Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/NwaVxSwZj2u2i48hHITfpU-_GZQ.roa
File:                     NwaVxSwZj2u2i48hHITfpU-_GZQ.roa (raw, json)
Hash identifier:          VoZbKu0InSX8SkamspHVejaNJw5GRN5oBaJ9xdV/hHw=
Subject key identifier:   37:06:95:C5:2C:19:8F:6B:B6:8B:8F:21:1C:84:DF:A5:4F:BF:19:94
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       03
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/NwaVxSwZj2u2i48hHITfpU-_GZQ.roa
Signing time:             Thu 07 Mar 2024 05:38:01 +0000
ROA not before:           Thu 07 Mar 2024 05:38:01 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     17698
IP address blocks:        119.10.184.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 3 (0x3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  7 05:38:01 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=370695C52C198F6BB68B8F211C84DFA54FBF1994
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:e1:d6:f1:49:74:60:57:04:09:0f:70:1a:55:
                    2e:ca:8e:fd:0c:c3:04:6d:fa:5b:d0:8d:1f:eb:5b:
                    b7:2a:3e:04:63:a0:4e:ef:0d:08:71:e0:de:96:25:
                    1d:ac:a1:dd:8c:8f:b2:e0:ff:bd:7b:00:0a:26:17:
                    c5:2d:4f:a5:38:3c:45:da:8b:3f:64:66:dd:c6:4c:
                    9f:46:f4:e0:18:a8:09:76:0a:b1:17:dd:e0:35:54:
                    4f:57:5e:cf:e4:27:be:a0:93:31:20:4e:fb:30:ed:
                    d0:62:01:d8:08:79:6c:b0:e1:ac:e4:ff:08:fc:85:
                    4c:cc:0f:8e:76:25:e9:09:9f:8f:92:6b:4d:1c:d2:
                    fb:44:96:04:0b:d1:3f:4f:46:c1:73:bf:76:3d:d8:
                    9f:09:ad:f8:c6:31:5f:a5:af:42:8d:58:13:b2:84:
                    3c:83:59:1c:be:2f:b8:c8:27:98:23:97:ed:e0:f9:
                    b4:02:a2:06:6e:5a:7f:fa:0b:95:7d:27:14:ed:99:
                    76:e4:53:6e:9a:43:87:cb:4f:ed:65:b9:52:58:e6:
                    10:3f:de:67:1d:5e:93:13:68:00:63:42:5e:79:74:
                    10:4b:da:e9:da:4c:e3:41:67:24:59:dd:df:c0:51:
                    89:5c:ae:3e:0c:aa:48:94:3e:89:98:52:90:3c:78:
                    f9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:06:95:C5:2C:19:8F:6B:B6:8B:8F:21:1C:84:DF:A5:4F:BF:19:94
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/NwaVxSwZj2u2i48hHITfpU-_GZQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.10.184.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a9:35:e2:8d:be:ec:6d:67:43:5f:63:c7:cc:86:e1:3e:ec:80:
         0e:93:a2:f6:06:eb:3d:30:ea:92:18:1b:95:3b:ee:b4:91:85:
         b3:41:aa:f4:70:aa:4a:8f:3c:cf:3f:cd:8b:0e:dd:bc:47:9e:
         b6:dd:aa:39:23:46:16:a9:43:bd:c8:d8:58:46:a3:33:9b:86:
         f0:83:c7:98:3c:0f:c5:d9:1a:4f:78:95:b4:5c:e1:7c:63:ad:
         86:26:76:92:38:17:6c:39:70:06:93:38:c0:6c:c5:b9:b1:14:
         6b:97:a0:32:b3:9a:27:fe:52:86:78:16:b7:f5:03:ca:79:2f:
         76:5b:6e:8b:64:bf:a9:6f:df:ed:4a:5e:ad:e3:88:ba:0e:2d:
         30:1a:79:2e:a1:52:53:bb:a1:56:30:24:20:c1:2b:66:83:7b:
         46:d3:97:e5:ae:ba:f2:31:81:fd:a0:e2:ca:54:fd:56:0d:09:
         42:a1:45:4b:ee:74:24:42:9b:07:63:71:f7:19:78:c5:48:d7:
         45:77:bb:ab:6c:87:34:11:a2:ea:b8:5a:a6:fa:93:44:44:90:
         6c:f2:f3:78:1d:43:d9:e6:88:87:ec:8a:14:7b:1f:a5:c1:95:
         9a:d0:18:c9:56:fd:07:d9:f8:5f:f5:cd:4b:75:7b:49:32:34:
         aa:fe:9a:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org