Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9YMax7-6X1cSlLTUhcA8IbzhLrQ.roa
File:                     9YMax7-6X1cSlLTUhcA8IbzhLrQ.roa (raw, json)
Hash identifier:          Vn4Vu/aEp24CttrdgnZDoq5PL5+nmzazv7NVcGPcBR4=
Subject key identifier:   F5:83:1A:C7:BF:BA:5F:57:12:94:B4:D4:85:C0:3C:21:BC:E1:2E:B4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       01BB
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9YMax7-6X1cSlLTUhcA8IbzhLrQ.roa
Signing time:             Wed 01 Nov 2023 01:29:19 +0000
ROA not before:           Wed 01 Nov 2023 01:29:19 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     9371
IP address blocks:        219.109.160.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:34:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 443 (0x1bb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Nov  1 01:29:19 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=F5831AC7BFBA5F571294B4D485C03C21BCE12EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:01:b3:95:26:89:ea:49:49:84:fd:13:cd:c9:
                    dd:78:8b:9f:c5:5f:7b:2e:51:8a:40:3f:0f:c1:1b:
                    7c:b5:62:c0:e8:ca:0a:58:2f:82:45:50:e5:88:f4:
                    54:9b:3c:3c:31:85:dc:d2:1b:c5:82:f7:6f:82:5f:
                    05:50:ab:19:9b:64:68:1b:f7:f7:c5:eb:37:51:68:
                    31:06:98:fc:67:f9:e4:f6:5d:74:8a:33:c3:d7:13:
                    da:ab:03:65:2b:e0:93:6a:50:14:62:21:1d:bb:0c:
                    cb:24:ac:18:d3:21:74:ad:1e:3c:b3:54:bf:a6:9e:
                    88:a6:e3:3c:1a:11:ed:20:e9:4a:e8:d5:14:c7:9f:
                    23:9e:77:e8:10:cb:da:a1:f4:65:54:03:f2:f3:05:
                    c1:65:b8:dd:62:9f:f6:77:14:ac:fd:60:44:c4:dd:
                    dd:86:45:97:b8:15:09:8f:68:8a:d1:08:ed:79:df:
                    2c:c4:37:b5:24:68:89:82:78:d5:73:f0:70:bf:69:
                    30:be:eb:bf:03:b0:04:5e:cd:01:ee:7d:fb:84:a6:
                    1a:58:1d:e1:17:e5:c6:b1:09:71:6b:b3:07:80:51:
                    e4:25:e9:fe:3e:be:33:fe:46:d7:32:4a:06:23:91:
                    05:dc:92:e0:02:ba:61:f8:3c:7b:78:97:d8:3c:bc:
                    0c:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:83:1A:C7:BF:BA:5F:57:12:94:B4:D4:85:C0:3C:21:BC:E1:2E:B4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/9YMax7-6X1cSlLTUhcA8IbzhLrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         67:07:af:e8:ab:65:23:5e:0f:d9:e6:27:09:9e:d1:d9:e8:a3:
         51:c3:9d:39:33:e1:e4:28:23:2f:91:63:47:a5:60:ae:ea:1b:
         0e:bf:42:ee:de:c3:29:e8:77:e7:e3:8a:19:82:20:ef:39:e7:
         03:86:f2:8a:de:f5:5e:b9:7b:59:48:ac:d9:b2:2b:61:8c:a7:
         c5:e4:5b:12:ad:bd:b1:1d:8b:54:41:77:31:b7:d4:d0:92:96:
         d0:60:a4:00:83:b2:81:0a:ab:e2:61:2a:ea:6b:c9:78:70:24:
         53:13:3e:a8:04:60:ad:75:a8:43:60:f3:71:e3:3c:96:e2:a3:
         d1:53:0d:8a:40:ac:45:6d:5a:14:55:3f:d5:e7:64:8e:10:18:
         3e:d0:57:98:77:68:ef:7e:8a:a3:db:4e:3c:c4:35:ac:ee:2c:
         56:0a:ab:e7:5b:20:7f:26:57:88:8f:53:ab:65:96:ee:e2:1e:
         c6:d8:4a:06:a8:80:a8:95:dc:cb:2e:37:e8:29:06:68:dc:f0:
         55:67:d1:36:44:15:48:88:7b:31:3c:14:cc:4e:b5:38:ea:ae:
         47:27:e8:fc:e8:22:19:8c:bb:e7:71:76:51:ea:1d:05:f2:ad:
         40:aa:de:4b:32:e8:88:11:ef:ec:6e:8d:1d:af:c5:ba:50:08:
         d7:7f:87:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:11 2024 by rpki-client on console-fra.rpki-client.org