Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa
File:                     0chVcTnmyco4FOO0qB37LYQOuKE.roa (raw, json)
Hash identifier:          HsNaQvNeL0WJlQONaElxnk54GsbYTwSfMb75lpcg8k8=
Subject key identifier:   D1:C8:55:71:39:E6:C9:CA:38:14:E3:B4:A8:1D:FB:2D:84:0E:B8:A1
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       82
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa
Signing time:             Mon 01 Jan 2024 01:28:24 +0000
ROA not before:           Mon 01 Jan 2024 01:28:24 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        124.40.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 02:07:53 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 130 (0x82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:24 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=D1C8557139E6C9CA3814E3B4A81DFB2D840EB8A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:7a:db:a8:72:71:f6:b6:b3:5e:b3:b9:ce:4f:
                    ec:e1:9f:4a:83:1d:d0:b1:4e:a1:bd:4a:a2:6c:46:
                    8d:be:72:c0:17:01:8f:96:93:b0:eb:12:0c:95:27:
                    2d:ea:8b:1d:45:00:2d:09:96:fa:03:f4:0d:e3:95:
                    9a:0f:33:7b:53:ee:1d:5c:ac:a6:b8:2a:64:21:e5:
                    1e:15:e9:cb:d5:8a:dc:20:73:35:8d:a7:24:4d:7d:
                    ce:da:9f:12:c9:f6:22:34:5a:3f:bd:19:f8:4e:9d:
                    87:1a:09:bf:77:f0:f8:c5:7d:ac:ae:02:e3:79:0c:
                    97:3d:18:1c:ca:34:d6:41:db:b1:f8:50:2f:c3:90:
                    ff:46:d3:22:2f:0b:dd:d1:bf:63:99:5f:63:55:3e:
                    70:be:0f:03:8e:3a:fb:55:96:7d:3a:67:91:85:38:
                    d8:62:91:cb:e0:e1:b7:55:a1:d9:90:cf:f3:37:3f:
                    8c:cd:c6:e9:57:fb:3c:9a:49:a2:b2:75:14:6d:6e:
                    1f:2b:c4:48:65:70:40:c9:25:67:c3:af:34:9a:13:
                    64:f1:c7:22:1e:98:61:a6:15:40:e6:86:c0:3d:db:
                    d7:1f:8e:13:49:1d:08:fc:0c:08:65:df:a5:1b:cb:
                    c2:0f:2f:d4:be:33:71:c7:bf:b8:0d:16:9b:31:40:
                    eb:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:C8:55:71:39:E6:C9:CA:38:14:E3:B4:A8:1D:FB:2D:84:0E:B8:A1
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/0chVcTnmyco4FOO0qB37LYQOuKE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         b7:46:90:31:a5:6e:01:24:6f:c7:e5:45:2d:ac:87:46:42:de:
         86:7c:c2:ea:ce:d2:77:cd:b7:13:5f:2a:69:1c:9a:df:74:90:
         fb:79:47:d6:8f:bb:46:f2:29:40:07:56:60:16:58:b1:ea:e9:
         63:e2:91:ae:64:01:c1:f4:7d:5b:4b:b5:65:8f:39:60:b1:72:
         4c:da:53:16:43:6e:c7:0d:49:c7:d8:41:5a:55:5a:fa:b7:71:
         a8:eb:f4:e3:82:78:ac:db:6a:5c:47:ba:60:ac:8a:b8:be:ba:
         f5:73:60:c4:80:a8:a8:d7:8a:7e:37:fd:9a:2e:14:c0:97:cd:
         5a:c6:f2:de:4a:65:b8:ec:13:4a:b0:59:a5:18:12:0a:85:12:
         46:05:70:de:76:30:84:b1:19:92:e0:42:73:3a:db:4b:12:0e:
         cd:16:5a:17:88:c6:b5:91:dd:7c:b1:25:7e:b7:32:74:7f:6e:
         12:7e:57:25:ad:90:87:01:a5:49:01:7d:a8:ee:3b:3d:8b:e0:
         0c:35:d9:e9:73:b0:85:6f:11:4f:c5:c1:e1:09:c1:b7:4f:a8:
         20:d8:e0:1a:cd:9b:47:ba:c0:3d:33:5e:e8:8a:32:b8:cc:ad:
         22:7b:0f:12:54:2d:7c:4a:bb:83:a2:1d:df:e5:c7:b9:4c:f1:
         48:4c:b3:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 10 09:56:02 2024 by rpki-client on console-ams.rpki-client.org