Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/jBXyymd7kP-q2LqWWkOE1Fm4XrQ.roa
File:                     jBXyymd7kP-q2LqWWkOE1Fm4XrQ.roa (raw, json)
Hash identifier:          jV994sURb8SDngVNH9qFsanzLHLFWUPqVYW4dd4lhqM=
Subject key identifier:   8C:15:F2:CA:67:7B:90:FF:AA:D8:BA:96:5A:43:84:D4:59:B8:5E:B4
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       2E
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/jBXyymd7kP-q2LqWWkOE1Fm4XrQ.roa
Signing time:             Tue 26 Sep 2023 06:55:10 +0000
ROA not before:           Tue 26 Sep 2023 06:55:10 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        182.236.96.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:55:10 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=8C15F2CA677B90FFAAD8BA965A4384D459B85EB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:35:bd:a2:b6:77:e6:b4:b7:44:8f:0e:9a:33:
                    3b:ff:2b:76:68:0e:f4:3b:b4:3c:32:37:b7:0e:c7:
                    ab:e1:5f:71:ec:19:b9:29:ee:11:81:0e:ec:d1:da:
                    4f:2d:da:f2:20:a2:3e:e7:44:7f:bf:1e:01:53:c7:
                    1f:ed:62:ad:30:ae:94:8b:db:b3:89:87:fd:13:7b:
                    40:15:4b:8f:3a:43:3e:a5:92:92:8d:9c:07:1c:01:
                    de:e5:c7:b6:95:ea:9c:ef:6e:ec:33:84:73:be:f5:
                    8f:dc:52:09:8b:70:55:af:88:27:62:49:2a:d9:e3:
                    b2:67:21:db:7a:11:62:5e:a2:f7:13:c4:2a:3c:d0:
                    65:7e:eb:b5:8e:02:87:59:ff:1c:03:cc:09:5d:34:
                    97:02:ad:b1:ed:15:f6:7e:81:e2:7c:57:69:13:4e:
                    7f:39:a2:eb:24:6b:90:07:46:eb:3b:40:73:ce:93:
                    34:fa:ad:bc:0b:29:d8:d9:ed:ed:77:fc:76:73:d5:
                    79:92:de:f8:46:a3:08:d1:42:a2:b4:2b:29:f3:31:
                    25:2a:64:f2:2b:38:39:e2:62:be:c6:0b:d2:c9:20:
                    35:d1:19:a0:11:d2:1a:9a:d1:71:20:1e:5f:4e:4b:
                    5d:80:fd:df:31:d9:e8:5c:58:f7:f9:18:55:1a:ff:
                    29:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:15:F2:CA:67:7B:90:FF:AA:D8:BA:96:5A:43:84:D4:59:B8:5E:B4
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/jBXyymd7kP-q2LqWWkOE1Fm4XrQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  182.236.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         38:71:d5:c8:59:1c:29:45:86:21:26:36:55:44:69:88:b5:26:
         31:b4:f8:6b:1a:92:f4:97:17:2e:ad:8b:a1:87:1c:a2:f6:88:
         3e:c3:69:99:f9:42:08:fd:73:b3:a6:22:65:44:cf:a1:26:31:
         cf:60:4a:9a:77:24:3a:91:77:d8:5c:86:ee:73:62:34:eb:48:
         37:dd:d6:dd:6d:5b:3f:e4:23:2c:e3:7d:dd:92:11:30:b4:b8:
         df:33:be:74:0c:14:ce:e8:68:65:86:23:4c:3a:4b:3b:a4:2f:
         36:78:73:5f:f7:80:6a:71:a2:c7:39:03:88:6e:f7:83:65:82:
         00:86:ae:99:cb:74:40:46:52:87:c8:eb:e2:03:0d:49:36:97:
         5c:fb:7f:4a:97:75:cc:38:d2:cc:b8:a7:0d:7f:c9:15:89:ce:
         89:09:36:ef:cf:08:cb:99:9b:c1:76:67:fb:21:af:d4:e5:41:
         d4:b1:b2:22:1d:80:54:ba:69:1a:38:a9:17:a1:2c:9e:8b:8a:
         94:97:55:6a:b5:69:1a:a0:00:d3:98:09:dc:2d:55:9a:99:74:
         37:f1:f6:16:d2:c5:8c:fe:f9:95:34:6b:12:a2:ee:07:4b:c7:
         3f:79:92:16:f7:85:dc:1b:3c:2c:e1:98:72:36:e4:6e:25:92:
         41:a8:00:1e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:17 2024 by rpki-client on console-fra.rpki-client.org