Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/man3aY1KqMij43PcXLf2oG5EaO0.roa
File:                     man3aY1KqMij43PcXLf2oG5EaO0.roa (raw, json)
Hash identifier:          2qQHVIUEwkwvGaOR4Fo/0cO/bFfjg9MRC9pVQQZbdGI=
Subject key identifier:   99:A9:F7:69:8D:4A:A8:C8:A3:E3:73:DC:5C:B7:F6:A0:6E:44:68:ED
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       4A
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/man3aY1KqMij43PcXLf2oG5EaO0.roa
Signing time:             Fri 01 Dec 2023 01:30:35 +0000
ROA not before:           Fri 01 Dec 2023 01:30:35 +0000
ROA not after:            Thu 14 Nov 2024 01:30:03 +0000
asID:                     131898
IP address blocks:        219.100.146.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 07 Jul 2024 14:59:13 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 74 (0x4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Dec  1 01:30:35 2023 GMT
            Not After : Nov 14 01:30:03 2024 GMT
        Subject: CN=99A9F7698D4AA8C8A3E373DC5CB7F6A06E4468ED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:19:95:41:d8:80:2d:31:0b:e6:06:56:22:6f:
                    01:58:69:54:d9:d8:08:b4:08:75:59:c1:d8:32:25:
                    3f:e5:ab:95:cc:81:1d:c0:a9:c0:ba:82:45:07:1c:
                    4b:7e:af:11:de:67:f8:52:95:b1:58:48:8c:c9:70:
                    dc:fd:e6:3b:f1:66:2b:89:cc:ae:99:53:86:dc:00:
                    90:7b:c6:92:24:05:58:88:28:2d:6a:dc:95:5a:2a:
                    79:f3:a9:fa:31:12:c1:f6:57:9f:5b:03:55:77:3e:
                    36:43:37:a8:1f:60:bb:f5:2f:e5:75:3e:d4:20:b6:
                    39:37:37:a3:69:3a:2a:0b:35:df:43:b1:4f:d0:9d:
                    a5:bc:39:e3:dd:09:d2:45:a7:b0:f5:a8:34:b5:4e:
                    11:60:49:19:7c:b6:4d:21:d4:73:09:70:8a:57:40:
                    de:2f:8e:a2:0b:62:e8:39:bd:e2:23:4e:72:5b:31:
                    77:9c:4c:a6:36:99:72:bd:09:9a:d8:99:3a:12:be:
                    e0:da:76:fa:7a:cd:b8:18:b7:d5:80:1a:dc:0b:72:
                    0a:52:fd:ab:b7:65:e0:01:85:b0:87:4f:e6:6f:7b:
                    6b:ec:cb:18:5a:47:1e:d0:b0:3a:05:1d:a7:14:8c:
                    07:9f:92:10:c4:bd:4e:1f:ad:a7:dd:e3:d7:c4:88:
                    33:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:A9:F7:69:8D:4A:A8:C8:A3:E3:73:DC:5C:B7:F6:A0:6E:44:68:ED
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/man3aY1KqMij43PcXLf2oG5EaO0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.146.0/24

    Signature Algorithm: sha256WithRSAEncryption
         68:5f:b3:dd:5f:75:20:2e:5d:e0:d4:b9:09:06:be:7f:eb:b3:
         6c:4e:80:dc:85:f9:ae:fd:0a:af:e9:6c:41:c7:71:e3:c3:0f:
         f4:eb:27:84:27:f6:30:6d:60:9a:bd:76:f1:36:c8:f9:c7:2b:
         62:1c:9d:1d:75:48:9f:9e:b9:12:e9:98:d9:ef:69:b2:52:e5:
         6b:d1:24:82:68:6c:82:0f:ba:82:4c:f5:1e:74:e4:b9:f9:43:
         3d:3d:14:35:6f:d5:b2:5e:03:56:70:d8:7a:27:e4:06:04:9b:
         f3:df:11:93:e2:2d:e2:45:4d:57:84:6f:bc:8d:8d:ca:5f:d8:
         3b:b4:87:8a:16:42:16:44:f7:97:2e:8c:3f:73:c3:7e:6c:da:
         0c:12:e3:c0:62:c3:b7:e1:ae:45:26:93:3f:8e:fc:b9:fa:4b:
         cd:4a:bb:22:2a:d6:86:63:36:11:67:0f:10:4d:7e:14:3a:e9:
         03:07:3f:39:99:34:cf:77:30:12:52:f3:49:1c:70:44:9f:82:
         17:ca:a6:28:c5:32:0b:1a:f3:02:9f:2b:6a:c3:f3:51:0f:77:
         87:50:47:23:14:52:bf:47:14:36:6b:f4:90:cb:cc:81:40:14:
         19:a1:29:5e:b2:af:41:7a:03:67:8c:64:c5:fc:88:1c:46:b5:
         4d:d0:b8:60
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Jun 30 15:56:01 2024 by rpki-client on console-ams.rpki-client.org