Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20044/KsUr_8nqLWXuAsrqJbNJ6vgCjoI.roa
File:                     KsUr_8nqLWXuAsrqJbNJ6vgCjoI.roa (raw, json)
Hash identifier:          Lnc3peuIjEjA6jz4kWE6eAfV4TWvoXKWvh+tgNl3Z9w=
Subject key identifier:   2A:C5:2B:FF:C9:EA:2D:65:EE:02:CA:EA:25:B3:49:EA:F8:02:8E:82
Certificate issuer:       /CN=26F775BAC748E9582AC68A36AF57544FD74D8525
Certificate serial:       13
Authority key identifier: 26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/KsUr_8nqLWXuAsrqJbNJ6vgCjoI.roa
Signing time:             Tue 17 Sep 2024 01:08:57 +0000
ROA not before:           Tue 17 Sep 2024 01:08:57 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     63772
IP address blocks:        219.100.188.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 19 (0x13)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=26F775BAC748E9582AC68A36AF57544FD74D8525
        Validity
            Not Before: Sep 17 01:08:57 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=2AC52BFFC9EA2D65EE02CAEA25B349EAF8028E82
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:4b:eb:1d:45:92:1d:9f:6c:94:22:c6:8d:c4:
                    13:05:ab:1e:99:e8:70:37:47:32:9c:46:51:32:66:
                    73:16:59:09:6e:1a:52:a2:a0:b5:9e:f1:16:29:6c:
                    59:b6:cd:72:a3:37:de:ed:d3:be:84:ef:12:2f:49:
                    c2:57:e8:0b:38:a5:21:42:45:c0:7f:05:35:41:ef:
                    95:cc:af:e5:2a:bf:a8:46:ab:1c:e1:9c:ad:5f:89:
                    07:c9:e4:24:e3:9a:b9:9c:00:d1:29:8b:6c:bf:7f:
                    89:22:35:3f:79:45:0e:c8:49:dc:5c:5a:d9:b2:cd:
                    68:a6:4e:d2:24:df:42:f9:71:50:43:a7:7b:cd:69:
                    51:54:74:f4:34:63:09:0c:88:eb:f1:8c:77:07:80:
                    11:0b:8e:c5:e1:5c:7d:da:ec:cb:bf:d1:05:33:4b:
                    4b:57:59:c3:4b:03:e2:b2:de:45:c5:dc:17:a1:bc:
                    83:7d:c1:a2:43:9b:ad:22:ef:62:11:fa:16:5b:67:
                    44:1d:42:5f:20:aa:4c:b0:d3:b9:4c:1b:ec:17:90:
                    d8:2b:bd:ec:0c:d6:b3:02:f7:eb:b2:98:8d:3d:bb:
                    44:a8:38:f3:3b:c0:5d:7c:c8:dd:36:9f:30:17:42:
                    34:1d:ac:43:c8:07:44:0b:3b:c2:94:52:77:64:c1:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:C5:2B:FF:C9:EA:2D:65:EE:02:CA:EA:25:B3:49:EA:F8:02:8E:82
            X509v3 Authority Key Identifier:
                keyid:26:F7:75:BA:C7:48:E9:58:2A:C6:8A:36:AF:57:54:4F:D7:4D:85:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Jvd1usdI6Vgqxoo2r1dUT9dNhSU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20044/KsUr_8nqLWXuAsrqJbNJ6vgCjoI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.188.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:90:0d:14:92:fd:d5:fb:8c:00:a6:6c:07:e7:7b:fa:6a:
         91:1b:23:41:42:38:0b:fe:cf:66:18:07:06:f7:6a:02:dd:57:
         3c:85:02:d4:0e:33:48:6f:99:b8:7e:dc:f2:10:ad:e7:97:08:
         4a:4d:6e:6c:e7:96:33:5d:fe:e3:65:7f:1b:28:d9:4a:b1:9a:
         bd:15:a0:cd:53:c3:64:08:ff:df:c7:1a:07:d3:c4:a1:5c:44:
         08:27:bd:2d:4b:9a:79:49:82:6c:b3:cc:f7:26:df:44:8c:9d:
         b5:d7:33:2d:62:f1:16:92:52:b6:3a:2a:cf:88:b8:19:a0:de:
         33:32:1d:36:0e:8c:b2:7d:c3:1e:fb:20:79:c9:84:c9:8f:7f:
         ac:96:48:d9:13:c5:cd:72:18:ce:33:4d:0e:b2:d7:c6:ce:19:
         53:9e:c4:ec:30:50:93:db:06:eb:ba:81:4a:5a:2a:c9:4f:af:
         5b:4d:b4:93:8c:79:6f:20:db:60:7c:ca:ee:1c:d9:4f:23:28:
         e1:57:fa:a1:df:48:24:79:61:41:57:11:32:ef:63:40:f8:3c:
         5b:97:d9:1b:9c:63:ae:04:24:04:c8:df:55:68:d5:30:f1:d9:
         ee:99:cf:97:27:4d:3a:dc:48:51:80:42:fc:57:70:c3:ea:7d:
         e8:d3:16:d4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:28 2024 by rpki-client on console-ams.rpki-client.org