Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/9CwsLexC92WXax6NkwhkbOawKXw.roa
File:                     9CwsLexC92WXax6NkwhkbOawKXw.roa (raw, json)
Hash identifier:          ZZ0HgRsmbDccb7HOtRVWogCjmRHOQKMR34uN51WPFxo=
Subject key identifier:   F4:2C:2C:2D:EC:42:F7:65:97:6B:1E:8D:93:08:64:6C:E6:B0:29:7C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       1B
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/9CwsLexC92WXax6NkwhkbOawKXw.roa
Signing time:             Wed 10 Jan 2024 01:02:58 +0000
ROA not before:           Wed 10 Jan 2024 01:02:58 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     2514
IP address blocks:        143.125.224.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 27 (0x1b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jan 10 01:02:58 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=F42C2C2DEC42F765976B1E8D9308646CE6B0297C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:94:c9:da:6a:9a:67:a0:00:30:d1:e2:46:24:
                    a9:ac:94:4d:38:f1:7c:5c:29:ba:71:81:6a:51:9c:
                    5c:81:a4:f3:46:cf:b5:b1:11:fd:be:45:16:dc:7a:
                    75:f0:8e:f7:c8:8b:58:39:3e:59:c1:fd:53:dd:1d:
                    66:8e:15:dc:e9:5d:50:d6:f4:02:75:a8:d9:a0:ad:
                    f8:be:97:09:ab:df:2a:df:41:8d:fb:86:5b:57:90:
                    03:ef:e6:88:60:43:48:49:b0:99:f8:06:44:f0:d6:
                    90:ce:68:1c:7e:5b:43:79:14:26:a2:2a:0d:53:4a:
                    fe:b2:9e:d2:16:de:f3:0c:2a:a6:37:bf:15:ae:f9:
                    50:4b:67:33:26:44:47:a1:e6:51:92:b4:a1:b0:4b:
                    a6:32:f7:20:01:f4:6a:c3:a4:d2:94:eb:c1:7f:b5:
                    50:c2:f2:70:08:0e:5d:3d:ad:cc:ca:10:5a:c4:84:
                    59:3e:c0:80:71:2d:f5:54:ff:13:22:32:18:ba:29:
                    30:12:bb:e1:2f:00:83:19:c6:22:8c:db:4c:1d:a2:
                    66:5e:eb:bb:3e:9a:ab:78:cb:a4:7a:67:8a:2a:4a:
                    f6:39:db:6d:ae:c8:60:32:c2:d9:22:15:20:cc:bb:
                    98:1f:20:fb:33:52:7a:f1:f1:fc:77:70:2c:a3:52:
                    17:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:2C:2C:2D:EC:42:F7:65:97:6B:1E:8D:93:08:64:6C:E6:B0:29:7C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/9CwsLexC92WXax6NkwhkbOawKXw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.125.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         90:55:d7:fd:31:8b:be:56:ec:80:b9:81:4b:8c:fa:e8:11:f2:
         23:3a:89:13:1f:75:99:9c:6d:7e:75:2b:72:b0:d7:3d:81:ae:
         8a:f5:c2:ea:b3:6e:3f:4a:d5:cf:d3:61:f4:67:90:5e:6d:e3:
         31:06:ac:30:65:6e:f2:cb:ed:28:db:aa:a4:6e:eb:88:74:8f:
         3b:38:51:b6:be:44:1c:18:fa:26:df:82:82:47:d5:9e:20:01:
         e3:b4:fb:9c:38:5c:d3:02:f6:d6:1d:be:dc:c9:28:9b:2d:ba:
         c5:b5:52:c2:ee:45:7d:64:b1:4c:c9:6c:09:f4:c6:84:51:d7:
         e7:ff:b5:03:a8:04:81:b6:e4:12:9d:f5:af:a1:62:53:71:a9:
         af:19:c5:3d:12:56:d4:bb:42:03:58:08:b1:e9:fb:80:5b:6d:
         50:5a:89:12:85:ab:f6:e6:dc:50:96:43:90:b7:e1:a0:d7:f6:
         96:ff:c6:ca:41:02:9c:da:bd:31:76:cf:8e:06:67:1d:3e:9c:
         f0:d7:27:03:cf:ff:ab:8d:c3:ed:a2:ee:00:68:32:c5:5f:cf:
         e5:a4:6d:72:6b:fd:9d:f5:0b:0a:07:a3:01:aa:e1:ea:48:0c:
         7c:f9:0b:63:52:e6:ad:d3:24:24:b3:80:d2:65:41:e5:7d:a5:
         bb:9c:bf:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:06 2024 by rpki-client on console-fra.rpki-client.org