Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/TbrVogXLaajPeWRTexj0N8s4BHs.roa
File:                     TbrVogXLaajPeWRTexj0N8s4BHs.roa (raw, json)
Hash identifier:          hX6TpvAV8bH05WQR+sYjHPOPKHr3mfIPDXm6XSA9p2Y=
Subject key identifier:   4D:BA:D5:A2:05:CB:69:A8:CF:79:64:53:7B:18:F4:37:CB:38:04:7B
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       04
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/TbrVogXLaajPeWRTexj0N8s4BHs.roa
Signing time:             Mon 28 Aug 2023 04:26:23 +0000
ROA not before:           Mon 28 Aug 2023 04:26:23 +0000
ROA not after:            Sun 18 Aug 2024 03:04:44 +0000
asID:                     17682
IP address blocks:        219.100.56.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 30 Jun 2024 06:27:44 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug 28 04:26:23 2023 GMT
            Not After : Aug 18 03:04:44 2024 GMT
        Subject: CN=4DBAD5A205CB69A8CF7964537B18F437CB38047B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:b4:06:9f:9f:d6:50:5c:68:27:c9:05:af:4b:
                    0b:aa:76:23:04:73:66:e2:65:90:da:88:ec:cd:8f:
                    63:37:1a:99:a2:57:03:ef:c6:58:2a:d5:aa:68:42:
                    52:43:ee:d9:64:68:fd:73:20:9c:66:01:1a:6b:b0:
                    2c:90:be:92:4b:a7:d8:61:c6:93:36:ae:24:14:60:
                    fc:bd:9d:89:b6:02:43:33:b3:23:b6:40:09:80:c1:
                    c9:48:7e:9d:bb:bd:04:0f:54:2d:34:14:af:ba:a7:
                    a4:27:6f:36:cc:f0:f2:fa:7b:1d:35:43:7b:0f:57:
                    fd:e7:df:3d:14:0e:04:79:f4:78:8d:78:4a:4e:0f:
                    79:75:30:84:3b:c1:23:64:ec:a8:66:5e:f6:4e:64:
                    de:bc:cb:08:b4:76:bf:ff:66:f3:6d:f5:2a:be:01:
                    72:c3:cc:73:1b:f8:43:ed:d7:11:4b:7e:e9:b5:b5:
                    13:dd:cf:e9:5c:55:ef:82:24:7b:b6:41:61:28:c0:
                    9b:63:5a:a3:68:10:3e:63:06:d6:f8:ea:df:48:91:
                    2c:39:27:c4:5f:12:cb:ee:66:8b:9c:87:6c:22:73:
                    1e:cf:e5:a3:3e:46:21:de:bf:ca:4a:c3:a2:e1:cc:
                    51:77:c5:8d:2f:64:96:cb:2b:c7:d6:cf:f3:f7:1c:
                    ee:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:BA:D5:A2:05:CB:69:A8:CF:79:64:53:7B:18:F4:37:CB:38:04:7B
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/TbrVogXLaajPeWRTexj0N8s4BHs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         2d:a0:1f:ae:62:85:d6:45:c9:4a:28:02:2e:0d:c9:23:2b:63:
         7a:fa:11:cf:ac:cc:a2:cf:97:df:37:38:8d:65:97:38:ee:0a:
         79:13:f5:fa:06:38:6b:f1:31:b8:a9:3d:25:f3:ee:51:9b:46:
         83:3b:5e:79:0a:00:bf:fd:3e:9a:01:19:ca:3c:4b:e0:1c:c7:
         e7:c5:32:28:65:d2:a2:4f:d1:c8:12:51:93:eb:e7:02:7d:cf:
         b3:58:62:e3:89:9e:a1:15:40:f2:ab:19:d0:be:54:46:53:dd:
         cc:ed:d5:9d:b4:51:11:7a:f3:f4:ed:22:f3:36:aa:23:f8:e8:
         98:06:dd:7d:e0:d8:52:fa:e2:f3:0e:76:58:16:5f:04:20:72:
         06:7d:13:d8:98:70:15:6d:eb:c2:72:57:97:70:11:a4:c5:88:
         16:ed:d5:64:d4:0e:aa:da:0d:36:16:31:2e:d6:d0:19:49:d2:
         94:85:82:fd:72:4b:8b:b1:ba:a5:1a:7b:37:f7:86:89:02:81:
         c5:c6:9b:75:02:5b:ab:19:fd:0e:61:e6:a5:4f:17:9f:9a:a6:
         b3:ab:20:a9:df:cf:0f:48:3f:99:7c:a8:07:a5:ef:b8:c5:e5:
         aa:7d:85:22:da:5b:76:2e:13:22:99:84:68:c2:d5:04:50:d6:
         20:7e:6d:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 24 05:54:46 2024 by rpki-client on console-ams.rpki-client.org