Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/O5TKppqEe0pyz7cROQwCZbUo3dk.roa
File:                     O5TKppqEe0pyz7cROQwCZbUo3dk.roa (raw, json)
Hash identifier:          6/UaGQ1CA0iucMqz5kCr3o9OMIfFroQDhywhE/Mu7lk=
Subject key identifier:   3B:94:CA:A6:9A:84:7B:4A:72:CF:B7:11:39:0C:02:65:B5:28:DD:D9
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       1F
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/O5TKppqEe0pyz7cROQwCZbUo3dk.roa
Signing time:             Mon 18 Mar 2024 06:17:47 +0000
ROA not before:           Mon 18 Mar 2024 06:17:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        220.213.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 06:17:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=3B94CAA69A847B4A72CFB711390C0265B528DDD9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:73:19:f4:30:1b:3f:67:19:4c:bc:83:77:92:
                    dd:8d:ac:9f:98:05:3f:1c:f5:de:71:fd:69:ec:c7:
                    d3:ee:16:73:56:48:47:a8:7f:10:5a:ad:70:d6:60:
                    4e:41:d9:4f:da:30:2a:a2:5b:df:2c:86:48:51:29:
                    ef:e2:ae:fe:0c:a6:54:b0:24:f0:cb:67:d9:13:a8:
                    44:dc:b4:84:68:2d:12:d8:ba:cb:d4:4d:ce:2d:ae:
                    db:d3:c0:99:69:c6:51:ed:2f:fa:2a:b8:22:6b:e5:
                    58:e2:b8:48:f6:1f:6d:6d:1f:b1:42:5b:e2:ef:40:
                    8c:07:a4:bb:2d:0c:0c:b1:9e:f4:a4:48:de:7c:ca:
                    52:d0:6c:2b:42:41:bb:8b:68:5d:39:67:54:ed:b8:
                    5c:7e:4b:71:e8:f1:75:e6:01:9f:a6:a4:2c:85:e1:
                    a1:37:63:08:05:60:5e:87:a5:3b:cd:d8:06:f4:fc:
                    1b:f0:f0:d6:86:63:74:28:ca:1d:f3:a2:eb:9f:dd:
                    92:5d:71:4e:fc:17:d5:72:a7:d8:a6:95:fa:6f:85:
                    8a:49:02:70:e7:0e:e2:56:47:b7:ad:b2:d1:13:0b:
                    c9:eb:51:e3:66:67:c0:c1:7c:e5:8c:3a:c6:73:ce:
                    91:11:e1:25:e5:06:f2:02:ce:af:61:35:1a:61:01:
                    c3:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:94:CA:A6:9A:84:7B:4A:72:CF:B7:11:39:0C:02:65:B5:28:DD:D9
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/O5TKppqEe0pyz7cROQwCZbUo3dk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.213.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         91:b9:9a:f7:e1:ec:de:58:a7:80:4e:b0:c4:4d:72:e1:9a:45:
         09:25:4c:16:db:54:4b:ea:a6:6b:a6:40:c3:32:6c:6f:66:e3:
         13:fd:a8:b6:51:7d:7e:1a:ef:3c:03:04:d7:0b:56:d1:03:44:
         3c:a4:73:de:62:08:64:2a:c3:c1:ea:3b:94:3d:b7:17:ca:6d:
         39:11:4a:ab:5a:cb:6d:6b:12:eb:f1:68:fd:66:23:f5:23:0a:
         6e:a3:b7:e7:40:3f:d2:59:e8:b1:30:a7:75:60:62:a2:0d:c3:
         ae:dc:25:41:12:ea:44:68:09:ac:5c:62:cb:31:f5:f1:c0:4c:
         d2:cd:4e:95:c8:62:d2:61:61:0a:c5:3a:d3:f3:25:f7:95:36:
         99:95:1d:36:5b:7d:89:9e:c9:18:a9:c2:07:92:b1:38:0f:aa:
         bb:96:1c:3b:84:b1:1a:ad:cc:fb:ec:80:15:4f:c5:9b:75:a2:
         3d:54:3e:30:e4:d2:f1:6b:9f:f5:27:e4:96:45:5b:da:09:55:
         eb:d2:3a:68:e6:8c:83:7f:c5:26:44:aa:2f:5a:38:e1:c1:bd:
         76:18:1d:11:df:5c:0d:37:d8:33:db:e3:95:dd:1c:64:56:bd:
         8f:9a:82:4e:43:59:4b:19:22:3a:76:fd:fd:70:4a:1d:20:0d:
         09:16:9b:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:27 2024 by rpki-client on console-ams.rpki-client.org