Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/T5EV9OJf-XHk2OnRS5GH022gOC0.roa
File:                     T5EV9OJf-XHk2OnRS5GH022gOC0.roa (raw, json)
Hash identifier:          Y4VLnEFlXubhZSOEwxrP8YDas5d0DL7LDj2rXP30rus=
Subject key identifier:   4F:91:15:F4:E2:5F:F9:71:E4:D8:E9:D1:4B:91:87:D3:6D:A0:38:2D
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       25
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/T5EV9OJf-XHk2OnRS5GH022gOC0.roa
Signing time:             Tue 26 Sep 2023 06:49:00 +0000
ROA not before:           Tue 26 Sep 2023 06:49:00 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        110.74.0.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:49:00 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4F9115F4E25FF971E4D8E9D14B9187D36DA0382D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:1d:6a:7f:24:06:18:8b:b9:da:ba:85:e1:ec:
                    e0:69:cb:67:35:ca:0b:a5:bf:b2:8b:b9:36:c2:d9:
                    65:24:3c:e4:89:eb:d5:d1:be:ab:82:5f:55:f1:51:
                    95:26:66:b7:57:8d:69:ad:c0:94:ec:82:4b:a7:75:
                    80:1e:0c:c2:db:3a:18:7f:29:f0:7e:b6:9e:d5:ae:
                    fa:b7:87:cf:0b:dc:e2:34:e2:fc:7d:30:9e:0b:7c:
                    b7:6d:2e:8c:51:4f:86:54:3d:0a:79:ae:f9:a2:4c:
                    46:81:97:2c:f9:b8:ad:56:12:0b:e4:a2:3a:b9:5f:
                    89:06:69:d1:b9:b5:d8:b7:62:f5:05:f5:65:4b:6e:
                    58:91:2e:97:9d:9e:f2:00:17:2a:ad:80:3b:cd:4d:
                    7d:25:c1:6f:c0:84:e8:40:8c:d3:e0:0c:c3:99:ef:
                    32:29:3e:7d:f2:9e:c1:e6:6d:a3:88:00:0f:22:13:
                    23:93:2d:85:a7:ed:f2:e1:5c:27:ab:6e:ad:39:04:
                    07:f9:53:67:ab:66:27:d1:82:cf:0f:4d:c1:1c:b0:
                    5d:2c:09:db:1c:f6:68:ec:9c:a1:c9:ec:1d:44:49:
                    35:b5:5e:e6:79:39:11:76:44:ab:f0:22:c4:91:fa:
                    d7:3a:4e:17:d2:d4:92:c3:33:63:b4:d6:25:3f:02:
                    d2:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:91:15:F4:E2:5F:F9:71:E4:D8:E9:D1:4B:91:87:D3:6D:A0:38:2D
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/T5EV9OJf-XHk2OnRS5GH022gOC0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.74.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         64:08:94:7c:db:1d:31:63:ef:2b:0c:e2:7a:3f:6a:75:7b:96:
         c5:5c:ec:cc:f0:fe:22:02:f0:c5:1f:58:cd:fb:fc:2a:10:fa:
         e5:9c:3c:22:e4:c8:1b:12:70:f9:86:69:1b:7c:03:54:a8:a1:
         2f:a9:27:0a:c7:d9:6e:c9:fa:04:44:92:eb:1a:78:1d:1e:64:
         50:7a:4d:f6:06:b0:fa:c1:7e:a7:87:9e:0f:c9:05:a9:e9:24:
         d3:33:20:49:61:0c:94:ba:58:4a:de:ba:b3:47:32:29:29:ee:
         91:5f:c5:f0:b8:91:71:31:81:df:26:64:04:b9:6d:b0:c9:0f:
         f2:c3:bc:3d:ba:bc:22:44:e9:00:6f:47:58:a2:46:99:7f:6d:
         15:2f:5b:67:7e:56:fa:2d:81:1c:df:29:03:5a:aa:09:a4:a2:
         9b:b1:4f:ba:03:e3:fc:f8:87:81:62:b6:b9:b9:75:b1:ef:61:
         d3:af:7c:22:c1:b6:ab:c0:0f:23:8e:c6:ca:62:66:33:2b:04:
         0e:74:db:70:ba:a7:5e:d0:08:c6:f8:10:cd:de:63:7e:a4:68:
         c3:1c:47:db:b7:03:bb:35:07:4d:60:eb:13:ae:2e:88:39:d3:
         cc:b9:de:24:a8:a1:ef:48:67:56:92:b2:a4:c0:79:0d:17:59:
         13:d6:7d:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org