Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20176/b9hyH7HBbyFtMT5K2UrxCTIQKGY.roa
File:                     b9hyH7HBbyFtMT5K2UrxCTIQKGY.roa (raw, json)
Hash identifier:          NHIW0JpQ3NVw+xW0Tp0PLIFBgykDp/MonxbcyvOc31A=
Subject key identifier:   6F:D8:72:1F:B1:C1:6F:21:6D:31:3E:4A:D9:4A:F1:09:32:10:28:66
Certificate issuer:       /CN=55D3F08EAFB5305007C1097824460E044922C94F
Certificate serial:       02
Authority key identifier: 55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/b9hyH7HBbyFtMT5K2UrxCTIQKGY.roa
Signing time:             Fri 16 Aug 2024 13:45:24 +0000
ROA not before:           Fri 16 Aug 2024 13:45:24 +0000
ROA not after:            Sat 16 Aug 2025 13:37:42 +0000
asID:                     63793
IP address blocks:        202.237.92.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55D3F08EAFB5305007C1097824460E044922C94F
        Validity
            Not Before: Aug 16 13:45:24 2024 GMT
            Not After : Aug 16 13:37:42 2025 GMT
        Subject: CN=6FD8721FB1C16F216D313E4AD94AF10932102866
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:72:52:25:e1:9d:bf:ae:a0:d7:ac:a7:b1:43:
                    bc:5a:a9:cd:ef:eb:9c:07:75:d9:05:61:e2:2b:eb:
                    a8:1b:7b:9c:b8:3b:17:b8:70:3f:f8:6a:68:ad:6e:
                    26:5c:1f:67:7b:c8:ef:d4:7e:13:5e:b1:4b:07:88:
                    1e:bf:06:d1:db:e9:6f:12:d2:82:b2:39:a0:e6:22:
                    41:bb:60:5f:88:6e:51:ec:8a:95:3d:ee:37:50:ad:
                    31:9d:d9:89:fd:3f:e2:be:36:1f:f5:40:48:67:39:
                    10:5d:5a:4b:0f:3d:00:88:0f:a1:49:af:1f:3f:cb:
                    68:eb:77:ba:7e:51:9c:c7:d2:17:2b:a2:59:63:40:
                    b4:ee:dc:94:c0:08:db:5a:4c:ac:19:d5:ea:39:5d:
                    ea:82:42:fb:83:06:de:f4:7f:20:6f:5c:79:aa:a8:
                    01:d4:9a:d1:b2:a3:8a:58:6e:82:58:57:7b:af:4b:
                    cd:63:e8:04:76:b5:42:7e:71:cf:66:5a:2e:0d:f2:
                    2d:ce:1d:1b:97:1a:4c:ef:09:3e:c3:ea:7e:a1:f8:
                    92:8f:b9:10:dd:63:93:d0:98:0c:c9:7c:39:13:c0:
                    cf:72:85:e2:cb:c6:26:c9:ba:a8:61:14:e1:5d:0a:
                    c3:10:01:fc:9d:c4:f0:f7:61:12:d4:1d:3f:21:fd:
                    60:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:D8:72:1F:B1:C1:6F:21:6D:31:3E:4A:D9:4A:F1:09:32:10:28:66
            X509v3 Authority Key Identifier:
                keyid:55:D3:F0:8E:AF:B5:30:50:07:C1:09:78:24:46:0E:04:49:22:C9:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/VdPwjq-1MFAHwQl4JEYOBEkiyU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VdPwjq-1MFAHwQl4JEYOBEkiyU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20176/b9hyH7HBbyFtMT5K2UrxCTIQKGY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.237.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         06:0c:77:ba:00:08:9c:83:5f:4e:4f:c5:62:f9:89:30:f7:0a:
         42:a1:17:9c:31:1c:7e:c6:e0:20:c6:28:1c:bc:75:f3:f2:81:
         2c:2f:d9:88:cc:40:17:a1:93:7e:b1:8d:c1:b5:33:3f:74:59:
         f5:5e:55:00:65:9a:40:c3:7a:20:d7:de:ef:58:d9:c0:c0:04:
         a7:4e:4b:97:62:a6:97:46:23:85:74:4e:bf:06:d9:d9:72:e9:
         c8:03:70:0c:a1:55:fc:c2:47:f6:0a:d9:8e:f6:e1:1d:15:51:
         00:aa:1d:de:7d:55:a9:df:63:06:39:8f:79:6d:39:96:34:00:
         c5:f1:c3:ba:92:7e:3a:3c:6f:ab:e8:f2:7f:5e:1f:ea:11:92:
         da:35:4f:39:ac:a0:96:77:05:8c:c0:f7:c8:3b:81:33:20:b7:
         4e:36:b9:10:1f:85:e2:4e:b5:fa:c3:f0:94:b6:0c:8b:27:83:
         f3:4e:ad:ec:d7:5d:a7:f5:c2:2b:23:14:9d:10:c8:40:0f:e4:
         50:cb:c5:f2:8e:91:cc:7b:e3:20:f4:db:11:d0:99:32:6a:cb:
         da:47:66:5e:07:92:6a:5f:05:c2:7d:eb:06:24:a1:af:4b:12:
         53:fc:98:0d:7a:7e:d4:a4:c7:a0:18:37:2c:be:95:0f:21:21:
         4b:7d:70:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org