Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/9cEgGqQN_XXrPBafTidHxAOTUck.roa
File:                     9cEgGqQN_XXrPBafTidHxAOTUck.roa (raw, json)
Hash identifier:          LxbOZWR5wVRn+5bn/pxG12w2W09oHEF9yrcY7xoZ0OQ=
Subject key identifier:   F5:C1:20:1A:A4:0D:FD:75:EB:3C:16:9F:4E:27:47:C4:03:93:51:C9
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       5E
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/9cEgGqQN_XXrPBafTidHxAOTUck.roa
Signing time:             Mon 01 Jul 2024 06:13:21 +0000
ROA not before:           Mon 01 Jul 2024 06:13:21 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38631
IP address blocks:        119.235.235.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 06:13:21 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F5C1201AA40DFD75EB3C169F4E2747C4039351C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f9:47:6f:8e:6a:2e:22:51:ba:60:1f:83:f0:b2:
                    f8:9d:5d:71:7c:7b:26:94:6b:98:b4:99:ca:de:bd:
                    a7:e3:a5:63:93:03:b2:06:63:c5:25:82:60:06:3f:
                    26:2e:61:9a:56:1d:78:02:ab:d0:d9:25:f0:2b:e8:
                    cf:52:3b:54:ba:39:65:10:0b:47:6c:e7:5c:72:0a:
                    ff:5f:8a:55:76:74:3d:4e:9d:72:37:54:cc:66:0a:
                    35:f8:0b:ca:e2:f2:a7:92:8a:24:17:ad:e0:c4:40:
                    8c:1e:5c:4b:3c:65:c2:0a:f8:09:e6:0f:1c:fd:97:
                    fb:99:87:5b:19:30:51:9d:92:95:ce:a0:a8:6c:b7:
                    41:22:2b:d7:d0:fe:7f:9b:60:e7:cf:27:a4:65:e4:
                    e9:03:22:7f:30:3f:5b:ad:8e:18:11:93:35:da:4c:
                    be:37:9c:74:20:d4:42:3a:55:4f:97:01:6f:5d:d8:
                    d3:b1:8a:b0:8e:25:fc:ee:f8:d3:a0:35:8d:d6:bc:
                    ea:64:30:b1:01:53:b1:02:5e:cd:bd:72:b3:41:9b:
                    b5:ce:84:59:1a:48:44:00:9d:09:a3:d8:f9:b0:ae:
                    72:30:a5:a2:2b:2f:e3:ba:bc:f3:e8:f2:49:e0:12:
                    75:58:88:6a:b5:6a:2a:c8:ff:29:7a:6a:1a:86:10:
                    33:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C1:20:1A:A4:0D:FD:75:EB:3C:16:9F:4E:27:47:C4:03:93:51:C9
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/9cEgGqQN_XXrPBafTidHxAOTUck.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.235.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:f5:56:53:80:6a:04:2c:b9:be:77:89:af:bc:4c:96:69:a8:
         16:55:4f:16:c2:04:f5:3a:c8:b8:52:d9:2a:90:80:fb:69:73:
         99:1f:b1:4d:fd:90:48:b2:79:8d:24:62:b4:a1:14:08:c3:88:
         34:cb:30:ef:f5:9a:e9:ff:06:9b:21:cf:5d:37:ef:35:bb:ca:
         17:b1:2a:72:1f:9d:12:e9:35:16:c2:38:f8:97:d1:b4:a5:98:
         a5:ee:29:0b:7d:05:92:0a:c2:60:f7:51:9d:25:9a:26:9c:17:
         86:6d:1f:70:88:4f:4c:bc:65:94:6f:bc:99:82:26:49:a6:eb:
         8d:4d:85:0b:13:57:f6:15:54:fa:36:17:0b:dc:62:5b:09:04:
         02:2b:d0:0a:6a:ad:13:db:c7:ae:d6:4e:7d:df:03:c0:84:41:
         15:fa:cf:dc:77:9c:f4:52:95:60:3c:79:3e:ee:a9:1d:32:12:
         4c:be:a6:5e:07:ca:01:5a:bc:21:00:8f:33:36:56:ca:ab:e5:
         a5:b3:12:bb:3c:cb:61:d2:85:4c:21:62:e7:1c:6f:3f:b9:ac:
         58:e1:5a:69:db:00:52:7a:6e:0f:62:7c:5f:88:7b:5c:02:ad:
         cf:42:4c:12:a4:6f:4b:2f:44:1b:ad:6a:c7:13:a1:c3:1e:b3:
         25:45:e0:18
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org