Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/vJWTNNC-2pBEe213yvz2eqGnjok.roa
File:                     vJWTNNC-2pBEe213yvz2eqGnjok.roa (raw, json)
Hash identifier:          PgqNyhtJGlFulpnwULVDV/7325F4ZUn2BwmcmFRn26M=
Subject key identifier:   BC:95:93:34:D0:BE:DA:90:44:7B:6D:77:CA:FC:F6:7A:A1:A7:8E:89
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       47
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/vJWTNNC-2pBEe213yvz2eqGnjok.roa
Signing time:             Tue 30 Apr 2024 01:31:14 +0000
ROA not before:           Tue 30 Apr 2024 01:31:14 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.208.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Apr 30 01:31:14 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=BC959334D0BEDA90447B6D77CAFCF67AA1A78E89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:e6:04:7f:b0:9a:da:d6:99:03:39:95:25:2f:
                    b7:3d:9a:84:f8:12:ee:81:9f:08:8a:4f:95:d2:cb:
                    b8:a7:65:7a:7f:f8:a0:6d:06:ca:76:4e:d8:4e:ae:
                    ea:a8:5a:6a:78:87:41:21:a0:d2:3c:84:34:7a:f3:
                    4b:ab:72:42:5b:a3:dc:63:06:a3:99:df:0d:09:7f:
                    cb:c0:45:94:7e:b6:c8:87:a9:01:c5:b2:30:f4:1f:
                    18:d5:c6:e5:e3:6b:7f:dc:d4:0a:12:8f:0f:a9:d8:
                    eb:a6:40:ac:aa:be:f5:f0:bd:48:a6:bf:61:e8:6e:
                    04:b0:37:15:6b:4d:9f:b5:e4:21:86:65:b5:b0:57:
                    4e:ff:58:d0:8f:f3:c6:23:b7:7c:44:bf:80:8f:e6:
                    d8:1d:fd:b9:cf:0c:c5:b1:8d:34:35:89:f0:92:04:
                    6a:e5:35:87:bc:d9:97:e4:2b:36:bf:42:2c:9e:09:
                    c5:3d:90:a1:11:59:2e:1a:a0:5e:bd:67:99:81:d2:
                    25:8f:72:a2:60:81:63:b9:5e:dc:8d:8d:e5:b0:2d:
                    96:44:54:ca:b7:c3:c1:05:6d:57:12:c8:d2:91:8b:
                    e0:20:96:45:77:ad:59:e1:ef:ab:70:13:07:03:25:
                    26:b9:4b:e2:03:2c:da:9b:19:67:a4:2e:d4:87:9a:
                    f7:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:95:93:34:D0:BE:DA:90:44:7B:6D:77:CA:FC:F6:7A:A1:A7:8E:89
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/vJWTNNC-2pBEe213yvz2eqGnjok.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/22

    Signature Algorithm: sha256WithRSAEncryption
         57:b6:1f:31:b1:b7:8e:59:8f:c2:cf:16:77:7c:bf:e4:dd:83:
         e2:50:b6:44:96:3c:5e:41:73:7c:03:5a:37:3c:8a:d6:cb:51:
         2d:9d:83:77:fe:8d:c8:47:93:f7:ec:d1:80:11:79:18:50:71:
         d0:c6:64:a6:33:fa:00:4c:57:ba:37:1f:64:2e:6e:f2:be:ac:
         b8:fb:a0:1e:53:70:4a:0a:0e:c3:f3:80:9c:25:97:b6:d3:95:
         a7:cb:c0:d9:1b:e4:04:e2:4e:b7:ca:4e:f2:9d:c1:f0:ae:83:
         4f:0a:19:56:62:64:ca:57:51:28:d0:6b:ac:85:dd:8f:85:40:
         c5:b5:91:f2:21:c9:b0:59:68:b4:4a:8c:ed:c0:8f:1a:e2:6c:
         04:a5:c3:0c:b5:aa:db:3d:26:90:9f:ad:a8:d2:cf:e8:30:15:
         dc:38:eb:8a:e7:93:d4:e2:f6:d0:b3:eb:85:0f:85:f6:7a:dd:
         dd:6b:f2:b8:78:41:5b:fe:8b:1c:47:6a:80:7e:1b:5a:26:94:
         b1:6a:74:c0:7f:c0:10:59:d7:6a:8f:ad:99:c8:5d:04:a5:9c:
         89:b4:95:45:b7:d4:38:9c:a1:d0:75:f1:83:45:9b:05:44:47:
         33:2d:4b:68:b8:5f:62:f3:5d:fb:7e:d5:b0:e6:72:19:b0:0e:
         d1:2a:d2:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:29 2024 by rpki-client on console-ams.rpki-client.org