Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/anCaEzCGTMG9yFn3X-Mu5fJlJHQ.roa
File:                     anCaEzCGTMG9yFn3X-Mu5fJlJHQ.roa (raw, json)
Hash identifier:          iVvvfEvCSrquYCFWLjy7KqI4TFFvc+WuaJ8JqobvgJE=
Subject key identifier:   6A:70:9A:13:30:86:4C:C1:BD:C8:59:F7:5F:E3:2E:E5:F2:65:24:74
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       20
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/anCaEzCGTMG9yFn3X-Mu5fJlJHQ.roa
Signing time:             Fri 12 Jan 2024 04:06:19 +0000
ROA not before:           Fri 12 Jan 2024 04:06:19 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     131923
IP address blocks:        218.45.64.0/19 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Jan 12 04:06:19 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=6A709A1330864CC1BDC859F75FE32EE5F2652474
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:39:66:fd:e5:61:af:19:29:f3:a1:14:e6:c6:
                    e5:be:65:e5:da:de:cb:f0:0a:5a:83:d0:44:6d:78:
                    01:5c:64:5c:57:37:1a:fc:64:e7:99:11:a9:6f:be:
                    17:10:68:c5:ea:6e:ec:fd:2a:e6:98:ff:62:2c:dd:
                    fc:6f:95:e8:6d:03:20:fc:b5:fc:50:fd:3a:66:44:
                    74:2b:b7:23:a2:49:00:1b:9a:67:0e:d8:5a:39:8c:
                    26:f5:9c:52:8e:5d:0c:61:d2:ab:fb:39:78:5b:e4:
                    b1:0d:39:51:fd:87:12:12:1b:c1:28:0e:1c:2d:ee:
                    83:8c:bd:b4:a2:70:70:45:4e:7c:8a:53:0f:1b:b7:
                    c6:08:6c:eb:05:f4:72:88:66:c4:8b:84:5c:c3:9c:
                    ce:dc:75:cb:cd:da:1c:c0:bd:f4:87:b5:6f:9a:4f:
                    fb:f6:f1:c5:77:83:29:55:da:93:cc:24:1b:2e:29:
                    31:d4:ec:ac:2f:46:dc:c9:34:23:8a:48:dc:a9:b7:
                    f2:0f:af:59:5a:40:5b:ae:b6:23:0f:29:af:c9:3f:
                    70:8e:e8:5e:0d:a4:bb:98:5c:62:fb:2a:dc:9a:d6:
                    8f:69:ad:7b:ac:5f:c6:b9:2a:1f:e6:c8:4d:d0:ea:
                    25:45:ed:50:39:7f:38:4a:07:33:96:7a:90:d9:48:
                    e9:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6A:70:9A:13:30:86:4C:C1:BD:C8:59:F7:5F:E3:2E:E5:F2:65:24:74
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/anCaEzCGTMG9yFn3X-Mu5fJlJHQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:24:3e:22:90:07:ea:a0:55:42:f0:7d:44:49:d1:b4:08:12:
         ca:9f:94:a7:b7:df:5e:97:3a:b4:c3:6e:2f:d1:28:32:37:82:
         f1:89:48:27:cc:75:35:20:ca:31:84:ab:73:18:6b:34:89:b2:
         16:0e:5a:cd:86:3c:88:df:bb:31:c3:46:e2:80:ce:b7:c9:0e:
         d9:28:f8:dc:8d:8d:b4:1c:eb:de:af:c0:53:cc:77:e4:c6:4c:
         df:b7:fa:ed:1a:a7:e3:81:f5:61:c2:ec:47:04:17:af:49:01:
         87:58:bf:bc:d7:8c:95:b7:91:c2:2e:15:7d:98:fd:ac:55:72:
         18:dc:ea:ba:4a:40:ad:2b:d6:e3:b7:c2:99:a8:7f:de:bc:10:
         fb:40:51:89:8c:b2:a7:0a:4d:50:7b:1b:a4:fb:40:83:16:b8:
         06:6b:e6:96:51:f6:97:2f:b0:a3:45:3b:6f:04:ca:68:3b:96:
         d5:51:89:e1:2d:ee:16:40:b2:12:29:5a:3e:30:cc:72:d4:96:
         f8:88:c8:0d:d1:58:e1:6e:1a:66:d2:ec:fc:49:f5:5a:bc:47:
         ae:35:c5:0d:5d:a8:9b:9f:6c:e7:58:58:62:14:c7:cc:58:bc:
         e2:9d:c0:08:2b:7f:9d:22:fc:45:11:02:2a:ec:33:23:2c:cb:
         c1:4d:a9:44
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu May 30 03:38:38 2024 by rpki-client on console-ams.rpki-client.org