Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/96bsWsYqcQn4ljxWVz4cAI-l_Yo.roa
File:                     96bsWsYqcQn4ljxWVz4cAI-l_Yo.roa (raw, json)
Hash identifier:          y7qdkdtXXvd/nljRX//mzCBxZa0lKY+QMrv2N1oh+QE=
Subject key identifier:   F7:A6:EC:5A:C6:2A:71:09:F8:96:3C:56:57:3E:1C:00:8F:A5:FD:8A
Certificate issuer:       /CN=71B974F0FD34DDC354AF961A78E84E511D351A63
Certificate serial:       0F
Authority key identifier: 71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/96bsWsYqcQn4ljxWVz4cAI-l_Yo.roa
Signing time:             Wed 31 Jul 2024 01:32:27 +0000
ROA not before:           Wed 31 Jul 2024 01:32:27 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     131965
IP address blocks:        85.131.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71B974F0FD34DDC354AF961A78E84E511D351A63
        Validity
            Not Before: Jul 31 01:32:27 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=F7A6EC5AC62A7109F8963C56573E1C008FA5FD8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:f2:c5:ee:ab:8b:7a:c4:7a:f7:de:23:cd:06:
                    35:20:41:51:d4:41:71:5f:f2:02:47:c2:75:06:9a:
                    f5:0e:e5:a4:58:82:e4:e3:a0:3b:fa:a1:a6:f4:0c:
                    59:ab:2c:7e:45:a4:28:bf:53:03:99:97:06:c0:fb:
                    a9:dc:1f:02:16:32:dc:09:77:72:9d:a3:7f:bc:71:
                    6a:62:2d:d8:36:cb:a0:e3:ac:b8:cd:8b:89:ed:53:
                    06:f1:a2:b0:15:18:51:d8:a1:93:00:5c:17:80:a7:
                    b7:8c:44:4b:f3:e3:b2:24:03:d1:35:99:65:fa:64:
                    09:00:b3:a9:6a:16:4a:d5:04:12:27:e9:5e:07:21:
                    c0:fd:26:aa:27:3b:48:89:87:28:f0:b9:7e:d5:69:
                    3b:41:be:d5:e0:a3:47:0d:8d:67:12:ca:5c:df:73:
                    9b:ce:44:c8:02:03:7e:6f:29:b2:70:3b:8e:34:c5:
                    cb:c6:50:e1:4e:d8:01:a5:59:77:52:00:13:99:c5:
                    68:36:16:07:53:5c:a6:da:b4:02:20:89:83:e2:42:
                    64:44:b1:9d:37:f7:34:b3:d6:95:c4:76:c6:ec:18:
                    70:7a:b9:ca:18:91:e4:71:92:ed:67:29:cc:59:39:
                    50:9b:26:00:7c:1c:3d:66:ff:4d:d4:99:f8:34:c5:
                    39:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:A6:EC:5A:C6:2A:71:09:F8:96:3C:56:57:3E:1C:00:8F:A5:FD:8A
            X509v3 Authority Key Identifier:
                keyid:71:B9:74:F0:FD:34:DD:C3:54:AF:96:1A:78:E8:4E:51:1D:35:1A:63

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/cbl08P003cNUr5YaeOhOUR01GmM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cbl08P003cNUr5YaeOhOUR01GmM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/96bsWsYqcQn4ljxWVz4cAI-l_Yo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  85.131.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:24:09:7c:f8:b7:1e:63:89:2d:d3:09:e3:ec:f1:e9:a1:24:
         5b:af:69:be:45:d7:bc:14:48:5b:19:e0:9d:79:d5:78:89:27:
         86:74:c3:3b:3d:c9:9a:1e:cb:ab:42:4b:4e:16:fc:b2:6a:9c:
         6f:c9:b8:1a:61:39:5f:1c:03:a0:9f:3c:95:85:53:13:d7:fe:
         aa:d2:81:c9:90:05:85:ae:73:2e:a7:54:b6:13:59:73:b0:13:
         c9:1e:64:4d:ae:de:18:b0:4e:b4:fe:05:d4:e6:de:c5:c9:c0:
         fb:a7:71:f4:b4:2d:ee:8e:d0:c8:bd:40:e8:e5:f1:c0:23:be:
         71:14:a2:d5:66:c1:4a:60:dd:25:40:76:31:75:e7:43:27:4d:
         14:eb:29:86:e9:86:38:2f:53:1d:e0:3c:f6:17:95:45:d5:1e:
         53:a6:f0:02:65:bb:a7:3e:9a:87:62:d6:3a:5d:b5:f2:ae:2e:
         60:a5:67:44:34:00:ac:49:b8:35:55:b1:1c:61:96:bf:2f:fc:
         1a:37:6c:9e:d1:85:01:2c:d5:c1:45:34:5f:61:23:4a:9e:b8:
         0f:10:ac:5d:1c:5d:25:74:40:0f:60:3a:ca:49:b1:5f:8f:8a:
         92:ea:01:29:4c:10:85:3a:1a:58:b1:f1:94:ef:56:55:69:fe:
         e6:2c:fd:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:19 2024 by rpki-client on console-fra.rpki-client.org