Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/Fyi8EYNLyBlJjDMwXJFX9qD9h3Q.roa
File:                     Fyi8EYNLyBlJjDMwXJFX9qD9h3Q.roa (raw, json)
Hash identifier:          ieaCGWvQRljyFC0A6febC+SEMl+ca49eZIwKDc3SAnE=
Subject key identifier:   17:28:BC:11:83:4B:C8:19:49:8C:33:30:5C:91:57:F6:A0:FD:87:74
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       28
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/Fyi8EYNLyBlJjDMwXJFX9qD9h3Q.roa
Signing time:             Sun 30 Jun 2024 01:32:40 +0000
ROA not before:           Sun 30 Jun 2024 01:32:40 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38628
IP address blocks:        115.124.48.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 40 (0x28)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Jun 30 01:32:40 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=1728BC11834BC819498C33305C9157F6A0FD8774
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:13:c9:44:5e:8d:bf:9f:38:c0:14:f5:b3:f9:
                    c3:13:b0:7e:0c:0e:25:73:63:6b:06:8e:2f:51:f7:
                    08:38:c6:e9:2f:23:5b:06:2f:14:02:e9:8d:81:d0:
                    af:6b:1d:b6:0a:92:1d:d8:cb:b0:a1:c0:70:44:2e:
                    cd:bf:f6:95:60:8a:e0:eb:44:a7:dc:8d:98:d5:de:
                    69:54:74:c7:19:15:49:69:13:84:a5:2b:2a:fa:5c:
                    38:6a:69:dc:5a:21:90:48:76:b5:b7:e1:bb:66:3a:
                    8c:cb:2e:40:b4:cb:1d:80:c1:e7:8d:c6:35:82:f9:
                    9c:c1:76:fe:ea:05:01:f2:b0:14:2d:8b:49:19:96:
                    da:ca:f2:c3:b7:85:39:38:5e:0b:d1:4c:93:ad:23:
                    c6:d4:aa:78:ae:d7:15:dc:12:d2:33:dd:2e:e5:75:
                    23:fd:78:7f:3d:88:2f:6d:ae:4a:30:f5:ad:45:6e:
                    5c:8a:f5:fb:16:13:0a:d5:20:5c:c6:e2:71:8a:1d:
                    10:86:f8:99:6b:b5:b4:71:29:94:d6:41:83:80:ff:
                    0e:2b:99:8f:3b:76:0a:b0:a9:89:39:80:df:97:78:
                    a1:1a:f6:98:f1:e0:5a:66:f1:fa:03:69:0c:b5:1e:
                    6f:a2:dc:cb:72:18:65:6a:e5:37:8e:d0:7a:02:f9:
                    04:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:28:BC:11:83:4B:C8:19:49:8C:33:30:5C:91:57:F6:A0:FD:87:74
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/Fyi8EYNLyBlJjDMwXJFX9qD9h3Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.124.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         4c:10:7b:3a:f3:e8:42:f0:56:59:48:9d:4e:ca:39:1c:7f:b7:
         f4:6b:60:cd:43:c6:14:03:12:ec:88:be:56:26:27:ba:c9:17:
         89:ee:d8:2f:5e:f6:ff:f6:d3:d9:1a:57:b2:bb:42:ea:ef:bd:
         47:ac:35:b8:a7:36:20:25:58:c4:63:ff:71:66:8b:f9:50:3f:
         df:90:e1:32:31:7e:8f:0e:6e:37:e6:9a:ed:14:1d:c2:21:d6:
         9a:34:e6:90:2f:b2:5a:55:a6:8f:9d:9b:ad:fd:c3:45:5d:71:
         a2:93:9b:80:be:47:f8:34:dd:27:40:77:81:5d:91:cb:69:56:
         cb:42:8d:2a:09:35:3b:24:78:f9:a6:55:b0:a0:8d:61:ab:eb:
         3d:48:71:5a:e3:fa:e1:15:88:bf:56:b9:d0:64:4f:a6:ed:c8:
         6a:a2:20:35:86:c8:68:0b:fe:23:e6:04:b1:6f:fd:4c:c2:5c:
         23:95:96:e1:77:34:4f:b6:5c:b8:5e:55:1c:ad:e7:9f:b7:76:
         4c:9c:9b:c4:ab:3d:b0:5b:fe:d2:d3:a4:a3:4b:78:86:aa:f5:
         b6:a8:1b:d8:7b:60:95:e1:5f:60:6c:ad:1e:4c:5c:8a:8c:54:
         82:17:4c:a6:7d:f9:ce:de:46:77:95:93:a4:3d:a1:a0:af:72:
         54:d6:34:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:19 2024 by rpki-client on console-fra.rpki-client.org