Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/2TbFSayKW93pZrylPGgWkmlt3rY.roa
File:                     2TbFSayKW93pZrylPGgWkmlt3rY.roa (raw, json)
Hash identifier:          G8X59K7LVEQQ9j38yHAMsrH2jZ8S5OOOTc5eMjumMTY=
Subject key identifier:   D9:36:C5:49:AC:8A:5B:DD:E9:66:BC:A5:3C:68:16:92:69:6D:DE:B6
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       0D
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/2TbFSayKW93pZrylPGgWkmlt3rY.roa
Signing time:             Tue 22 Aug 2023 07:12:19 +0000
ROA not before:           Tue 22 Aug 2023 07:12:19 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     9997
IP address blocks:        219.100.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13 (0xd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Aug 22 07:12:19 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=D936C549AC8A5BDDE966BCA53C681692696DDEB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:4a:c8:66:36:4b:cd:cd:e7:dc:7c:0d:dd:18:
                    71:15:54:1d:ee:57:08:2a:57:3b:40:ed:aa:25:81:
                    1e:82:32:07:ff:1f:e0:5b:b4:b7:ba:b5:2a:b8:67:
                    0d:91:4a:25:ec:fd:cd:29:42:7d:9a:a5:87:bf:99:
                    cc:31:22:f8:ee:b7:08:f3:2c:5f:a9:0e:e7:f3:a4:
                    c8:50:27:06:2a:91:d0:ed:78:28:a4:cb:36:2e:ab:
                    c9:6e:8e:f7:bf:bc:96:88:bf:ed:13:3c:54:23:c4:
                    43:d0:37:ce:3e:af:f4:2a:94:dd:6a:d6:54:4d:a1:
                    73:4e:bb:6b:58:28:71:88:7a:b5:f6:15:f2:46:51:
                    a1:18:53:f5:1e:dd:6b:af:05:bd:36:9a:54:fe:6d:
                    58:50:29:79:ad:b8:ec:eb:d3:4c:df:54:0f:f2:2c:
                    27:4d:64:a7:2a:48:ab:b5:91:d0:5c:7a:da:07:86:
                    e9:c1:c5:d1:2e:7e:e9:d8:a7:d2:87:0c:e6:19:f3:
                    0b:f2:6d:0b:41:ee:eb:c9:f8:06:a2:c7:9f:d2:9f:
                    48:d8:87:03:10:7f:cf:3e:b7:1c:2a:f7:b5:f3:85:
                    18:79:fa:39:a9:48:0f:6b:bb:65:b1:90:a9:5b:16:
                    31:6a:9e:a9:be:0f:33:68:33:eb:fe:64:c4:4a:a3:
                    e1:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:36:C5:49:AC:8A:5B:DD:E9:66:BC:A5:3C:68:16:92:69:6D:DE:B6
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/2TbFSayKW93pZrylPGgWkmlt3rY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         75:30:c9:1e:9a:7d:fb:73:b6:b0:f2:15:4e:7e:d1:05:d3:58:
         47:37:10:e4:6d:67:c4:ed:7e:bf:96:64:4d:98:d3:47:2f:1d:
         76:f3:1d:b6:ee:dd:8b:e8:ea:10:87:b8:ef:24:4f:99:f0:bd:
         6e:d9:bd:93:91:ae:e9:99:26:c5:1e:f5:6d:fd:e4:24:ce:de:
         a6:a7:b5:15:9a:90:c7:15:bb:76:27:6c:3b:a2:80:84:d9:1c:
         e7:20:10:e6:81:c8:83:9f:42:2a:e5:94:51:4f:80:e6:fd:1f:
         3c:f6:30:a2:26:40:2c:f9:83:0c:a1:d9:76:fe:e9:ba:f5:43:
         f3:95:aa:df:97:09:7f:9b:c3:01:c3:79:7c:3b:a5:65:6b:61:
         0f:fe:05:f9:aa:d2:d5:70:bc:34:52:e1:8a:33:19:f0:ac:c5:
         b8:8a:41:34:14:05:a8:39:94:16:b9:41:00:c1:c6:7c:76:60:
         21:44:0d:fc:56:9f:c3:bf:ae:70:71:07:11:87:8a:6a:18:9c:
         f1:1a:da:47:79:81:ae:b6:48:b1:fd:88:77:6e:d7:7e:15:e2:
         73:e3:ec:64:c4:b2:c7:84:c4:c3:26:a4:90:d9:37:72:ac:20:
         0c:76:2e:c6:fe:06:e2:32:9c:fa:32:0b:49:55:e6:1f:d0:bf:
         4a:b1:bc:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:40 2024 by rpki-client on console-ams.rpki-client.org