Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/9997/oRoxmTU_jSRb_SB6Oi_z3QuXfw4.roa
File:                     oRoxmTU_jSRb_SB6Oi_z3QuXfw4.roa (raw, json)
Hash identifier:          TISPoi/AdjB+dsk0hhkBTi1TXZuJRZlhqCQPgTyiR2w=
Subject key identifier:   A1:1A:31:99:35:3F:8D:24:5B:FD:20:7A:3A:2F:F3:DD:0B:97:7F:0E
Certificate issuer:       /CN=A935D5AD33DC630C4611987140F5E468B7081D11
Certificate serial:       4C
Authority key identifier: A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/oRoxmTU_jSRb_SB6Oi_z3QuXfw4.roa
Signing time:             Mon 11 Nov 2024 02:36:16 +0000
ROA not before:           Mon 11 Nov 2024 02:36:16 +0000
ROA not after:            Fri 07 Nov 2025 10:27:51 +0000
asID:                     2515
IP address blocks:        202.13.64.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A935D5AD33DC630C4611987140F5E468B7081D11
        Validity
            Not Before: Nov 11 02:36:16 2024 GMT
            Not After : Nov  7 10:27:51 2025 GMT
        Subject: CN=A11A3199353F8D245BFD207A3A2FF3DD0B977F0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:fd:25:52:b1:7b:e7:37:46:67:1c:bd:8f:73:
                    0b:1b:89:af:12:6f:b1:da:d5:df:4a:fe:62:21:42:
                    a8:b7:53:c1:4f:d8:8e:cf:e1:b6:74:7a:1d:92:d4:
                    79:a8:3f:9a:64:5f:99:fb:12:e6:ed:73:b2:3b:1b:
                    e2:37:76:60:2e:1f:05:1a:7f:31:1e:54:33:0d:11:
                    2f:3d:8f:95:29:c0:6d:eb:9b:5a:a3:3e:b6:11:44:
                    ee:31:3e:f9:75:b6:41:a9:53:a6:c6:7e:b3:fb:09:
                    55:54:a6:32:14:9a:72:49:d1:6c:60:47:c6:51:00:
                    0b:c7:e0:ef:dd:47:e0:1b:6e:17:a0:2b:eb:39:1b:
                    77:aa:e0:c3:2a:f5:de:77:5d:b5:82:45:11:58:51:
                    c0:e0:be:0d:5b:bc:ce:c1:5d:c7:86:4c:ae:7c:ca:
                    7e:d9:45:da:16:b1:21:bb:2c:80:86:60:a0:15:a6:
                    b1:4b:5f:ab:48:32:5f:76:36:fb:a7:9e:0d:ed:b6:
                    74:e1:84:04:e1:f4:d9:7e:79:8d:48:9c:8b:53:c9:
                    6c:fe:77:88:82:4a:1f:63:1a:1d:c0:b8:e0:ab:14:
                    0b:22:e5:33:39:92:e1:64:56:54:a3:36:52:7c:81:
                    b1:8b:1b:b6:7e:6c:03:6d:fa:d9:70:f6:0d:4a:27:
                    47:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:1A:31:99:35:3F:8D:24:5B:FD:20:7A:3A:2F:F3:DD:0B:97:7F:0E
            X509v3 Authority Key Identifier:
                keyid:A9:35:D5:AD:33:DC:63:0C:46:11:98:71:40:F5:E4:68:B7:08:1D:11

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/qTXVrTPcYwxGEZhxQPXkaLcIHRE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/qTXVrTPcYwxGEZhxQPXkaLcIHRE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/9997/oRoxmTU_jSRb_SB6Oi_z3QuXfw4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.13.64.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5d:4c:5a:4c:64:e8:f9:53:3d:5f:7f:52:7b:6c:fe:c6:ff:93:
         27:13:c0:c3:78:26:e4:af:68:a3:5b:d9:fd:81:f7:bb:03:eb:
         0a:d2:11:47:6b:fc:06:7b:92:6e:da:75:73:c5:d0:e0:89:42:
         f9:42:e9:1c:56:13:95:30:da:bc:2d:19:7a:af:c1:8c:2d:fd:
         d2:12:83:7a:e2:a3:3b:4c:8e:c1:39:f0:90:c9:4a:0b:b2:16:
         95:b5:46:c4:a7:d7:40:72:5d:2f:3c:cd:46:d9:50:53:12:0c:
         f3:74:42:66:94:94:de:f5:dd:0a:e3:93:68:e4:62:61:00:d8:
         f5:85:04:09:3a:de:23:27:70:53:cb:4e:6f:7f:54:08:3f:fb:
         87:a6:24:6e:f1:51:83:5f:7b:be:92:59:e7:57:84:e0:29:2c:
         67:77:ec:6b:15:a1:c5:85:95:ee:c1:5d:a9:a9:8f:f3:1d:58:
         8b:bc:bb:1e:9a:97:1b:ae:85:8e:a6:d8:a3:97:1f:45:a7:e3:
         bc:64:2f:16:01:e7:87:d9:f1:f5:90:76:51:4a:b4:2d:fd:03:
         80:00:43:4d:58:61:fe:a4:84:f5:3d:f5:3b:f2:f8:1b:56:9e:
         65:3d:4f:dc:67:e2:20:d3:c3:fd:e5:02:bb:ce:2d:75:73:c0:
         ea:d2:3e:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org