Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/S1B_8lKyjFFr8Q6Oo9O7Ta7jL6A.roa
File:                     S1B_8lKyjFFr8Q6Oo9O7Ta7jL6A.roa (raw, json)
Hash identifier:          ugirY406s5XvXB+WzW60NfMZGLSam8UKPGFEjYcl03s=
Subject key identifier:   4B:50:7F:F2:52:B2:8C:51:6B:F1:0E:8E:A3:D3:BB:4D:AE:E3:2F:A0
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       0F
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/S1B_8lKyjFFr8Q6Oo9O7Ta7jL6A.roa
Signing time:             Fri 18 Aug 2023 02:28:18 +0000
ROA not before:           Fri 18 Aug 2023 02:28:18 +0000
ROA not after:            Sat 17 Aug 2024 02:01:09 +0000
asID:                     9597
IP address blocks:        202.164.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 14:54:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15 (0xf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug 18 02:28:18 2023 GMT
            Not After : Aug 17 02:01:09 2024 GMT
        Subject: CN=4B507FF252B28C516BF10E8EA3D3BB4DAEE32FA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:54:56:95:3e:0f:f0:50:7e:f9:cb:bc:51:79:
                    b9:ab:2b:22:05:db:88:47:70:50:8d:2d:4a:03:ac:
                    20:3f:20:ee:fb:aa:58:d3:e0:51:85:6d:b1:46:4d:
                    4d:90:d0:f1:d5:d1:bb:65:ec:94:b7:2b:5e:f7:48:
                    7c:3e:ac:84:56:1a:c3:d9:bc:9b:e0:7d:c6:27:05:
                    29:59:14:0e:3d:18:7f:cc:5c:05:58:62:2f:7b:3c:
                    27:99:d5:6e:dc:69:70:1d:a0:45:3b:50:01:43:f2:
                    55:50:82:15:08:b4:06:9c:31:e2:87:b0:39:0d:b2:
                    b8:ec:c1:0c:cc:4d:35:07:bb:ae:a4:85:72:ef:9c:
                    01:77:0f:39:d4:5e:ca:f7:77:b2:07:e7:53:1b:d3:
                    c0:70:99:cb:22:a8:75:e5:31:0a:f9:1b:41:ef:46:
                    1e:1f:6e:68:62:5f:da:30:09:7f:5c:41:2c:b2:f6:
                    66:44:aa:f6:87:8e:fd:10:92:c2:bb:23:a1:ac:3a:
                    d3:37:e6:58:e8:ca:82:81:26:ce:2c:7d:44:ce:16:
                    cc:46:c6:f3:00:a4:34:1f:ec:59:bc:05:b6:d2:5c:
                    0c:05:81:c7:07:17:f5:da:63:88:23:36:55:b9:65:
                    82:f1:e6:5b:d1:44:b2:3e:d6:84:6f:64:02:b5:ad:
                    b1:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:50:7F:F2:52:B2:8C:51:6B:F1:0E:8E:A3:D3:BB:4D:AE:E3:2F:A0
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/S1B_8lKyjFFr8Q6Oo9O7Ta7jL6A.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.164.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         32:b7:aa:99:31:f0:1e:92:7f:dc:6e:fd:6a:32:14:c6:06:7b:
         f2:b6:cf:2c:13:7d:72:78:2c:b5:f9:ee:6d:38:6a:d1:c2:05:
         6f:d1:ae:55:ee:13:d0:80:5a:1c:00:89:d5:fe:d7:92:da:80:
         fe:06:30:f9:8d:be:ba:0c:e4:28:cf:df:7a:dd:c9:85:80:55:
         af:ea:1f:ce:3c:cd:7e:a7:5c:f3:aa:c9:a7:f3:99:5f:d4:9f:
         2a:11:77:df:49:a1:59:46:3e:a6:e9:1e:f9:16:4c:99:05:cb:
         27:a8:d5:f0:5b:74:06:85:f8:fd:b4:c0:b0:62:10:7f:5b:07:
         c2:39:78:67:c4:15:69:e0:92:89:db:e9:02:17:1b:da:cf:1d:
         04:30:68:b9:91:be:7f:7c:d0:5d:82:78:65:ff:f1:57:b8:cb:
         a9:62:30:74:dc:ea:1b:4b:e2:1b:c3:f1:68:47:50:5c:e4:ba:
         95:03:cf:86:77:21:39:91:4b:1b:a2:6e:42:07:83:44:d8:fb:
         43:87:cd:de:29:72:61:53:0a:a2:b1:30:d3:b9:7b:24:ba:e8:
         fa:e1:25:93:90:9e:26:15:79:a3:41:0b:6b:12:83:72:b0:2b:
         76:51:d8:b5:cf:86:2d:c5:2a:e1:d8:98:26:56:21:26:16:94:
         c7:5e:51:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 16:47:56 2024 by rpki-client on console-fra.rpki-client.org