Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa
File:                     GckQ5m5MrRtUSjLpk08aYtxMgfM.roa (raw, json)
Hash identifier:          a75FBmkF2xx8d2VGYw5U0s7TduVyJMHcC24H80DD56s=
Subject key identifier:   19:C9:10:E6:6E:4C:AD:1B:54:4A:32:E9:93:4F:1A:62:DC:4C:81:F3
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       3B
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa
Signing time:             Tue 30 Apr 2024 01:55:51 +0000
ROA not before:           Tue 30 Apr 2024 01:55:51 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     9605
IP address blocks:        158.199.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:52:58 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 59 (0x3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Apr 30 01:55:51 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=19C910E66E4CAD1B544A32E9934F1A62DC4C81F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:61:4e:50:0e:07:fe:58:c0:d0:a5:ea:e2:0b:
                    dc:68:49:84:3d:46:a1:7e:da:ba:19:f0:0d:c9:07:
                    16:01:bf:b2:0b:9f:4d:85:0e:b5:f8:31:9e:74:08:
                    b1:fa:c3:6d:8c:aa:bb:73:ea:f6:55:d1:15:c9:be:
                    53:b5:6f:42:ce:c4:1a:96:9b:17:a5:f1:32:16:26:
                    c1:c9:7b:8a:d4:20:2c:23:5a:4c:7a:3c:bc:ae:da:
                    47:0f:a3:10:86:5a:b5:9e:dc:6c:97:29:7e:81:22:
                    fe:b2:49:6a:8c:a5:b6:be:d5:34:4d:61:a7:ae:95:
                    5f:3a:70:f8:d9:97:ce:bf:63:63:4d:84:f6:67:2d:
                    3e:c8:01:90:42:c0:18:91:1e:1d:fc:83:ea:e6:70:
                    96:17:3d:6b:4d:97:e2:9e:b5:dd:5f:72:60:1a:15:
                    53:ec:b3:3b:80:0c:a9:9f:82:21:2f:a7:53:f1:d1:
                    2d:e6:11:12:c6:62:eb:4d:66:8d:0a:51:54:64:46:
                    d8:b8:6d:bf:97:4b:b8:88:07:65:86:ec:c3:55:6a:
                    26:ee:4a:4c:3e:fe:56:ac:9c:ed:e6:62:41:ff:de:
                    bd:93:ff:21:24:bc:35:ca:0d:e3:24:fe:54:a1:0d:
                    39:91:99:2d:7e:d0:4f:43:a5:71:17:cf:10:42:d9:
                    0c:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:C9:10:E6:6E:4C:AD:1B:54:4A:32:E9:93:4F:1A:62:DC:4C:81:F3
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/GckQ5m5MrRtUSjLpk08aYtxMgfM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  158.199.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         19:7b:da:00:3c:6d:79:2d:6e:2c:d5:15:dd:ac:d4:6b:8c:a8:
         bc:ed:6e:3f:e5:b7:ad:7d:af:f2:4e:6b:cb:de:66:88:2d:85:
         71:82:9c:8b:61:f9:38:a2:22:c9:88:70:98:13:68:b2:a3:46:
         a0:48:78:ea:5a:4e:63:49:05:7e:6a:36:ee:72:4e:3a:ce:e9:
         9e:f0:88:3e:61:f6:b8:07:e3:31:59:91:63:bf:3e:f7:48:62:
         6e:e0:9c:1c:63:b9:fb:4c:07:1e:4f:a8:68:ec:b3:24:4a:05:
         cc:10:7a:78:30:8d:f7:cb:81:11:66:be:dc:ca:a6:98:97:4e:
         a2:2b:d3:26:41:55:e4:c1:f9:34:3e:3f:52:a0:32:ba:ba:56:
         e7:bb:45:91:9c:d0:8e:e5:d2:02:34:6c:e8:70:3c:e5:eb:53:
         6b:3f:fc:b6:77:52:e2:52:c3:5b:c1:f2:c1:1f:64:55:ec:6f:
         8a:a7:21:cc:79:9d:62:77:94:84:6b:13:a1:8e:08:6d:62:47:
         a2:8f:15:af:37:a1:1f:8c:d3:a0:20:35:27:94:f2:c0:7a:45:
         95:78:42:4b:04:61:3d:71:b5:8d:0b:2d:11:03:be:04:e2:ba:
         cd:a0:b2:8c:84:d7:40:7d:9b:f3:74:ef:62:e8:0f:79:36:ef:
         08:e7:ef:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 14:31:52 2024 by rpki-client on console-ams.rpki-client.org