:41:37:69:b5:4b:36:67:ea:66:
                    b2:96:22:8d:51:59:7e:6c:9d:06:78:5e:88:c2:9e:
                    76:91:a2:b6:32:2d:de:40:25:7c:bb:5d:70:5c:59:
                    9d:e9:3b:4f:84:73:43:58:98:5a:27:45:57:1e:e0:
                    84:d4:16:2b:16:f0:26:ef:2b:2b:5f:a2:af:fc:8d:
                    71:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:11:3E:23:C4:38:13:C7:62:D3:9A:FB:BA:5A:38:EC:09:03:44:18
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fhE-I8Q4E8di05r7ulo47AkDRBg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.130.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         5f:a6:ef:15:66:31:e1:c3:61:b1:fe:58:ac:9c:f0:32:fc:b6:
         64:a7:3e:60:0f:44:32:61:35:04:88:40:d5:b6:97:97:d2:8a:
         98:3a:d0:cf:38:d5:a4:5c:01:84:16:92:99:1e:21:2f:12:67:
         de:a8:cb:54:9a:69:3d:47:a3:19:85:7c:49:64:3b:d6:70:ce:
         42:95:e0:89:dd:3c:25:61:ce:0c:c2:f1:4f:b2:2c:a6:2e:39:
         0a:95:9d:46:a3:b4:1b:95:f3:6d:5b:15:80:f5:c0:e2:14:be:
         64:26:75:80:36:76:c6:21:2e:b0:1a:91:d1:dd:2b:b6:17:6f:
         f4:08:2b:f5:9a:3a:65:ad:5e:89:2c:25:32:dd:e7:d5:e8:1b:
         e6:f0:0a:c2:16:b1:07:ae:5a:19:32:e1:9b:65:fb:55:97:77:
         44:4b:a1:97:8e:55:01:9e:d1:ac:57:6d:eb:4f:f5:f1:ce:a6:
         b0:69:9f:70:28:33:32:26:f7:73:6a:28:68:29:a2:53:ec:0c:
         2e:67:ab:01:d5:62:20:dc:d6:f6:b1:10:16:85:7f:6f:75:6e:
         2e:fa:b5:d0:a1:43:7c:e7:2c:04:43:eb:b9:c2:99:0e:04:b1:
         29:92:cf:08:85:be:a0:2f:2d:e4:eb:a9:39:d5:94:a0:f3:c9:
         ba:d2:7e:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 08:13:04 2024 by rpki-client on console-ams.rpki-client.org