Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/997/vlTkpGCkAjgzAmLEo8PXFTUo9yw.roa
File:                     vlTkpGCkAjgzAmLEo8PXFTUo9yw.roa (raw, json)
Hash identifier:          odgKZKmMhWmkFh1pfFsDaYQaRL73EA4L+8cXHLyQgMM=
Subject key identifier:   BE:54:E4:A4:60:A4:02:38:33:02:62:C4:A3:C3:D7:15:35:28:F7:2C
Certificate issuer:       /CN=B7187C4D4BDDD435728B412888E0655334208E0B
Certificate serial:       48
Authority key identifier: B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/vlTkpGCkAjgzAmLEo8PXFTUo9yw.roa
Signing time:             Wed 31 Jul 2024 01:28:36 +0000
ROA not before:           Wed 31 Jul 2024 01:28:36 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17707
IP address blocks:        202.5.64.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B7187C4D4BDDD435728B412888E0655334208E0B
        Validity
            Not Before: Jul 31 01:28:36 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=BE54E4A460A40238330262C4A3C3D7153528F72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:8c:34:65:09:76:53:3a:c8:50:85:fa:7f:ea:
                    dc:94:7e:d2:e5:1a:4b:01:a5:90:cb:ea:69:9d:86:
                    4e:0c:c1:34:c5:c1:63:0c:7d:1a:97:9a:f9:da:f8:
                    89:7c:fe:49:c7:4a:95:88:6d:df:14:0b:01:d6:33:
                    ab:8a:65:4d:97:ae:f5:1c:cf:a9:02:b3:88:95:45:
                    60:6b:11:a0:4c:ac:45:3f:3e:8a:6c:8f:d7:f6:62:
                    40:8b:58:d8:6d:bf:91:01:f9:b8:24:aa:9e:42:c0:
                    4c:9d:ce:4e:21:3a:fe:27:c2:be:ca:bf:93:d7:11:
                    33:a4:5c:f4:58:23:c9:ae:b1:28:6c:05:9e:88:0a:
                    36:59:97:15:ed:da:5d:ff:29:86:41:f4:40:f6:83:
                    3c:4e:21:29:bd:65:0c:03:e9:c8:d4:1e:bb:9f:d4:
                    88:0c:f4:07:ff:28:ba:f8:f3:26:37:be:ca:0a:52:
                    8e:2c:1c:58:8e:89:e3:81:74:51:3d:c4:01:1a:0a:
                    d9:bd:ef:d0:b8:f0:b6:34:f2:1a:7b:2d:74:cf:2f:
                    74:63:ba:14:4e:b8:e1:8c:37:a2:9e:dd:cd:7c:d3:
                    87:31:d5:19:6e:26:a6:c6:60:65:b7:3d:2d:9f:dc:
                    3a:5f:03:9e:5f:b9:4a:db:56:c6:09:0c:ce:61:4f:
                    d9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:54:E4:A4:60:A4:02:38:33:02:62:C4:A3:C3:D7:15:35:28:F7:2C
            X509v3 Authority Key Identifier:
                keyid:B7:18:7C:4D:4B:DD:D4:35:72:8B:41:28:88:E0:65:53:34:20:8E:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/txh8TUvd1DVyi0EoiOBlUzQgjgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/txh8TUvd1DVyi0EoiOBlUzQgjgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/997/vlTkpGCkAjgzAmLEo8PXFTUo9yw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.5.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         00:80:c6:2a:99:10:84:13:1f:2f:31:71:b6:d3:04:42:ea:6f:
         18:9b:3a:f6:73:1e:f8:2d:86:e9:84:ae:10:69:c6:06:2c:d9:
         45:c7:e3:d4:5d:e1:b0:06:4d:82:4b:6e:38:09:a6:ad:f5:05:
         8f:c8:e9:6a:4f:71:e7:5f:6e:48:ee:8e:b5:09:6c:14:2b:11:
         e3:df:ea:48:60:bc:c6:0f:4a:e2:1c:5d:e9:56:e9:69:8c:d4:
         76:ad:82:e8:82:da:d1:93:fa:fc:f1:71:f2:0a:98:0e:f1:9e:
         c0:69:40:2b:f6:eb:67:0a:f1:5f:89:40:31:5d:67:00:87:89:
         0d:4c:fe:06:eb:ca:b1:3f:84:26:a9:82:e8:b3:6c:63:6a:bd:
         6b:6a:06:16:d4:98:68:52:4b:d0:aa:97:f2:b7:18:fb:fb:a0:
         ac:5b:de:fd:b5:bc:4d:6f:77:eb:90:68:5d:bf:e5:59:c4:de:
         78:eb:f2:b8:53:d9:71:cc:b3:44:f7:d7:72:b2:a4:63:3f:a9:
         09:99:d5:ed:b2:68:22:dc:ca:31:83:97:fa:55:81:1e:22:23:
         fb:42:52:53:3f:c6:b3:4b:a3:69:aa:74:0b:94:fd:a3:28:8b:
         53:15:ed:f8:2f:64:f7:1c:52:09:d3:7d:eb:2b:0b:77:6d:cf:
         ea:18:c6:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org