Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
File:                     ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa (raw, json)
Hash identifier:          REVOnPdrFQEUiUFiFDneLLXY41KIOfWi3CX55noRT5A=
Subject key identifier:   C9:BA:B9:5C:9E:8F:EC:40:36:CE:4F:03:D3:0B:EC:37:6F:FD:80:7B
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       0F
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
Signing time:             Mon 18 Mar 2024 01:57:42 +0000
ROA not before:           Mon 18 Mar 2024 01:57:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        122.49.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 01:57:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=C9BAB95C9E8FEC4036CE4F03D30BEC376FFD807B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:8f:70:d6:06:e8:85:17:26:02:ee:84:60:f8:
                    36:72:ec:c3:a0:39:61:47:84:5c:22:20:ac:c9:4c:
                    38:58:84:ce:81:0e:f9:a3:bb:9c:19:9b:41:f0:e4:
                    9e:16:2a:54:57:1b:94:c4:78:e5:8d:b4:51:ec:4a:
                    1c:cc:bf:10:c8:43:cb:2f:c2:4f:46:31:3e:a6:e2:
                    e0:c2:06:0e:ab:5d:23:27:81:93:1a:7e:61:1e:ee:
                    29:ce:04:e0:43:6b:af:10:f9:fe:4a:08:70:cc:4c:
                    45:b0:56:e5:b7:71:26:5d:27:22:9f:44:d3:f1:57:
                    cf:21:9f:5a:2a:1e:7d:5b:e2:d9:31:60:24:bd:c7:
                    7b:d5:32:4c:33:4b:b7:92:98:86:f7:0a:4b:27:85:
                    ed:7c:2a:5a:58:ba:7a:4a:ef:ed:0b:90:02:d7:0c:
                    95:99:5e:4c:54:6d:4c:b0:aa:67:10:07:8f:70:b2:
                    e1:b5:7e:18:1e:3d:ce:74:60:6e:0e:b9:fd:23:2c:
                    85:ba:5c:67:c0:bd:a6:4a:ee:ed:4b:38:6c:f3:68:
                    01:1d:8d:3f:a4:15:53:61:b2:61:f9:ef:c0:3a:ea:
                    1d:9c:f3:b9:a7:d4:85:b9:93:01:f3:65:a9:14:c4:
                    70:3d:ce:10:47:02:a2:d4:07:5e:e5:64:d9:54:54:
                    da:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BA:B9:5C:9E:8F:EC:40:36:CE:4F:03:D3:0B:EC:37:6F:FD:80:7B
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/ybq5XJ6P7EA2zk8D0wvsN2_9gHs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  122.49.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         38:4c:1d:6d:6c:22:68:ac:7f:4b:24:af:a1:5a:8c:d8:96:2d:
         fd:f2:66:7a:c4:08:44:b0:bb:6e:af:70:85:10:41:b9:a3:48:
         4b:63:d5:d0:9a:29:cb:e9:38:10:5e:4d:b6:e5:a0:b0:fe:7d:
         69:95:af:d0:d1:67:bc:9e:43:2c:c5:bc:be:30:ab:56:6a:33:
         2d:48:6c:cb:5f:3c:00:8b:f2:d2:29:e1:17:75:c4:38:da:bb:
         ac:0b:95:2f:cd:96:98:1e:9f:9a:ec:5c:79:71:e6:f7:28:8a:
         19:da:bc:21:eb:04:6f:99:ee:81:9e:68:13:a3:f0:ea:1e:ad:
         43:f6:e1:54:92:c2:b0:20:41:c4:02:ce:87:ed:cc:f9:34:76:
         62:3f:0f:68:06:a1:d0:54:92:6a:65:4b:30:bd:40:d7:39:06:
         56:18:d1:84:da:02:e7:8a:c8:54:e6:1e:54:25:19:95:c3:c1:
         83:8f:7e:dd:ca:c8:71:a1:21:6a:d8:6f:58:76:de:59:f2:3f:
         77:bb:70:63:d8:a3:d4:a9:a3:2f:77:74:eb:84:51:3b:32:bc:
         3b:4f:96:39:34:46:b2:60:c2:ff:9b:99:88:4f:b0:1f:e7:e6:
         b1:c2:2b:97:8f:e5:08:0f:d1:b3:c1:f7:00:26:92:6f:47:3a:
         25:b4:cc:13
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:12 2024 by rpki-client on console-fra.rpki-client.org