Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10602/ATtNaXgvXLvHxmNPQi2fhNz0xAU.roa
File:                     ATtNaXgvXLvHxmNPQi2fhNz0xAU.roa (raw, json)
Hash identifier:          5qKEpAn3+46EHnJ/HKGE0IWsZ9/Dy/CnmdVmEwH5KQw=
Subject key identifier:   01:3B:4D:69:78:2F:5C:BB:C7:C6:63:4F:42:2D:9F:84:DC:F4:C4:05
Certificate issuer:       /CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
Certificate serial:       47
Authority key identifier: 28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/ATtNaXgvXLvHxmNPQi2fhNz0xAU.roa
Signing time:             Fri 31 May 2024 01:31:33 +0000
ROA not before:           Fri 31 May 2024 01:31:33 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     24295
IP address blocks:        122.200.32.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28995D6B0DDC205B35959332D1CB1D9D8CF02283
        Validity
            Not Before: May 31 01:31:33 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=013B4D69782F5CBBC7C6634F422D9F84DCF4C405
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:72:12:b2:fc:8c:af:49:70:a5:13:1f:03:7e:
                    2b:a7:a2:da:7e:54:64:8c:4d:11:8e:e3:f6:9d:61:
                    08:40:a6:d4:c0:c9:12:e8:24:78:4e:0c:03:e0:90:
                    b4:57:2e:5c:ad:dd:de:0a:5d:54:d3:f9:ff:86:26:
                    8c:3c:1b:de:bc:9d:f4:e8:39:f2:ff:71:d3:85:8e:
                    c7:d7:5d:00:3a:e2:0b:75:ff:4d:ca:d7:fc:cf:26:
                    10:d9:a3:d0:8c:b3:e5:cd:27:f6:e7:65:ca:20:2d:
                    3b:04:55:3b:07:93:07:01:1e:be:0f:ce:e2:0e:7e:
                    86:c5:5f:5b:06:c5:db:54:d1:13:f4:fc:c2:91:1f:
                    73:11:83:4a:f5:6a:09:76:e5:42:65:3f:85:25:c9:
                    1b:43:1b:28:6d:29:ab:0b:c1:5b:41:e0:81:75:bc:
                    f3:51:12:c0:76:a7:92:65:35:14:fe:b8:f7:49:c3:
                    3e:be:0c:3f:65:18:fc:6d:c9:8b:32:33:4d:de:0e:
                    84:88:6f:90:8a:d8:6c:72:ea:d1:08:53:23:32:07:
                    0e:a9:eb:81:ab:5d:f8:05:db:15:3b:5d:7e:3c:3e:
                    b4:a2:72:f4:28:5d:12:75:30:2d:ec:af:66:b6:88:
                    20:2c:30:f1:29:bf:d7:75:1c:eb:57:50:27:1a:67:
                    40:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:3B:4D:69:78:2F:5C:BB:C7:C6:63:4F:42:2D:9F:84:DC:F4:C4:05
            X509v3 Authority Key Identifier:
                keyid:28:99:5D:6B:0D:DC:20:5B:35:95:93:32:D1:CB:1D:9D:8C:F0:22:83

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/KJldaw3cIFs1lZMy0csdnYzwIoM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KJldaw3cIFs1lZMy0csdnYzwIoM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10602/ATtNaXgvXLvHxmNPQi2fhNz0xAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.200.32.0/22

    Signature Algorithm: sha256WithRSAEncryption
         21:b1:8f:f0:1e:f9:f5:af:23:43:5a:31:19:8c:e9:fb:27:d5:
         41:9a:eb:06:b9:f4:05:50:87:c0:d8:19:4a:eb:d1:b4:1d:25:
         55:79:4c:79:65:30:c2:92:a5:f8:7e:5c:87:e3:00:de:41:b1:
         1b:3c:fa:dc:2f:4b:8f:20:58:e8:3a:53:e0:44:8a:3b:32:b2:
         13:ba:73:d1:a6:68:4e:00:83:2b:e7:bd:8a:4a:c2:e5:1f:df:
         c9:5c:b0:37:05:3f:40:cc:88:ad:30:88:8d:a4:27:21:be:50:
         80:aa:65:df:e8:e4:e9:88:28:7f:b6:d3:de:4c:11:1e:18:3b:
         df:39:5b:00:7e:15:47:46:ae:ee:d1:c2:36:c1:dd:73:d4:b1:
         aa:e1:c1:ef:7c:89:44:39:56:8c:a9:6b:33:73:6d:cf:33:bf:
         29:a2:0d:3d:3b:14:95:61:4c:34:cf:74:1d:0b:9c:92:9b:b9:
         bf:56:c8:b2:25:d1:86:c3:ed:18:2b:f5:9e:e4:c9:d7:5d:16:
         38:49:00:04:80:be:2b:5a:75:d4:95:e5:22:ab:d4:8a:94:64:
         2e:9e:9c:aa:14:e8:0a:19:4c:e9:2e:3d:fe:f9:e4:17:97:32:
         bf:d4:1b:5e:dc:b2:f9:4b:fd:19:f4:4a:ab:d9:00:66:4b:0e:
         f6:8c:f2:1b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:08 2024 by rpki-client on console-ams.rpki-client.org