Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/p9ujlVgmcC8aUklrlg6OsW_W8_8.roa
File:                     p9ujlVgmcC8aUklrlg6OsW_W8_8.roa (raw, json)
Hash identifier:          5+cDZRLy549XXcUJGTBfxqopXGsZ/wpf7XRnVAoMWmM=
Subject key identifier:   A7:DB:A3:95:58:26:70:2F:1A:52:49:6B:96:0E:8E:B1:6F:D6:F3:FF
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       86
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/p9ujlVgmcC8aUklrlg6OsW_W8_8.roa
Signing time:             Mon 01 Jan 2024 01:28:26 +0000
ROA not before:           Mon 01 Jan 2024 01:28:26 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9351
IP address blocks:        113.20.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 134 (0x86)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Jan  1 01:28:26 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=A7DBA3955826702F1A52496B960E8EB16FD6F3FF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:2b:48:b7:1d:58:de:32:26:81:64:8a:f4:67:
                    85:c4:3e:61:f8:2b:1d:5c:56:0b:71:04:6a:21:ac:
                    f8:fe:62:5c:de:4e:0a:1b:97:18:e4:1f:e3:d0:91:
                    bb:29:a3:71:c1:5f:56:35:92:52:1f:95:b4:ef:9f:
                    dd:27:2e:6c:99:13:f4:f5:d4:a2:23:ec:b9:71:35:
                    82:5d:14:96:a9:09:36:9b:43:69:52:d4:a2:a4:80:
                    f8:56:c4:0c:49:92:24:33:52:b9:d4:e4:69:9a:1b:
                    42:27:b1:02:e0:83:02:32:0f:02:e0:80:b8:66:43:
                    d0:4f:d0:92:3d:8a:6d:3e:23:9b:bf:8a:44:51:18:
                    f8:8e:e9:ec:9b:df:07:65:28:7d:e4:5a:50:13:48:
                    0c:d1:bf:cd:e2:08:3c:ea:37:c4:cd:5e:9a:86:08:
                    48:9d:64:76:f3:a1:76:6e:ac:59:1b:be:cb:f8:7e:
                    5b:56:ee:1c:13:a1:c7:32:ea:67:4e:5b:05:22:cb:
                    d3:c0:3b:2b:ab:71:f9:30:4e:d6:08:3e:91:ff:74:
                    5c:f6:af:68:ec:1a:ed:4b:4d:6a:68:e1:ba:56:29:
                    2b:ce:b4:26:34:3c:49:b6:20:60:0d:9f:9b:30:49:
                    9a:59:e8:6d:a9:7f:fc:89:45:c4:6c:7a:a1:dc:20:
                    c5:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:DB:A3:95:58:26:70:2F:1A:52:49:6B:96:0E:8E:B1:6F:D6:F3:FF
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/p9ujlVgmcC8aUklrlg6OsW_W8_8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.20.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c1:98:84:b1:8e:66:aa:30:3b:e7:0a:ba:08:61:7a:9f:11:2f:
         1f:75:1f:f0:2c:b9:a5:d1:01:18:8c:33:9f:0a:65:2a:35:c7:
         f7:ec:0f:ac:cb:56:71:80:75:67:c3:10:38:72:78:42:f2:32:
         bd:64:31:9e:30:9e:33:28:7b:4d:f9:6b:15:4c:dc:9a:37:b8:
         d7:20:96:63:03:71:3b:53:c0:61:c0:cb:06:8d:39:e8:af:5e:
         6e:f8:65:c7:c6:3d:ee:54:30:77:89:d9:b2:75:b2:66:f6:f9:
         8c:2f:c0:32:9e:06:9f:67:f3:7d:4b:8d:6d:28:5b:7c:10:2e:
         10:43:0b:8f:b8:67:7c:41:ca:b2:da:a3:72:0a:5b:87:e4:7b:
         70:b1:b7:84:31:7c:e7:a2:2f:b7:06:9b:20:0d:4a:62:a0:c5:
         46:15:16:bd:a9:15:df:37:04:f9:89:66:17:b9:68:ca:42:af:
         56:66:bf:75:b2:cf:ba:8b:5a:e2:65:f3:09:b4:30:f6:c2:6b:
         cd:b3:ce:5a:72:a8:f7:45:0e:10:66:2f:8d:17:fc:0c:37:de:
         42:e3:23:e3:5a:fd:0a:d9:b4:26:74:bb:2a:04:eb:67:2f:b5:
         bb:51:ae:31:b8:e9:a7:70:25:9d:8a:8f:6a:c6:e3:00:c4:d7:
         90:0a:b9:d5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:23:56 2024 by rpki-client on console-fra.rpki-client.org