Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/8RCN4O3o7j_pKc0r8l-T9aUhjY0.roa
File:                     8RCN4O3o7j_pKc0r8l-T9aUhjY0.roa (raw, json)
Hash identifier:          MoAIUBA6BeD4Fegkx4scPQcIGoqGY0BLIJnp4Hhqbys=
Subject key identifier:   F1:10:8D:E0:ED:E8:EE:3F:E9:29:CD:2B:F2:5F:93:F5:A5:21:8D:8D
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       20
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/8RCN4O3o7j_pKc0r8l-T9aUhjY0.roa
Signing time:             Fri 11 Aug 2023 07:39:18 +0000
ROA not before:           Fri 11 Aug 2023 07:39:18 +0000
ROA not after:            Sun 14 Jul 2024 01:30:03 +0000
asID:                     9615
IP address blocks:        219.101.96.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Aug 11 07:39:18 2023 GMT
            Not After : Jul 14 01:30:03 2024 GMT
        Subject: CN=F1108DE0EDE8EE3FE929CD2BF25F93F5A5218D8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d4:89:ae:d8:c6:0a:3d:51:f8:2e:ec:27:57:
                    f5:c1:3d:22:8e:ae:cd:d1:cf:d9:75:81:f1:f1:fa:
                    8c:ee:5c:c0:c6:ad:63:45:08:82:5e:e4:ef:60:19:
                    7c:2e:53:f6:d0:b8:0d:d7:fb:ff:15:5a:d8:c2:7b:
                    e3:df:30:39:2b:39:97:5c:9c:83:0c:2a:ed:53:b6:
                    2d:b4:34:69:59:66:14:93:c4:0b:32:b7:ad:d0:80:
                    15:b8:8a:9a:44:63:d3:da:99:0b:b6:a3:9e:25:2b:
                    e2:25:a9:d0:a6:0f:4e:80:d7:e1:06:b3:ff:13:99:
                    ef:1d:c2:a6:fd:b5:ea:1b:ff:2d:ef:40:62:8a:22:
                    f5:c2:0c:f3:ca:2f:e4:60:31:05:c6:43:f1:62:da:
                    e1:48:7f:96:64:bf:33:e6:77:67:0c:0e:18:81:65:
                    ef:ad:4c:83:8e:1f:6e:d1:61:39:04:c0:d4:25:0d:
                    3e:4a:05:66:b7:de:42:b0:c0:8a:8f:8a:2a:3e:70:
                    13:c4:15:55:f8:27:2b:0c:d7:d8:16:79:10:13:46:
                    87:b6:60:71:93:15:5a:21:01:c6:40:2c:ce:e3:6d:
                    45:a1:b1:94:48:c5:4d:80:de:44:51:ca:26:39:3f:
                    05:ea:b5:d9:bd:49:5d:96:cf:8d:2f:d8:52:94:0a:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:10:8D:E0:ED:E8:EE:3F:E9:29:CD:2B:F2:5F:93:F5:A5:21:8D:8D
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/8RCN4O3o7j_pKc0r8l-T9aUhjY0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         09:35:a1:3a:07:7c:fe:ed:e3:66:19:82:e0:ca:14:b8:3b:aa:
         3c:15:6a:84:6a:c7:e6:16:90:c3:8e:b2:1b:39:2b:25:9d:d5:
         9e:4e:f5:c6:b9:36:46:80:f7:39:31:b0:e4:67:7e:72:b6:bc:
         8c:bc:10:5f:7a:7d:d9:80:7f:ce:ea:3d:f3:6e:36:a8:12:4d:
         1e:8c:5a:e4:70:f0:05:0f:70:9e:52:cb:ac:2c:8a:e7:f9:97:
         06:a8:81:e5:f7:00:e7:8c:61:e2:ca:0d:54:9b:a6:69:34:38:
         25:6b:02:a8:25:7b:b2:08:3f:fe:1f:06:99:5d:91:31:82:4a:
         93:9b:b2:52:31:6a:a9:37:4d:2e:2d:7b:19:3c:07:a1:36:f4:
         ea:15:c8:4d:d0:06:4c:bc:f7:af:05:af:65:01:ac:56:c6:06:
         85:b0:f5:02:b4:5d:d4:4d:b4:54:d2:0c:79:8f:fa:0d:11:b5:
         97:c2:dc:04:ad:ed:59:3f:65:d3:ea:2c:50:03:00:51:db:c0:
         2a:43:18:e3:ce:c1:1d:b1:25:15:5f:5b:54:d3:7a:d2:d4:ee:
         36:db:ca:e9:2a:16:46:59:19:c9:9a:77:a5:04:7f:59:f8:44:
         fc:cb:41:db:bf:cc:eb:1f:b0:93:0c:fb:65:51:fc:1a:31:22:
         cd:c7:28:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:38 2024 by rpki-client on console-ams.rpki-client.org