Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/fKspKrNaqHiWkLQ96CcmOH4rb4s.roa
File:                     fKspKrNaqHiWkLQ96CcmOH4rb4s.roa (raw, json)
Hash identifier:          AbgoMuR2Lf1ygGBxJHtnX0PfbLf77BtUthC4k8QBHIM=
Subject key identifier:   7C:AB:29:2A:B3:5A:A8:78:96:90:B4:3D:E8:27:26:38:7E:2B:6F:8B
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       D5
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/fKspKrNaqHiWkLQ96CcmOH4rb4s.roa
Signing time:             Fri 31 May 2024 01:31:19 +0000
ROA not before:           Fri 31 May 2024 01:31:19 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        110.44.128.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 213 (0xd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:19 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=7CAB292AB35AA8789690B43DE82726387E2B6F8B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:1c:e6:8a:84:cc:dc:79:28:d1:79:fd:14:ec:
                    ee:24:f9:3a:aa:c4:17:54:56:e3:c9:be:7a:29:9a:
                    e3:1d:a0:bd:02:82:10:2a:7c:b1:3a:95:d1:1f:e0:
                    c3:83:3a:ce:3b:13:03:16:b4:15:86:f3:2c:01:39:
                    95:37:03:82:c7:5b:99:89:2d:1c:0f:ad:e5:3b:70:
                    5f:66:8a:f4:16:d2:ad:9e:3e:7f:04:c3:c1:22:3a:
                    57:f6:19:4d:e3:a6:c5:a3:70:37:f6:a8:dc:fb:f2:
                    7d:c1:1f:4d:55:5a:f6:39:ab:f5:e4:03:9c:83:1e:
                    4a:a4:6b:0b:4c:47:d2:f3:21:73:e3:bf:b7:95:f8:
                    d3:d9:ee:79:42:05:c9:a4:05:b6:48:02:e2:34:d9:
                    4f:79:9e:f5:a4:c3:49:5e:e5:f7:8a:f9:3b:41:8c:
                    36:c2:2d:d2:42:2a:b9:8a:39:39:64:70:f8:f3:60:
                    14:9e:27:53:4a:a7:37:a6:4b:01:13:b5:bd:4c:5b:
                    0d:1c:67:51:59:d6:f8:1c:40:1b:7f:ed:b6:f4:4f:
                    32:ea:50:58:62:ac:a3:c9:8b:ca:4a:5e:50:6a:b7:
                    0b:42:dd:5e:c0:85:c0:07:05:a9:14:d7:e2:cd:80:
                    80:5c:d2:ed:63:88:b0:b4:a0:32:e1:89:a3:90:39:
                    81:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:AB:29:2A:B3:5A:A8:78:96:90:B4:3D:E8:27:26:38:7E:2B:6F:8B
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/fKspKrNaqHiWkLQ96CcmOH4rb4s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.44.128.0/20

    Signature Algorithm: sha256WithRSAEncryption
         9d:75:b7:d4:f7:1e:11:19:98:95:c7:30:9f:7c:5e:87:cd:4e:
         a8:51:9a:79:54:9b:d1:39:d4:87:e7:57:79:7d:e3:13:08:df:
         f7:a5:f4:01:47:6e:38:61:b0:7a:a8:ac:46:8c:4c:35:9a:46:
         fc:63:c3:9c:92:85:2d:37:be:3b:62:69:82:5d:1c:cc:76:c4:
         f2:10:e5:f1:f2:d2:2a:69:a4:9a:73:df:53:b7:e2:31:4c:4c:
         12:f2:53:11:61:e9:bc:a8:85:d9:99:a3:5d:0e:f4:78:d0:6a:
         1a:ec:6b:7e:9b:c8:94:20:4d:63:8b:f4:00:7f:1c:5d:f7:80:
         48:52:9c:fe:7f:62:25:e8:73:a4:f0:d6:be:41:7d:32:6b:cf:
         da:d0:0a:5a:4b:c5:bc:1a:29:5c:50:d4:db:cb:39:e8:7e:c7:
         af:dc:80:24:0d:1f:a5:d3:bf:ac:37:c4:7b:c8:63:ac:2e:7d:
         8e:6e:fc:01:1e:5e:1c:df:36:13:7f:b6:a9:32:40:dc:b2:bc:
         be:f1:33:97:22:9d:f4:2c:08:20:3f:9f:d2:cc:7b:df:b7:30:
         0d:3a:89:1e:f2:23:e5:3d:cb:d3:5f:49:dc:c9:5e:88:74:b6:
         87:82:8c:34:fb:ed:3a:2b:0a:ce:93:fe:f5:a1:d4:95:29:7d:
         45:cd:8f:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:12 2024 by rpki-client on console-ams.rpki-client.org