Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pN_d0kM9PWcNO2ZfoSCBewR32fk.roa
File:                     pN_d0kM9PWcNO2ZfoSCBewR32fk.roa (raw, json)
Hash identifier:          xsOijfUddluxtB8e9C5lDBAYvGzA4bGMLbyZpKCAPcY=
Subject key identifier:   A4:DF:DD:D2:43:3D:3D:67:0D:3B:66:5F:A1:20:81:7B:04:77:D9:F9
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       23
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pN_d0kM9PWcNO2ZfoSCBewR32fk.roa
Signing time:             Tue 26 Sep 2023 06:43:01 +0000
ROA not before:           Tue 26 Sep 2023 06:43:01 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     17941
IP address blocks:        110.232.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep 26 06:43:01 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=A4DFDDD2433D3D670D3B665FA120817B0477D9F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:10:46:e2:2e:75:23:3d:19:a3:7d:fa:0a:24:
                    0d:f1:a0:54:76:e2:97:43:5a:34:04:d5:0f:53:f1:
                    6b:d0:2e:0f:e7:8e:00:29:96:4b:38:5f:54:76:59:
                    c3:fd:10:33:52:9f:14:d1:9d:71:81:49:72:d8:36:
                    85:2c:33:55:00:24:2f:18:a7:51:41:22:8f:4c:69:
                    26:7f:be:ac:23:61:e0:36:aa:f9:83:fb:a8:21:d1:
                    81:82:65:2b:aa:0c:ef:d9:1d:92:b8:88:40:8e:75:
                    61:6e:4f:81:e0:90:b7:67:32:c0:0d:34:5c:34:1b:
                    42:5d:af:9d:29:02:6c:c9:bd:8e:c5:ef:08:55:31:
                    47:17:15:48:7b:13:59:35:06:36:9d:82:1a:98:49:
                    ea:a8:ea:78:83:cf:d3:03:dc:8d:e6:72:59:71:ef:
                    5e:0c:2a:5c:a0:8b:47:d5:16:0a:ca:51:99:07:75:
                    57:6a:1c:11:3d:4d:94:4e:dc:03:d2:fb:a8:ca:9a:
                    4e:43:c8:84:f4:0c:e9:69:46:73:8d:f7:28:9a:c9:
                    c7:02:e5:22:32:97:76:a1:c4:ac:d7:e2:7e:62:1c:
                    ed:56:1d:04:e2:9a:8d:ef:c9:1d:3d:c0:56:8e:b9:
                    c3:3d:c5:dc:93:f0:dd:31:56:db:58:8b:63:41:3e:
                    5a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:DF:DD:D2:43:3D:3D:67:0D:3B:66:5F:A1:20:81:7B:04:77:D9:F9
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/pN_d0kM9PWcNO2ZfoSCBewR32fk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:a3:04:7e:97:4c:41:be:2b:c1:a7:55:7c:c8:bf:dc:f3:72:
         ed:7a:ae:c4:86:0d:49:be:0e:3d:42:5b:c2:27:9d:f9:10:31:
         1a:7a:81:3e:c8:2a:7b:bb:39:b2:75:dc:1c:1a:8a:96:0b:63:
         fb:1d:70:24:8e:a4:2e:8e:b9:d6:84:cb:dd:c4:37:5e:70:df:
         ff:55:e4:d5:0c:62:c7:59:0e:c6:3c:a9:87:e4:00:a2:29:7d:
         78:0e:44:d1:1d:08:6b:29:d4:10:9e:5a:1c:8d:88:2a:12:0b:
         82:e4:96:09:4c:e3:a6:58:37:09:a4:bd:c5:8a:ac:b5:b6:a5:
         9e:e1:72:ad:66:91:69:16:9d:95:eb:b7:3d:66:bb:c5:3f:53:
         9f:08:c8:51:b3:ad:09:90:22:55:1f:81:9a:33:78:e8:c1:48:
         d5:b0:4c:97:80:60:05:a7:f7:a5:8e:c8:3b:8c:72:bb:20:b5:
         0e:ba:1a:d0:c3:52:0e:b4:60:c1:d7:b0:e0:ac:4b:e0:6b:35:
         77:a6:72:31:46:74:27:c3:6d:c4:d0:a6:cd:99:bc:dd:46:c2:
         1b:fe:85:e9:34:e7:43:d0:28:66:29:20:77:b3:3a:c8:54:60:
         ee:d8:cb:6d:c6:c7:c1:c6:c3:6b:dc:17:37:22:2b:a3:ec:da:
         43:69:81:10
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Jun 1 13:38:43 2024 by rpki-client on console-fra.rpki-client.org