Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/Kxngo8QDvSaeo52m2gwOh-P0m_4.roa
File:                     Kxngo8QDvSaeo52m2gwOh-P0m_4.roa (raw, json)
Hash identifier:          wjajpBXziVHFsb3iFMUUn3guhzPbqNKtFvw8pyd+V5g=
Subject key identifier:   2B:19:E0:A3:C4:03:BD:26:9E:A3:9D:A6:DA:0C:0E:87:E3:F4:9B:FE
Certificate issuer:       /CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
Certificate serial:       3C
Authority key identifier: 18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Kxngo8QDvSaeo52m2gwOh-P0m_4.roa
Signing time:             Thu 31 Oct 2024 01:33:27 +0000
ROA not before:           Thu 31 Oct 2024 01:33:27 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     9351
IP address blocks:        193.117.64.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:01:52 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 60 (0x3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1850341C0E586CF47547FD06E54EDBE6902A0E24
        Validity
            Not Before: Oct 31 01:33:27 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=2B19E0A3C403BD269EA39DA6DA0C0E87E3F49BFE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:9f:9b:35:da:ac:40:f9:52:cc:bb:38:20:fa:
                    5a:a4:4f:e5:0e:f5:70:d1:f3:6f:e8:26:3d:b4:55:
                    98:f7:f2:1d:71:31:42:06:06:bd:e4:a0:15:66:9e:
                    22:d0:1d:38:9b:1e:4a:8b:cb:88:fd:0a:4f:5e:98:
                    dd:a7:d0:7c:b3:9b:ff:ee:07:b9:d6:7b:52:d1:05:
                    ad:a3:7d:83:28:2a:f3:ff:da:1c:cb:4b:a8:a4:57:
                    db:79:91:ab:bb:37:1b:f3:1d:10:44:8e:c4:11:7a:
                    9e:43:56:5e:b2:ea:28:51:49:79:da:17:09:6f:9c:
                    c5:0b:a0:14:d8:78:23:98:b5:e8:d2:7a:c1:5f:d3:
                    cd:a2:37:b4:f7:1e:44:9e:ac:16:61:55:f5:e8:ed:
                    8b:9c:e2:6b:60:6b:d9:f9:4a:63:7f:fe:38:6c:44:
                    c0:69:53:a6:0a:8c:f2:76:0c:f7:2e:17:bc:72:8a:
                    80:d1:5e:80:dc:83:84:3b:10:77:fe:a8:c4:ff:04:
                    a2:99:9f:34:4b:9f:3e:9b:be:b4:9e:9b:bd:51:c5:
                    14:f1:34:fa:17:7e:54:3a:b9:e4:6d:ba:68:df:10:
                    01:ce:a7:71:93:9b:23:65:6c:99:ba:da:51:90:4e:
                    d1:9d:eb:20:5a:0e:2c:0c:aa:34:42:0b:b4:a6:20:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:19:E0:A3:C4:03:BD:26:9E:A3:9D:A6:DA:0C:0E:87:E3:F4:9B:FE
            X509v3 Authority Key Identifier:
                keyid:18:50:34:1C:0E:58:6C:F4:75:47:FD:06:E5:4E:DB:E6:90:2A:0E:24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFA0HA5YbPR1R_0G5U7b5pAqDiQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/Kxngo8QDvSaeo52m2gwOh-P0m_4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  193.117.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         69:56:0b:87:0d:08:d5:c3:ee:b7:ab:ac:79:d2:03:e6:1c:7f:
         d3:95:dc:c8:35:16:b5:15:59:0b:37:f4:b3:56:c7:1f:2d:a8:
         ec:48:f2:a1:57:61:a9:87:e2:d5:36:0d:de:71:50:8c:62:73:
         1d:2a:7d:4c:67:0c:3d:b2:6b:3b:6d:79:8e:7d:4d:ce:56:37:
         0f:cc:65:c2:cc:fb:42:e3:b8:b3:0d:52:70:43:e6:0b:24:ff:
         5d:e7:7d:60:f5:c1:f6:62:e9:9e:3a:c7:0a:9c:e2:a5:b5:3b:
         fa:1e:25:53:53:33:11:52:53:36:e0:6a:1e:af:e5:0b:b1:2d:
         ab:78:88:eb:b5:09:9c:79:0d:25:bd:8f:cc:3f:a0:06:24:78:
         53:27:08:92:e8:00:75:ca:c4:97:6b:41:5d:a5:74:fe:15:5f:
         94:03:3a:a6:20:fb:1b:72:fc:ba:c8:92:b0:3c:29:aa:db:d0:
         bc:8a:8d:1f:87:5f:55:a1:2c:8d:c9:32:04:2f:6d:a3:0e:fd:
         23:8b:42:c9:d7:d4:8b:f4:98:27:02:3f:f6:af:26:cc:08:14:
         47:96:dc:90:e6:80:f9:23:9e:78:44:96:23:5d:90:87:79:3e:
         01:1d:0b:ea:06:c1:f1:5f:1b:84:0e:29:c0:27:8f:a8:38:dc:
         c4:82:a0:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:05 2024 by rpki-client on console-fra.rpki-client.org