Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/_BbW2jZ399F4Wraf1k3xB944nIo.roa
File:                     _BbW2jZ399F4Wraf1k3xB944nIo.roa (raw, json)
Hash identifier:          Ks0wTq7jc/zqceUYZ3GTQw4//RY6r6HuVtJU/mDK5CQ=
Subject key identifier:   FC:16:D6:DA:36:77:F7:D1:78:5A:B6:9F:D6:4D:F1:07:DE:38:9C:8A
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       20
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/_BbW2jZ399F4Wraf1k3xB944nIo.roa
Signing time:             Mon 18 Mar 2024 06:49:47 +0000
ROA not before:           Mon 18 Mar 2024 06:49:47 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        221.121.192.0/18 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 06:49:47 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=FC16D6DA3677F7D1785AB69FD64DF107DE389C8A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:bd:05:7c:16:85:17:6b:97:a0:7d:60:af:de:
                    73:4b:8c:25:22:b8:be:90:48:f8:c7:c8:fd:f8:71:
                    9a:c5:aa:e1:64:59:3b:07:0d:ce:e7:3a:79:5e:5c:
                    25:99:93:44:56:31:23:5e:5d:b7:b6:ec:4d:55:98:
                    da:bf:9e:ca:1f:03:66:e1:07:16:55:28:ff:7e:2e:
                    f9:d9:12:1d:78:54:9f:96:e5:f5:90:1b:cc:dd:8e:
                    1c:9d:f4:ff:b8:20:8e:bb:88:a1:78:39:08:61:72:
                    85:94:ad:68:12:60:d2:f2:03:82:fe:19:76:34:2a:
                    20:eb:1a:19:27:40:b8:c4:a7:ac:48:15:65:eb:09:
                    6e:bb:33:d5:4c:61:6b:40:bc:72:df:19:90:bd:ab:
                    1d:2a:c0:69:eb:d5:6a:f5:03:22:dd:90:d3:fe:01:
                    c0:59:c1:25:ed:d4:a6:07:40:9a:28:b9:54:97:cf:
                    ab:d4:5c:26:10:4a:3c:14:83:31:8b:12:61:03:77:
                    83:e2:ec:19:94:c5:77:94:b3:80:ed:ac:5f:87:4f:
                    37:53:20:0d:23:fa:53:5b:74:15:5a:28:9e:f7:bd:
                    1e:17:21:f4:71:41:3f:62:e4:3f:95:33:21:f5:87:
                    38:47:a9:5e:7e:a1:87:7b:33:04:f0:49:05:86:c9:
                    a9:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:16:D6:DA:36:77:F7:D1:78:5A:B6:9F:D6:4D:F1:07:DE:38:9C:8A
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/_BbW2jZ399F4Wraf1k3xB944nIo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.121.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         d4:5f:73:2d:76:e9:3e:34:6c:2a:8c:70:30:c8:8c:38:d5:c4:
         8a:d3:bc:06:9c:40:11:0b:7d:04:00:4e:3e:59:8d:19:b7:f8:
         90:2d:f4:05:39:99:39:53:17:79:85:2e:69:b0:da:f1:be:5c:
         42:8c:f8:a1:08:68:ad:48:7b:6d:a6:c2:cf:b8:27:56:92:64:
         fb:51:86:00:04:7a:0a:f6:bd:b8:ab:e3:6d:d2:ba:b5:c0:33:
         60:53:c0:56:4f:b8:5d:e4:42:59:23:9c:62:6e:71:fd:c2:e0:
         2a:18:e2:b7:78:86:a1:31:de:1d:55:7d:de:61:36:b5:70:c9:
         10:8c:07:bb:7d:ea:49:fe:11:a5:bf:c1:f6:bf:64:9e:a3:41:
         cc:06:39:b1:07:dc:cf:df:bb:7d:7e:a3:44:fb:53:ce:ab:7a:
         70:6a:34:c3:fa:85:30:a5:7c:f3:90:78:a2:78:98:54:fa:af:
         49:86:18:34:32:f5:1a:68:73:ce:45:e9:f3:2a:7c:ab:37:21:
         f0:94:45:99:15:7e:57:f5:ac:61:30:c7:5e:f9:80:28:7b:4c:
         f5:53:5d:9e:97:08:db:87:ca:da:ac:4f:fe:0b:e3:d3:17:44:
         85:a6:28:83:d1:59:b7:64:45:4c:85:5c:24:12:ba:e7:30:5e:
         82:b4:95:35
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:01 2024 by rpki-client on console-fra.rpki-client.org