Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/604/YjLZqOZ9lvGOnVYYszVrVzsHaIY.roa
File:                     YjLZqOZ9lvGOnVYYszVrVzsHaIY.roa (raw, json)
Hash identifier:          xPStj7LIEgu3Tig4ADpjNq9INDSgDLDGZX8nhNWzWGE=
Subject key identifier:   62:32:D9:A8:E6:7D:96:F1:8E:9D:56:18:B3:35:6B:57:3B:07:68:86
Certificate issuer:       /CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
Certificate serial:       18
Authority key identifier: 84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/YjLZqOZ9lvGOnVYYszVrVzsHaIY.roa
Signing time:             Sun 04 Aug 2024 03:06:34 +0000
ROA not before:           Sun 04 Aug 2024 03:06:34 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     17682
IP address blocks:        42.187.124.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:41:35 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=84F94F26AD23CBA93655AE34D806A8CE0A4C5907
        Validity
            Not Before: Aug  4 03:06:34 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=6232D9A8E67D96F18E9D5618B3356B573B076886
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:e4:e3:27:76:82:37:04:e3:78:a2:66:6a:f4:
                    11:db:dc:10:d6:4c:c3:9f:24:57:b2:f7:c3:27:94:
                    8e:d3:35:01:b6:3e:2c:f1:63:ff:ad:77:2e:04:ed:
                    fa:45:77:a0:1d:d2:70:f9:19:86:a3:88:8e:74:9c:
                    ec:8c:f5:aa:ef:4c:96:6f:02:e6:32:fc:ce:6c:ab:
                    6d:9c:8b:74:de:dc:c4:60:eb:be:90:d2:70:9c:47:
                    45:b0:e1:f3:4d:d8:21:bc:05:db:b5:98:e2:c8:20:
                    18:ef:46:34:77:55:37:f7:61:37:d2:ba:ec:d2:3f:
                    b6:4c:2e:2f:31:7a:bb:68:fd:70:43:c8:93:69:26:
                    d7:4e:08:d4:40:c7:6c:c4:41:87:41:85:df:fb:ea:
                    03:e6:2d:e9:9c:be:87:54:54:cd:c3:a6:da:e9:ec:
                    5c:38:5f:ce:02:4b:09:17:2b:de:bc:10:ad:13:c5:
                    bc:6a:67:f1:24:0d:1e:01:48:66:f0:bf:73:b2:00:
                    79:74:c4:84:2f:51:93:14:c4:e1:50:15:be:ff:a3:
                    62:82:db:bb:a8:96:37:6c:54:65:3b:c5:de:ab:19:
                    40:f7:e4:82:99:e9:ee:02:f1:37:b0:08:19:ed:b0:
                    e4:34:4c:1d:db:9a:80:4a:52:b4:e8:98:a3:e1:bb:
                    70:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:32:D9:A8:E6:7D:96:F1:8E:9D:56:18:B3:35:6B:57:3B:07:68:86
            X509v3 Authority Key Identifier:
                keyid:84:F9:4F:26:AD:23:CB:A9:36:55:AE:34:D8:06:A8:CE:0A:4C:59:07

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/hPlPJq0jy6k2Va402AaozgpMWQc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/hPlPJq0jy6k2Va402AaozgpMWQc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/604/YjLZqOZ9lvGOnVYYszVrVzsHaIY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  42.187.124.0/22

    Signature Algorithm: sha256WithRSAEncryption
         73:ae:65:46:37:f1:f1:bb:dd:b4:c2:a0:69:23:30:df:fd:18:
         c4:86:49:9d:8f:21:c5:4c:ce:cf:83:e7:75:2d:23:ad:b2:2a:
         3c:0c:a4:94:68:0a:4a:4a:cd:6e:7d:8e:4f:7c:51:a1:71:1c:
         4a:fd:ec:5c:3a:f8:07:81:43:79:34:96:3b:c4:fb:cb:97:61:
         df:e7:57:b5:a9:59:4c:9c:49:63:96:25:68:c5:dd:97:35:57:
         92:d8:4d:ab:5f:b6:40:39:1e:90:5d:8d:fc:e6:b1:78:49:ba:
         e9:9c:0f:bf:c5:5f:92:c6:2e:55:9f:4a:3a:15:d6:d8:7c:24:
         ad:65:16:e8:58:92:fd:f5:f1:cd:59:64:3b:24:6d:e6:7d:17:
         cf:46:fb:c5:71:08:b8:62:b2:a7:50:d8:72:8e:fa:08:3f:95:
         01:92:25:fd:3b:4e:15:8b:7e:ef:07:a8:fb:27:2d:f2:af:98:
         5b:3a:85:17:1f:6d:44:00:97:37:8e:57:fe:e0:cc:ba:bf:48:
         38:c7:68:e6:75:33:93:fe:01:8f:3a:9b:89:6a:99:4a:c3:0a:
         71:89:81:d3:e6:2a:85:3e:52:b9:9a:b1:24:bd:99:ac:15:3c:
         f5:f4:80:8a:a0:b2:3e:00:a4:ca:ad:f0:fe:76:1a:ae:50:a5:
         d8:4b:50:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:25 2024 by rpki-client on console-fra.rpki-client.org