Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ZBoSMnB967x62c721aRBKXzAGPw.roa
File:                     ZBoSMnB967x62c721aRBKXzAGPw.roa (raw, json)
Hash identifier:          cWb7mS1SV8q4kD+5gb6a13DIRdjDhWTJwjNEfnBmO5E=
Subject key identifier:   64:1A:12:32:70:7D:EB:BC:7A:D9:CE:F6:D5:A4:41:29:7C:C0:18:FC
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       04
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ZBoSMnB967x62c721aRBKXzAGPw.roa
Signing time:             Thu 07 Mar 2024 06:38:04 +0000
ROA not before:           Thu 07 Mar 2024 06:38:04 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     17698
IP address blocks:        202.168.216.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar  7 06:38:04 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=641A1232707DEBBC7AD9CEF6D5A441297CC018FC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:98:da:51:a4:84:1a:70:29:0f:ec:07:c4:92:
                    70:c2:0c:2e:f8:00:12:42:82:8e:f8:7f:50:65:6f:
                    1a:3e:af:6f:32:26:73:e0:81:85:7f:34:43:57:4e:
                    a4:c6:d8:e2:a1:e3:57:df:26:f8:32:91:15:95:cd:
                    a2:9a:fc:b8:e5:9e:c7:99:03:0b:63:e9:23:f9:79:
                    da:ec:e4:c0:eb:5e:f6:b1:ef:49:be:5a:2c:19:5c:
                    54:94:ad:24:94:73:22:c2:76:9c:eb:7e:8f:60:6b:
                    8d:b2:41:31:15:ef:4f:13:de:37:b1:6a:5c:a9:6c:
                    f2:a3:82:07:78:ce:57:8b:dc:88:71:5b:6c:50:52:
                    10:f1:ad:f0:2d:83:00:17:f8:1b:ce:ba:90:3f:52:
                    1a:99:ef:b1:4c:93:e9:e6:76:98:93:03:e5:10:f2:
                    48:85:d7:d4:6d:04:30:9c:a2:c0:b7:ec:db:6b:47:
                    cd:74:cb:bb:da:c0:93:3a:9f:05:6a:a1:cc:83:df:
                    0b:17:c9:e4:8a:26:b7:87:3f:16:c7:47:5e:e5:41:
                    c0:e8:a0:42:99:f8:81:9c:e0:2e:95:a5:ca:d1:12:
                    89:3e:a8:3d:51:5d:35:f9:a8:1e:64:ff:da:c9:8f:
                    59:2b:6b:80:63:6f:43:b5:b8:f1:be:e4:6e:be:09:
                    68:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:1A:12:32:70:7D:EB:BC:7A:D9:CE:F6:D5:A4:41:29:7C:C0:18:FC
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ZBoSMnB967x62c721aRBKXzAGPw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.168.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         47:4e:fa:52:f5:d0:a7:61:1b:39:c0:30:50:3d:90:47:34:16:
         e0:d5:9e:8f:9e:aa:74:c9:0c:85:87:f0:c5:d4:da:83:9c:77:
         3d:97:0b:05:05:54:b2:47:07:fa:89:12:85:9c:9f:c8:8f:05:
         8e:59:d2:24:52:81:83:d7:00:22:f7:36:ab:84:c1:9a:a4:8c:
         15:e3:cb:46:6e:a5:32:54:28:96:88:ce:db:47:32:16:47:9e:
         ec:dd:f9:bb:f1:42:7c:f9:92:b8:3d:01:1e:05:4b:04:8c:03:
         1a:17:d6:49:b4:64:ab:1f:74:8f:e8:c5:1b:ac:df:c5:85:57:
         5a:81:9b:59:d3:f7:be:c7:79:e5:a6:40:aa:b9:9c:95:18:38:
         3a:51:23:35:a3:fb:92:e6:cf:20:cb:ab:14:5b:99:8e:da:d7:
         93:ad:d9:08:d2:66:0e:36:94:ad:34:18:39:99:a7:ca:b9:26:
         fc:56:bd:af:d2:e4:20:b3:3b:e0:fc:04:95:d0:ad:8a:e1:e1:
         50:32:56:5d:11:e1:68:61:95:ad:70:7a:cc:45:60:a3:82:81:
         3f:6c:de:59:e8:f5:02:c8:96:9b:fa:9e:3e:72:3b:76:1c:de:
         48:43:3e:30:6b:3b:21:b7:f4:40:8c:b4:60:f0:d3:52:b9:3d:
         3e:bf:e1:17
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:25 2024 by rpki-client on console-ams.rpki-client.org