Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
File:                     0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa (raw, json)
Hash identifier:          N+QzMKb+E+FAZAmA7gb8fRDlrRUnjDW6vxRQKAiFF84=
Subject key identifier:   D1:AA:09:29:82:89:F6:DE:A3:4E:F7:E8:4A:94:34:04:17:D8:0C:9B
Certificate issuer:       /CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
Certificate serial:       3A
Authority key identifier: 28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
Signing time:             Sun 30 Jun 2024 01:28:49 +0000
ROA not before:           Sun 30 Jun 2024 01:28:49 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     63771
IP address blocks:        202.223.56.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28E69152BA3F7A57A1B991000156E582AD0EC9D9
        Validity
            Not Before: Jun 30 01:28:49 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=D1AA09298289F6DEA34EF7E84A94340417D80C9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:60:e6:7a:11:d8:af:6c:4d:58:98:22:76:c1:
                    0c:de:16:66:6e:3d:88:b3:c2:e8:4b:ef:36:2d:83:
                    59:aa:93:8e:97:ad:ce:01:bf:c2:84:fc:bf:ea:00:
                    6d:02:43:9e:f6:2f:ef:d0:20:f3:23:96:65:37:6c:
                    71:0d:2b:7a:ec:06:b8:97:6f:58:18:2a:c0:03:bf:
                    96:2e:c3:0e:4d:bf:c3:be:d8:9e:93:c4:01:95:fb:
                    28:49:d6:51:1d:ca:a1:40:13:72:85:69:58:0a:0b:
                    7a:47:61:f2:3c:42:b7:d3:f5:3b:45:70:06:b0:4d:
                    6d:6f:ad:85:c1:a5:a9:df:1a:2f:97:11:c0:38:6b:
                    93:7d:51:51:8a:5d:19:40:11:5d:e9:df:51:68:38:
                    b7:d7:8c:50:d4:6b:22:13:4c:13:60:6e:1a:aa:a3:
                    df:44:b6:d2:83:16:ef:29:fe:e0:2d:5a:1b:62:01:
                    0e:f7:18:fe:c2:7e:18:34:40:76:cb:d7:fe:30:59:
                    2e:64:cd:d8:03:29:ff:9c:a7:79:fe:44:61:ad:e1:
                    07:f0:97:0e:ea:e6:07:15:c4:9b:29:7d:fc:a2:dc:
                    32:91:e6:6b:ee:76:8d:e8:e8:0a:78:4b:51:89:e9:
                    9c:b1:22:0e:c1:2b:37:81:f6:0e:3d:e3:75:74:0d:
                    7d:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:09:29:82:89:F6:DE:A3:4E:F7:E8:4A:94:34:04:17:D8:0C:9B
            X509v3 Authority Key Identifier:
                keyid:28:E6:91:52:BA:3F:7A:57:A1:B9:91:00:01:56:E5:82:AD:0E:C9:D9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/KOaRUro_elehuZEAAVblgq0Oydk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KOaRUro_elehuZEAAVblgq0Oydk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20041/0aoJKYKJ9t6jTvfoSpQ0BBfYDJs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.223.56.0/22

    Signature Algorithm: sha256WithRSAEncryption
         4f:76:46:8a:8f:c5:4f:d5:17:66:d8:77:83:f0:8f:83:dc:3c:
         15:ad:b5:88:c6:ce:fd:19:07:b0:5d:4b:17:20:cd:c7:90:05:
         c4:92:6d:25:c3:33:78:8a:56:1e:ab:45:fe:f1:7d:65:3e:e9:
         43:9f:a0:9f:1e:18:82:41:a1:8e:e7:56:e7:54:45:e7:14:2b:
         35:6e:11:fe:c0:e1:e9:78:79:98:c1:bb:21:c6:c2:0c:78:36:
         3f:a6:7c:cf:f6:32:cc:72:b8:2f:cf:75:33:6d:dc:fb:36:c6:
         55:11:4f:e1:4a:0c:ce:fc:df:1b:da:36:46:ad:7b:fe:e5:ec:
         ca:52:3d:5e:af:13:02:55:a9:95:92:e7:c0:06:b5:a6:c2:7c:
         13:16:70:d8:c9:07:9f:f7:ae:3b:ee:50:e8:d8:3c:45:e0:1b:
         0c:1c:7a:60:80:a0:6f:b4:cc:12:8a:cf:49:2e:c2:b0:92:4f:
         22:7f:6c:35:d0:ec:d7:49:cc:39:4c:2c:b1:ab:d7:aa:4c:b9:
         9d:75:b2:55:ee:01:48:12:9f:60:5f:0f:13:3c:64:d2:f1:43:
         cc:7d:74:c0:1b:34:85:3e:05:fb:44:af:4a:cc:47:cd:a0:79:
         49:a8:5e:22:11:d1:09:be:6a:51:20:e2:a4:42:62:c6:96:98:
         de:47:4c:02
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org