Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/FcLDIRp-dTikHENpKwzJnJu1tvQ.roa
File:                     FcLDIRp-dTikHENpKwzJnJu1tvQ.roa (raw, json)
Hash identifier:          hwbnriLqKuySS1n0KAjmdP9eYEyLkHPRUnWZGmb73aM=
Subject key identifier:   15:C2:C3:21:1A:7E:75:38:A4:1C:43:69:2B:0C:C9:9C:9B:B5:B6:F4
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       77
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/FcLDIRp-dTikHENpKwzJnJu1tvQ.roa
Signing time:             Mon 01 Jan 2024 01:28:18 +0000
ROA not before:           Mon 01 Jan 2024 01:28:18 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        219.109.240.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 119 (0x77)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:18 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=15C2C3211A7E7538A41C43692B0CC99C9BB5B6F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:47:ff:c3:28:b5:9c:79:27:46:76:f0:b6:64:
                    f5:bd:df:bb:22:46:e6:68:ed:37:68:00:b8:f6:af:
                    bc:e6:50:bb:99:e4:c2:9d:75:dd:ff:5e:2d:55:17:
                    61:0e:3a:5b:f0:b3:56:e9:a5:a4:7d:88:32:41:f2:
                    ea:1c:de:75:d3:a0:76:1f:74:51:0c:a2:14:65:5d:
                    91:bf:d5:81:94:ae:90:30:c0:f7:d8:70:97:f7:cd:
                    ba:67:94:87:78:83:41:02:22:6c:11:13:da:f5:98:
                    ee:87:fc:a2:d0:12:4c:5e:5e:88:fa:6e:b6:dc:f2:
                    1f:9b:a1:c0:cf:89:5b:5c:e3:17:bc:a6:9b:97:ae:
                    e3:10:f9:6a:b9:c2:e1:b6:ce:5d:37:e1:2d:da:03:
                    74:e8:2c:16:5c:7a:ae:fb:c7:06:e8:cf:de:4a:8b:
                    f4:73:23:79:74:a5:81:a7:6d:99:ae:b8:08:40:e7:
                    c1:b6:ac:06:34:2b:2b:06:40:32:59:18:55:33:e3:
                    3d:78:d5:82:56:63:05:5f:2f:92:e4:1e:d6:2d:11:
                    f2:ec:2e:12:ce:b0:81:51:b4:e3:95:11:48:21:ea:
                    74:5a:1f:1e:46:e5:7a:8a:e7:94:94:cc:ed:60:d8:
                    b1:84:1a:8c:a7:f2:4b:91:c7:06:d8:76:f4:d1:bd:
                    08:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:C2:C3:21:1A:7E:75:38:A4:1C:43:69:2B:0C:C9:9C:9B:B5:B6:F4
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/FcLDIRp-dTikHENpKwzJnJu1tvQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.240.0/20

    Signature Algorithm: sha256WithRSAEncryption
         7b:cd:e2:a8:27:77:af:3b:b1:90:cc:81:95:34:5d:ec:c8:b8:
         f9:32:8a:09:74:8c:80:77:d5:42:d1:20:cf:9e:93:64:5b:8c:
         f4:28:6a:28:bd:cc:d2:75:17:8a:fb:15:db:fc:43:e5:12:53:
         65:f8:6b:b7:f3:e6:80:74:33:f8:a0:20:79:73:d7:66:13:c8:
         fa:2d:37:c1:f4:1e:ea:30:0a:dc:36:85:76:41:da:2a:98:27:
         11:f2:4b:14:cc:a9:b4:56:15:b1:29:df:67:3a:d7:af:73:43:
         39:17:20:97:89:33:15:a4:c8:36:92:de:76:be:43:cb:93:8e:
         4c:a6:11:41:81:2a:49:ff:7d:dd:df:c4:3a:67:ff:f1:94:9e:
         75:8c:12:ee:1f:d7:b4:23:86:f5:11:72:0f:9b:67:e6:af:e4:
         62:21:4e:0c:69:18:8b:5d:94:16:a8:10:3b:8e:84:f9:45:28:
         78:54:fa:39:3f:5c:20:d5:74:b0:b5:90:ad:d8:fe:16:8f:07:
         ae:64:68:bd:f3:07:5a:46:b4:93:80:18:06:74:84:2f:68:d3:
         1b:be:63:d5:5f:03:2d:55:53:e3:63:de:ff:19:9c:6f:15:8d:
         84:00:73:b0:eb:71:72:ac:3f:99:6b:7f:3e:65:bd:15:58:30:
         4f:7d:2f:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:28 2024 by rpki-client on console-ams.rpki-client.org