Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/tp92TF0Syq31JxbF3qY76ISQJNM.roa
File:                     tp92TF0Syq31JxbF3qY76ISQJNM.roa (raw, json)
Hash identifier:          N12LpYD6tdfvlf8xMH3BzrnEhjmn8k6bFInCsBf99Mc=
Subject key identifier:   B6:9F:76:4C:5D:12:CA:AD:F5:27:16:C5:DE:A6:3B:E8:84:90:24:D3
Certificate issuer:       /CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
Certificate serial:       0A69
Authority key identifier: 69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tp92TF0Syq31JxbF3qY76ISQJNM.roa
Signing time:             Sun 30 Jun 2024 01:50:26 +0000
ROA not before:           Sun 30 Jun 2024 01:50:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        219.114.144.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2665 (0xa69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6965B0B20DDE07A4C978E24073EA0E1117B37473
        Validity
            Not Before: Jun 30 01:50:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=B69F764C5D12CAADF52716C5DEA63BE8849024D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:f3:7c:1f:ad:94:1c:6f:ee:d3:53:a4:cb:79:
                    bd:95:b7:99:bc:39:65:a0:bb:0d:16:63:06:f4:20:
                    3c:9f:9a:c8:c1:3a:6c:55:52:37:bc:56:bd:a8:e2:
                    f7:ac:e3:cc:cc:69:0b:39:1e:13:1d:be:3a:26:90:
                    19:14:b1:a6:9f:ce:c3:de:44:47:65:38:c3:d8:3c:
                    f6:49:2f:6b:ad:aa:9f:bf:03:b7:11:74:7e:84:c5:
                    26:95:b7:ad:39:e8:0d:36:76:f0:03:a8:d7:e6:5e:
                    28:c3:bf:40:29:28:33:77:19:dc:01:d4:4b:db:05:
                    cd:a9:28:d0:1c:5c:9b:cd:9f:bf:d5:82:7c:06:80:
                    78:2c:b1:e3:5b:9b:49:6f:5a:b8:14:ea:8d:61:34:
                    00:27:eb:41:b3:c3:67:46:6d:bc:31:01:7c:dc:fc:
                    07:5a:a3:47:cb:75:f8:96:62:77:65:a7:00:72:9d:
                    55:d2:78:f2:a3:a2:18:e9:48:17:a5:84:51:34:94:
                    8d:ae:c3:bc:a7:94:8b:41:fa:2c:1d:ee:eb:ac:a3:
                    44:79:cb:80:9b:9c:3b:14:ca:f3:8f:e5:a6:f6:57:
                    0a:72:57:d6:63:33:c5:8b:06:12:fb:92:bd:7b:dc:
                    d3:b0:58:62:62:c5:01:e9:9f:d3:07:2c:d9:b7:c2:
                    f3:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:9F:76:4C:5D:12:CA:AD:F5:27:16:C5:DE:A6:3B:E8:84:90:24:D3
            X509v3 Authority Key Identifier:
                keyid:69:65:B0:B2:0D:DE:07:A4:C9:78:E2:40:73:EA:0E:11:17:B3:74:73

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/aWWwsg3eB6TJeOJAc-oOERezdHM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/aWWwsg3eB6TJeOJAc-oOERezdHM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/tp92TF0Syq31JxbF3qY76ISQJNM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.114.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         d7:f7:a3:f9:e4:7a:92:99:f1:d0:39:9e:9b:06:c9:56:68:77:
         eb:09:d9:01:ea:37:0b:b2:d9:9a:30:92:34:b0:1b:51:29:15:
         6b:3a:7d:df:c2:48:97:86:4f:70:17:9d:b2:34:46:f8:cc:2a:
         b8:94:4e:2d:cf:db:bb:c5:67:47:34:fa:4b:f9:57:a2:ae:19:
         d5:37:19:d0:45:9f:6a:7c:e8:72:de:ec:92:74:34:67:cd:a3:
         7e:f3:90:48:df:80:12:e7:8a:f4:b8:38:52:4f:57:5c:90:32:
         53:4a:81:ca:11:90:05:2b:9a:56:d6:4c:23:9a:fe:53:d4:4d:
         83:f7:03:60:59:e0:f6:40:db:57:a4:79:dd:78:bd:4c:ac:6f:
         5f:a5:cf:18:f8:0f:b0:9c:b2:a4:5c:ac:45:12:a2:d7:37:85:
         68:6a:9c:e8:c0:f3:ea:f6:41:20:8a:e4:1b:b8:12:c4:5d:ae:
         3a:fa:0e:ea:71:c3:b8:e8:91:ed:cd:17:98:5a:53:c2:6e:7a:
         53:a3:ee:5b:26:be:18:e4:f3:6c:c0:17:51:e4:72:8f:e5:59:
         a0:3c:85:2a:dc:d1:fa:20:a8:00:20:79:2e:9b:ae:19:08:02:
         29:46:04:dd:d9:67:19:7f:0a:15:5d:bb:87:a9:25:a4:61:95:
         5b:c8:9a:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org