Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/v0Y3buJvIJ6rwrsSvS_1R52EScE.roa
File:                     v0Y3buJvIJ6rwrsSvS_1R52EScE.roa (raw, json)
Hash identifier:          9/7I42pGeEMuD/wGeCD0jc4FEj4oZt2PNUlIkNrBIuY=
Subject key identifier:   BF:46:37:6E:E2:6F:20:9E:AB:C2:BB:12:BD:2F:F5:47:9D:84:49:C1
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       A6
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/v0Y3buJvIJ6rwrsSvS_1R52EScE.roa
Signing time:             Fri 31 May 2024 01:31:48 +0000
ROA not before:           Fri 31 May 2024 01:31:48 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        119.244.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:48 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=BF46376EE26F209EABC2BB12BD2FF5479D8449C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:d4:56:ea:6f:42:60:34:86:40:93:6e:02:fc:
                    1c:cf:db:ae:a8:24:f6:5f:e3:d3:5a:65:61:ef:66:
                    dc:1e:a7:5e:b6:1b:60:8b:fc:fe:b5:68:24:5f:9b:
                    5b:fd:10:d2:21:d2:3c:d4:97:c9:18:9e:96:22:36:
                    5e:3a:df:e0:9f:d1:86:73:d7:fa:a5:f8:19:b4:15:
                    b9:ab:89:8e:0d:eb:ca:92:7e:9f:d5:a1:a6:54:f0:
                    4c:de:4b:8d:d2:ca:12:48:cd:6d:7e:f8:ca:ec:12:
                    57:a1:6c:25:9f:00:2d:5f:e1:20:4a:1d:f9:61:71:
                    ca:1e:07:bb:b4:8f:12:37:42:a6:37:59:ab:b5:95:
                    b2:39:7d:50:8d:44:be:ab:ee:fe:b8:9b:34:6d:42:
                    ce:cf:6b:5c:cf:98:58:ef:48:a8:0e:29:bb:3a:10:
                    8b:2c:f4:b0:86:48:00:41:77:52:f8:39:c2:a9:79:
                    55:6c:db:4e:4e:d0:07:71:ff:11:54:f1:e1:ce:c8:
                    0a:39:1d:ad:7b:c2:f8:b0:0a:33:35:27:7c:03:a5:
                    38:2a:03:9c:6a:f5:45:d1:8d:59:34:8f:79:80:26:
                    3b:b8:92:e0:53:2c:23:7f:43:4c:3b:63:09:27:a5:
                    b8:69:1d:1a:cf:fc:3a:dc:cc:8a:5e:63:28:ac:90:
                    fb:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:46:37:6E:E2:6F:20:9E:AB:C2:BB:12:BD:2F:F5:47:9D:84:49:C1
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/v0Y3buJvIJ6rwrsSvS_1R52EScE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.244.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         39:ec:49:68:49:fa:89:ee:dc:7c:80:b4:c8:51:b6:1a:85:02:
         57:10:6b:b5:18:ae:ba:c2:70:bb:a0:8c:c4:8f:6a:8e:fe:48:
         7d:f5:d7:ee:0b:0f:c6:8e:d5:8d:4e:ed:f7:e6:70:1f:78:c2:
         3d:cb:d6:9b:0b:59:72:87:66:8b:60:4e:d7:d8:8e:79:3f:35:
         da:9e:46:52:56:dd:ba:49:7f:f4:eb:b1:f8:b6:a2:93:54:9b:
         ed:31:8e:9a:78:bd:14:d8:53:6d:f4:9f:42:7e:b4:f9:d2:f1:
         d7:37:09:68:7e:f4:9c:c4:28:57:c9:b9:05:e8:ce:a9:e3:a2:
         c4:6e:eb:fc:38:b9:e0:73:81:e8:cc:1c:87:df:30:46:a8:9d:
         18:46:3c:24:b7:d5:47:3e:79:b8:3f:44:a5:e5:cf:40:52:23:
         82:44:b8:1f:41:2d:d5:24:c4:92:48:4a:2a:0f:0c:66:04:cb:
         6c:bd:19:c7:63:f5:70:b1:2b:d6:4c:a8:98:46:ad:81:ad:36:
         3a:1c:29:3f:81:84:14:4a:db:d7:14:8a:93:cf:e8:48:12:bb:
         25:9c:44:11:fd:ee:a3:f5:f6:51:04:09:e9:55:21:95:5a:ae:
         96:f5:3d:0f:87:66:00:55:c7:06:4d:88:45:87:17:45:57:53:
         bd:c5:42:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:50 2024 by rpki-client on console-ams.rpki-client.org