Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
File:                     sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa (raw, json)
Hash identifier:          L7g5ZjKrKWHKgEQ+v4IK8RxzHHwwTXKXwceAddKUKTo=
Subject key identifier:   B0:BC:D3:0A:B5:8B:50:4B:E1:CE:10:45:8E:2C:22:40:1F:5D:40:72
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       AB
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
Signing time:             Fri 31 May 2024 01:31:50 +0000
ROA not before:           Fri 31 May 2024 01:31:50 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        111.168.0.0/15 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 171 (0xab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:50 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=B0BCD30AB58B504BE1CE10458E2C22401F5D4072
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:d8:51:48:8f:01:50:8d:e5:ff:d0:aa:02:16:
                    72:f0:1f:db:45:4e:fe:0b:ad:a1:ea:90:0e:9e:38:
                    3c:d1:52:d2:c8:c3:3a:aa:ed:82:5b:cb:94:f7:bf:
                    bb:6d:bb:22:a2:e0:71:a6:7c:23:7e:ce:84:ad:04:
                    ad:63:5c:ee:b4:5e:71:cf:01:a8:fd:04:87:c9:87:
                    06:b8:f0:33:50:93:1b:30:38:2a:59:cb:9d:31:92:
                    9e:ee:e5:18:0b:1b:a3:01:d5:a4:4b:3b:4c:24:4f:
                    60:1e:07:b9:37:c8:12:1e:50:1c:77:6d:a2:17:2b:
                    12:01:94:c0:40:e5:a1:b5:36:23:f3:4b:b3:d4:ed:
                    e6:28:8a:6a:4b:28:11:03:ea:fb:e6:a8:f6:e1:95:
                    18:17:dc:5e:b3:70:39:d9:12:de:c7:9b:90:09:63:
                    b6:68:37:0d:3e:d6:dc:f2:fe:18:81:a8:98:6b:c0:
                    93:7e:c6:ee:7a:4f:ab:9e:2a:c5:01:9d:dd:d2:77:
                    a7:69:b9:1e:7e:c3:d4:d8:18:61:24:bd:cb:82:6f:
                    39:86:d8:2e:cd:9c:3f:bb:a2:9b:9a:da:29:ee:0a:
                    13:48:36:10:93:a4:e5:7f:c9:ac:5b:52:a5:bc:10:
                    2d:f1:2c:ea:37:19:e5:08:fc:69:d0:29:36:1c:38:
                    c8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:BC:D3:0A:B5:8B:50:4B:E1:CE:10:45:8E:2C:22:40:1F:5D:40:72
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/sLzTCrWLUEvhzhBFjiwiQB9dQHI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  111.168.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         81:43:9b:58:88:78:71:4a:99:f1:84:a9:29:e7:fc:05:82:f3:
         51:42:00:41:a2:fa:b3:61:4d:b4:25:a8:03:dc:b2:87:78:d9:
         59:57:d4:05:c2:b1:9b:bb:94:bf:5e:80:18:95:f8:85:7f:8d:
         7f:d5:02:dd:64:a1:68:28:fa:3e:a5:cf:5f:7f:24:06:2f:5e:
         97:de:88:9b:29:90:de:2d:67:11:21:b6:1e:08:ee:07:55:ad:
         a4:04:47:7b:bc:2e:c8:f1:cd:b3:0e:df:cd:ee:a2:41:6b:71:
         83:a3:3b:a7:cf:67:f2:34:d3:c1:de:09:24:10:41:25:92:91:
         cb:b3:11:b1:79:0b:79:99:c5:31:e9:b8:bd:02:0e:61:7f:3a:
         65:05:f0:b2:a2:32:79:4a:53:ed:b6:9b:65:1f:86:30:81:a0:
         60:4a:ab:b7:f6:b9:6d:94:ce:90:8f:02:e3:bf:d5:ed:6f:58:
         57:58:cf:a0:9e:c3:30:5b:64:50:0c:42:64:f1:0c:69:04:69:
         08:40:0a:d1:6e:e3:d4:8a:bc:3e:0c:3c:86:9e:55:e1:29:2d:
         fd:69:b1:14:99:0b:f9:f3:4f:c4:7f:02:f3:32:ab:29:3b:b9:
         2d:4a:a6:14:e7:a0:33:ae:32:af:12:e1:38:79:6a:bd:dd:44:
         0b:d9:a7:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:19 2024 by rpki-client on console-fra.rpki-client.org