Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mEJw5ahg1zAkkS_R_fVyJRuLFwI.roa
File:                     mEJw5ahg1zAkkS_R_fVyJRuLFwI.roa (raw, json)
Hash identifier:          /jr5uCNc9G6h1kmzkOxNjLnbrXlExcbndne3/HFf6VY=
Subject key identifier:   98:42:70:E5:A8:60:D7:30:24:91:2F:D1:FD:F5:72:25:1B:8B:17:02
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       20
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mEJw5ahg1zAkkS_R_fVyJRuLFwI.roa
Signing time:             Tue 26 Sep 2023 05:53:00 +0000
ROA not before:           Tue 26 Sep 2023 05:53:00 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        27.34.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 04 Jul 2024 10:52:19 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 05:53:00 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=984270E5A860D73024912FD1FDF572251B8B1702
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:b1:de:b3:fc:83:66:71:bf:2c:1c:f7:cd:7d:
                    89:0b:86:99:7b:0e:5a:d2:35:52:06:a0:ff:69:f5:
                    24:72:01:e3:53:54:7f:2b:7e:16:c8:82:53:b5:07:
                    70:97:c3:72:86:df:8b:5f:67:93:40:1c:3d:cd:0e:
                    90:3f:10:a9:28:7d:12:9d:5b:ec:47:f2:79:95:e9:
                    f7:01:53:42:5c:a8:ad:0e:5d:2f:04:6c:84:ab:25:
                    6f:1e:ae:74:e0:39:80:1d:13:1b:3f:be:7d:ed:c6:
                    20:c8:6f:54:45:b5:70:b8:66:24:2d:e2:8c:f2:e8:
                    a7:5e:04:fd:b2:76:83:c3:29:40:c8:07:76:c8:08:
                    e5:2b:48:a9:a7:d6:60:62:77:fc:f3:6d:1c:25:69:
                    87:c1:8b:d3:da:93:58:da:35:4e:56:14:ea:80:16:
                    38:39:c5:6f:fa:58:9a:6f:16:3d:a2:5e:95:10:ea:
                    53:a4:fa:54:0e:42:cb:2f:4c:5d:f0:35:1e:10:13:
                    82:6f:89:91:43:a6:d4:af:6a:70:ed:58:3b:5f:e5:
                    0b:a4:19:f2:c8:f2:cd:91:0d:8a:ce:35:db:19:e9:
                    07:03:0a:21:e5:fe:ce:6d:70:60:1a:53:d3:81:3d:
                    43:0d:8e:04:4e:b7:42:53:fa:38:5d:b6:53:59:f9:
                    d2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:42:70:E5:A8:60:D7:30:24:91:2F:D1:FD:F5:72:25:1B:8B:17:02
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/mEJw5ahg1zAkkS_R_fVyJRuLFwI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  27.34.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:49:16:f1:0f:85:c7:f7:42:a7:ad:a2:80:d6:c2:e9:06:23:
         80:40:17:95:74:11:51:25:26:fc:9c:6c:f0:e9:81:0e:87:f0:
         1e:89:75:86:87:c2:1a:fe:4a:36:ff:c7:13:a8:35:2f:98:fb:
         42:6c:8c:a8:d4:a8:1e:1d:e4:74:09:97:cd:3e:13:6a:75:f9:
         97:44:b3:47:d7:f4:06:27:cd:d9:c1:c6:82:67:f1:2e:d2:48:
         a6:ec:a4:0c:16:10:5b:ec:fd:fc:3a:06:fa:da:ec:b7:5d:99:
         0c:a9:3b:55:07:dc:1d:8b:44:36:46:5b:94:a6:1c:24:67:80:
         54:13:79:b0:7d:ec:6b:1d:a0:0a:5b:58:27:8c:76:52:8e:d8:
         c8:79:d5:7d:6a:f6:64:b2:05:cf:ca:8c:04:24:3e:47:2e:30:
         2c:ef:ec:06:e2:ac:6e:e8:44:54:e3:3e:ce:24:ab:a5:9d:64:
         77:9f:df:ea:7a:86:6f:49:f1:95:9a:ce:e7:5d:8b:d0:fe:e9:
         88:71:9c:a4:bd:b3:26:a0:8f:68:b2:f1:05:e0:ad:3f:5e:59:
         59:9f:72:94:0b:9a:7f:2a:41:ab:d3:ee:83:a1:d9:15:ec:b9:
         2f:cb:89:75:84:23:7f:69:6e:b4:09:a4:86:29:2a:18:4d:c5:
         06:e4:74:f5
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Jun 28 05:28:45 2024 by rpki-client on console-ams.rpki-client.org