Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mEAWuqiAKmZXKzHZryuLjUF1bIc.roa
File:                     mEAWuqiAKmZXKzHZryuLjUF1bIc.roa (raw, json)
Hash identifier:          DKP+dtAmU5nogHLvAzD3FvUW4UBkeLhmLhGfPc59iio=
Subject key identifier:   98:40:16:BA:A8:80:2A:66:57:2B:31:D9:AF:2B:8B:8D:41:75:6C:87
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       1D
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mEAWuqiAKmZXKzHZryuLjUF1bIc.roa
Signing time:             Mon 18 Mar 2024 05:57:43 +0000
ROA not before:           Mon 18 Mar 2024 05:57:43 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        219.124.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 05:57:43 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=984016BAA8802A66572B31D9AF2B8B8D41756C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:59:98:94:35:01:a4:14:53:6c:54:d6:3d:19:
                    35:0e:b5:3e:f8:94:c4:f7:fa:1d:68:8c:2e:cd:b0:
                    2b:9c:5f:18:4d:2c:69:8d:94:b3:94:8c:f6:37:db:
                    cb:8f:d9:e7:53:11:61:1b:49:bf:f2:12:ed:70:51:
                    51:89:26:e8:f4:3e:93:8c:3c:af:9a:c8:cf:6d:fd:
                    b4:da:6d:32:85:ba:e4:77:d5:11:c5:ce:b6:49:74:
                    ef:f1:c2:60:7d:0d:84:31:d2:f6:55:eb:4d:b1:1c:
                    f6:23:5a:91:56:28:74:58:9b:b5:a1:e0:55:38:f5:
                    1a:9a:eb:7c:c6:43:79:7a:5d:be:45:12:24:22:e4:
                    f0:60:4a:52:9f:19:75:ba:ff:0d:c5:fe:84:4f:53:
                    bd:10:96:94:ce:f2:97:14:56:6a:ae:eb:64:7a:85:
                    25:42:32:82:c9:21:78:e3:37:a7:51:9c:b8:76:2c:
                    56:ae:c8:3e:13:41:05:59:b8:42:70:90:ec:34:40:
                    00:6a:a8:9f:ef:45:15:62:18:de:8d:9c:ff:13:a6:
                    79:5f:db:a5:84:48:32:32:86:69:94:66:e1:87:5f:
                    21:49:56:a4:29:07:59:e9:73:5e:9a:c4:4f:8d:e5:
                    ad:6d:8d:4b:43:06:a3:ea:7d:2b:a3:5f:23:08:11:
                    b1:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:40:16:BA:A8:80:2A:66:57:2B:31:D9:AF:2B:8B:8D:41:75:6C:87
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/mEAWuqiAKmZXKzHZryuLjUF1bIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.124.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d2:d1:5f:d7:be:64:45:78:76:59:57:ce:d4:24:53:9a:e6:d6:
         01:a0:ed:3c:a2:ab:8e:59:4a:50:56:8c:dc:a3:ea:29:8c:1d:
         8c:d0:e2:c8:29:3e:52:a6:8c:0a:0f:2f:aa:71:30:49:f1:29:
         ba:c0:74:9b:c0:09:3d:43:ae:4c:4f:58:2b:c5:0a:5e:35:38:
         87:a3:fc:b8:85:17:a3:05:4c:18:c1:1c:b9:66:d0:cc:8c:f6:
         e7:93:bd:d9:d0:74:8e:40:08:46:3f:fd:6a:75:61:c3:c2:45:
         36:59:37:63:9c:68:e7:37:eb:2d:c7:66:e6:19:2b:f0:fa:89:
         cc:a2:1e:6b:99:90:6a:83:94:1b:fe:10:3c:98:27:fa:fc:35:
         3a:ff:86:07:db:f7:39:b3:16:85:37:77:35:4e:17:5a:49:33:
         eb:d0:9e:4e:98:61:7a:34:7e:35:71:7c:35:94:cd:88:1a:76:
         28:f5:89:38:e5:97:4a:15:47:fe:d5:b6:6c:c4:43:14:97:3f:
         10:8a:47:ad:09:00:76:2c:f1:7a:77:ff:02:77:d5:02:95:4d:
         ef:7f:8b:fb:63:f7:d9:e0:f9:71:71:df:c6:c6:cb:7f:4d:d9:
         f3:96:17:6d:55:bf:56:26:23:3d:8a:89:7d:ce:8e:de:d2:91:
         e9:83:9f:1a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:42 2024 by rpki-client on console-fra.rpki-client.org