Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20062/9q1Krn6Duc6eMmHfQzXzg26ONhM.roa
File:                     9q1Krn6Duc6eMmHfQzXzg26ONhM.roa (raw, json)
Hash identifier:          Q+eQ7K4Pr50dVSVb+sZF0FJs9uCoX3jJbyx0ZACVIPU=
Subject key identifier:   F6:AD:4A:AE:7E:83:B9:CE:9E:32:61:DF:43:35:F3:83:6E:8E:36:13
Certificate issuer:       /CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
Certificate serial:       26
Authority key identifier: 93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/9q1Krn6Duc6eMmHfQzXzg26ONhM.roa
Signing time:             Thu 29 Feb 2024 01:34:05 +0000
ROA not before:           Thu 29 Feb 2024 01:34:05 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     131929
IP address blocks:        219.100.248.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 38 (0x26)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=938067C25BCA7D1385BD36C482858F830B5A6E3A
        Validity
            Not Before: Feb 29 01:34:05 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F6AD4AAE7E83B9CE9E3261DF4335F3836E8E3613
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a3:97:d8:22:ec:50:6f:e8:5c:2f:3c:e4:8e:
                    e4:4d:02:92:a6:cf:95:4c:76:9d:bd:fc:37:90:17:
                    2c:0d:9f:ec:7f:45:70:fa:d7:62:2f:e5:9e:c6:a9:
                    ba:75:c1:60:24:a9:5d:45:d9:1f:50:ce:36:25:68:
                    5a:c8:5d:84:ea:f8:17:9c:fe:83:51:e6:56:0c:ed:
                    93:4c:03:34:55:43:8c:d5:72:d7:22:e3:60:54:f8:
                    db:04:a7:8d:58:e9:05:54:11:3a:11:f9:3d:b7:19:
                    70:6f:a2:82:4d:38:53:8a:d9:e6:5f:b9:ee:d4:aa:
                    5c:06:78:8e:11:97:8f:31:d6:dd:53:27:91:82:06:
                    33:cc:7e:74:e0:cc:f0:25:c0:ae:51:ab:79:0e:26:
                    93:5b:12:b7:17:01:ca:07:a1:cf:ee:42:c6:09:d4:
                    04:4a:32:11:0d:c2:89:3d:54:18:d5:3e:e8:c5:c4:
                    c9:3c:26:44:36:9f:bc:01:74:4a:a0:23:27:7e:ff:
                    e4:b4:fc:3a:09:88:01:fd:ba:44:7b:be:e6:b6:1d:
                    d8:57:0e:9d:b8:6c:4c:07:bf:e1:9e:4e:b7:6e:0f:
                    1e:93:68:17:17:57:af:f4:ef:8a:7c:ca:0b:b1:3f:
                    d8:76:97:a9:f5:94:30:9d:f8:f1:9c:3d:89:56:9f:
                    2d:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AD:4A:AE:7E:83:B9:CE:9E:32:61:DF:43:35:F3:83:6E:8E:36:13
            X509v3 Authority Key Identifier:
                keyid:93:80:67:C2:5B:CA:7D:13:85:BD:36:C4:82:85:8F:83:0B:5A:6E:3A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/k4BnwlvKfROFvTbEgoWPgwtabjo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k4BnwlvKfROFvTbEgoWPgwtabjo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20062/9q1Krn6Duc6eMmHfQzXzg26ONhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.248.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1f:7f:80:71:63:ba:0b:57:67:42:92:80:a5:3d:bb:ee:5d:15:
         6e:b4:3a:42:4a:d4:da:09:08:4d:cc:48:70:01:b4:01:85:c4:
         c8:2a:7d:d2:ad:8e:07:f0:a4:ae:c0:c7:73:b6:02:0e:ab:e9:
         d5:87:6c:a3:1a:64:bc:d2:a7:69:a8:1c:f8:d5:89:8b:e0:86:
         56:ba:13:fd:27:0c:0f:11:e1:9e:1c:2d:d3:6f:dd:3e:7c:09:
         ae:7b:14:f6:cd:2d:48:e0:86:f9:1c:0d:20:23:80:dc:bf:32:
         f2:c5:0f:e0:72:21:d9:88:f1:fd:25:e3:f5:d9:2f:d9:26:df:
         48:f6:46:0b:af:5d:5f:ab:45:df:86:12:d5:a2:e3:80:8d:3d:
         b3:82:aa:c1:e8:b2:09:f2:38:93:7c:24:9f:8e:9f:14:7d:1c:
         bb:ac:35:eb:9b:e6:99:ee:06:63:08:e7:f5:e7:df:12:47:ec:
         fe:83:f5:a1:69:15:c3:7d:fe:f9:c5:fa:10:22:01:0a:5f:da:
         e5:b9:1e:5a:e2:40:49:48:7d:63:36:d7:a6:44:eb:61:6b:ee:
         d3:44:f4:ed:ac:18:7c:3c:52:ed:23:aa:aa:47:95:2b:79:b2:
         8d:0f:1f:8a:9b:b7:0a:18:c0:5d:e6:ad:eb:f0:89:72:7b:aa:
         d3:e7:24:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:32 2024 by rpki-client on console-ams.rpki-client.org