Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LsfTAoMTkZl-YVe12cXrMkVpPcY.roa
File:                     LsfTAoMTkZl-YVe12cXrMkVpPcY.roa (raw, json)
Hash identifier:          +Wsh7gSEG/G3AL2e5zC3zraWa1nHKJOYbE2bGnN0kyw=
Subject key identifier:   2E:C7:D3:02:83:13:91:99:7E:61:57:B5:D9:C5:EB:32:45:69:3D:C6
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0222
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LsfTAoMTkZl-YVe12cXrMkVpPcY.roa
Signing time:             Mon 30 Sep 2024 01:33:43 +0000
ROA not before:           Mon 30 Sep 2024 01:33:43 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        219.94.128.0/17 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 546 (0x222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:33:43 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=2EC7D302831391997E6157B5D9C5EB3245693DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:32:83:df:7e:a6:ba:80:56:dc:fd:a0:51:73:
                    79:75:94:ed:9e:77:97:13:37:41:5f:8f:27:70:8f:
                    f8:1f:06:d6:20:a4:e6:7c:5b:b8:7f:74:4c:5a:01:
                    b7:28:29:7c:eb:4e:54:0c:67:e1:78:30:da:eb:a4:
                    dd:b8:14:1d:86:ab:92:ed:1f:9d:b9:f3:e2:6a:db:
                    ba:bd:e6:55:ce:88:7b:88:03:11:16:9a:51:24:3a:
                    fb:59:36:39:9b:d3:57:8a:5b:b4:85:48:86:c5:e4:
                    78:e6:be:23:39:fd:7c:17:5d:60:73:d5:b1:57:4c:
                    13:62:f0:9a:42:ad:10:78:b5:ca:ab:dc:79:30:7c:
                    1a:7b:39:29:63:70:e1:bd:38:8e:50:93:fc:c0:38:
                    bb:f0:d8:58:ad:39:2d:73:9b:6e:6e:ea:8a:60:25:
                    8a:da:22:01:b5:58:e1:23:dd:3c:3f:9f:e5:7c:8d:
                    f8:df:89:cb:ad:da:0e:1c:fd:7c:10:5c:76:3e:49:
                    03:11:67:73:0f:67:f5:b2:a3:e2:f9:db:0a:63:48:
                    95:69:39:03:3d:e7:08:49:56:1e:68:35:a9:25:bb:
                    0d:23:6a:9d:c6:84:b7:0d:f6:4b:0c:44:b9:98:db:
                    dd:40:47:4a:11:8d:bd:bc:71:52:8d:6c:36:77:60:
                    6b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:C7:D3:02:83:13:91:99:7E:61:57:B5:D9:C5:EB:32:45:69:3D:C6
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/LsfTAoMTkZl-YVe12cXrMkVpPcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.94.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         3b:96:ef:3c:11:60:fc:60:fb:63:de:96:26:82:88:7d:5e:66:
         e2:67:8e:af:f1:8d:3d:ee:26:b1:ee:a0:29:0a:58:cf:aa:98:
         5b:b1:1e:6f:46:f4:1f:dc:ae:1f:87:e3:25:c6:1b:96:dc:d8:
         23:15:0a:5a:03:8f:1e:53:52:66:e9:39:cf:1d:8f:a5:e5:e8:
         d8:3f:81:97:29:2b:9f:81:0e:c2:dd:7f:7f:b0:48:4f:67:00:
         7a:f4:49:27:b9:7f:59:0c:de:13:5e:3a:ac:30:f4:55:95:00:
         8d:29:34:cf:8d:5e:64:c6:fd:f7:1a:8f:6c:9c:fd:42:20:b5:
         6a:f2:f3:9c:1e:4f:90:d0:11:3b:85:9d:e8:07:9e:ca:74:ca:
         6f:d6:51:cd:f5:5a:ca:62:68:4e:48:2b:73:d1:cf:19:6a:c1:
         ee:27:a5:dd:d0:f7:a3:63:2c:fe:02:c6:56:a1:3e:34:58:84:
         a2:44:92:3e:cd:67:c1:24:0b:87:06:09:37:66:1f:9f:71:13:
         71:57:65:33:f5:b8:52:19:0a:40:ef:ad:ce:bd:cd:c7:5e:f4:
         5d:9b:5e:19:f2:4d:a1:64:af:51:77:aa:a5:49:ce:e1:7a:3e:
         ac:67:4f:f9:99:6c:ff:7c:21:d1:f2:e1:51:01:55:34:86:76:
         96:5b:72:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org