Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RT-6MMhnoG4GlGv1MqFFllmHgTU.roa
File:                     RT-6MMhnoG4GlGv1MqFFllmHgTU.roa (raw, json)
Hash identifier:          Z4D3giokM/J+l85Xnn7D7Rd0zaVAuwl/2d9MN/uFy5Y=
Subject key identifier:   45:3F:BA:30:C8:67:A0:6E:06:94:6B:F5:32:A1:45:96:59:87:81:35
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       70
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RT-6MMhnoG4GlGv1MqFFllmHgTU.roa
Signing time:             Thu 31 Oct 2024 01:31:12 +0000
ROA not before:           Thu 31 Oct 2024 01:31:12 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131898
IP address blocks:        219.100.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 112 (0x70)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Oct 31 01:31:12 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=453FBA30C867A06E06946BF532A1459659878135
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:4d:f7:4f:fd:d7:ea:cc:62:8b:1f:52:52:ee:
                    bd:f0:23:3a:85:6a:2f:4a:4a:8b:88:cf:55:21:7e:
                    be:82:ba:74:4f:9e:54:10:96:94:83:ef:7c:10:e5:
                    e6:61:e4:5e:0a:83:7b:6c:b2:a7:38:28:d2:3c:5b:
                    86:b3:67:b8:39:7c:c0:82:36:75:89:66:ed:7a:61:
                    35:fa:16:07:89:40:cb:ab:f6:e5:90:db:df:34:55:
                    41:b7:a6:14:13:49:c7:22:02:13:b7:84:2f:be:be:
                    b2:7a:54:1b:71:b0:b9:83:fa:8e:7e:12:af:eb:2f:
                    06:64:4d:3d:6b:06:e5:4b:b5:8e:db:b8:b1:95:f0:
                    7a:dc:b5:f7:02:3e:c3:2c:12:c3:40:20:c4:f8:2f:
                    17:a0:a6:dd:96:91:6e:3a:78:0c:60:ac:b4:9c:42:
                    fe:4a:d8:68:88:ea:c8:de:7e:45:cd:d7:0d:c2:8e:
                    1c:d8:e8:1a:a3:3c:06:b4:ee:e3:9d:8e:5b:90:1a:
                    c0:9c:c5:4d:68:6e:ba:6b:df:07:0c:61:16:0f:18:
                    da:02:2f:9e:fa:e7:02:50:5a:22:a4:05:55:93:a8:
                    84:31:a9:2c:a1:64:52:3a:9a:41:91:87:63:7b:db:
                    06:c4:38:bf:ac:37:15:36:b8:77:49:6a:73:2d:2c:
                    26:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:3F:BA:30:C8:67:A0:6E:06:94:6B:F5:32:A1:45:96:59:87:81:35
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/RT-6MMhnoG4GlGv1MqFFllmHgTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         9e:c5:9f:31:5d:76:e7:f1:97:8f:57:5a:8d:a6:8f:7c:3b:96:
         7b:aa:00:1c:cf:51:fc:41:fe:92:2a:f1:15:d9:60:98:05:ef:
         7b:e0:89:94:39:93:c7:5d:a1:0e:b7:10:ce:88:9e:8b:9f:0a:
         0b:6c:64:8e:27:5a:0d:80:25:94:af:af:25:9e:48:6f:0c:43:
         cd:38:83:53:79:e2:d2:e6:08:46:c3:23:49:ff:c0:bf:42:39:
         5d:3c:3b:55:1d:24:43:bb:03:b3:cc:83:43:1d:0a:3f:00:17:
         29:66:8c:7c:41:07:1d:a9:85:74:ef:b0:71:e8:eb:c5:ca:0c:
         84:c4:bc:10:1f:de:31:fe:7b:2b:7f:f7:a4:78:43:67:8b:c6:
         f3:fa:2e:d7:15:4e:e7:e9:92:ae:99:c2:85:02:7a:13:2b:b2:
         ff:89:de:1d:bb:91:82:46:38:36:42:04:8c:a7:67:4a:ab:ee:
         4c:41:f4:57:75:6f:9f:5d:b7:9c:65:db:e2:95:e6:da:ea:79:
         5d:7f:cd:8b:08:a8:22:3a:fc:ce:00:ac:bf:60:46:11:33:b1:
         f4:ff:fc:24:82:0f:ef:c2:9f:61:82:bc:4e:c4:90:53:5f:5e:
         6b:84:fb:d5:17:ea:15:55:98:c7:f0:9e:bb:23:00:72:bd:9d:
         12:19:af:a4
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org