Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/373/fBaM2S_XM-TsLf_AoGM2_jMuyQ0.roa
File:                     fBaM2S_XM-TsLf_AoGM2_jMuyQ0.roa (raw, json)
Hash identifier:          sM923HU89Y3NHWEIBSSzrf2kM6MZATtMv0eRZYBsLtc=
Subject key identifier:   7C:16:8C:D9:2F:D7:33:E4:EC:2D:FF:C0:A0:63:36:FE:33:2E:C9:0D
Certificate issuer:       /CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
Certificate serial:       36
Authority key identifier: 89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/fBaM2S_XM-TsLf_AoGM2_jMuyQ0.roa
Signing time:             Sun 30 Jun 2024 01:32:33 +0000
ROA not before:           Sun 30 Jun 2024 01:32:33 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9615
IP address blocks:        219.101.96.0/20 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 54 (0x36)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89CF5C2AFA5B576577351C4199018D44CDC2D6DA
        Validity
            Not Before: Jun 30 01:32:33 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7C168CD92FD733E4EC2DFFC0A06336FE332EC90D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:6c:d5:38:d3:4f:cc:70:a2:55:b3:d8:90:e9:
                    a3:4e:3f:12:74:97:de:60:79:c6:c3:4f:fe:61:e5:
                    3b:a4:c8:2a:53:bf:b8:34:83:b9:13:49:48:79:12:
                    2c:66:64:22:a5:5b:e9:b0:9f:22:ee:03:e9:92:09:
                    64:79:e2:bc:3d:4d:26:c0:1d:a2:ef:c2:7e:4d:a9:
                    9a:c7:21:b2:60:a3:a2:b9:02:3a:41:9a:18:11:fc:
                    57:87:e0:61:10:9c:ba:5f:9e:e0:9c:7b:92:10:0c:
                    e0:71:e3:6d:6f:82:6e:5b:ab:43:0b:67:71:e8:8d:
                    6d:c7:23:fe:43:92:b3:d0:26:56:8d:f5:52:85:b3:
                    20:1a:92:b3:d0:30:1b:8d:40:b8:0b:f8:08:1d:43:
                    4e:3b:d2:c8:03:fc:93:29:8f:3a:d5:8b:22:8c:0e:
                    92:4d:ee:3d:f3:aa:06:2b:90:95:49:54:66:db:cf:
                    8e:98:86:0b:70:ae:b7:6e:bf:14:7c:66:5e:a4:16:
                    2f:96:83:a8:1f:f3:26:21:19:c5:99:fa:fc:a1:6c:
                    cc:ef:1f:f5:07:55:41:c0:5d:24:2c:0f:1c:db:38:
                    b2:c5:61:fe:cb:f6:64:ec:39:35:e0:f7:51:bd:63:
                    48:39:74:e4:8f:75:08:66:37:87:9e:c3:fc:fe:2f:
                    88:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:16:8C:D9:2F:D7:33:E4:EC:2D:FF:C0:A0:63:36:FE:33:2E:C9:0D
            X509v3 Authority Key Identifier:
                keyid:89:CF:5C:2A:FA:5B:57:65:77:35:1C:41:99:01:8D:44:CD:C2:D6:DA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/ic9cKvpbV2V3NRxBmQGNRM3C1to.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ic9cKvpbV2V3NRxBmQGNRM3C1to.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/373/fBaM2S_XM-TsLf_AoGM2_jMuyQ0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.101.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         65:4b:7c:73:6e:49:eb:be:31:9f:c0:31:1c:50:18:6a:a5:4d:
         1e:fa:e0:42:98:9a:b1:41:d8:63:96:48:52:16:80:cc:ed:6b:
         48:e8:3e:89:85:5c:0e:df:e1:f4:01:c0:41:5c:f4:c1:98:a6:
         08:2b:e2:e9:55:91:14:68:9f:57:0d:e6:40:87:f0:c0:8d:c1:
         88:e1:ff:e3:52:03:37:4c:e2:d9:3a:d4:7f:91:ba:15:35:39:
         4b:1d:ef:45:2e:0b:af:6e:a7:3e:d4:4b:a1:8a:1d:ae:39:a9:
         01:72:88:33:8e:d7:fc:cb:c5:b2:4b:b3:28:1a:7e:1f:19:8a:
         e7:c8:b9:b0:d7:7a:08:0b:f9:9b:fc:fd:e9:d2:c5:0d:ea:f9:
         ed:53:39:34:7d:d6:60:9d:7e:c9:26:e9:50:66:1e:68:c7:f9:
         41:6d:e1:71:a9:12:b9:b9:53:81:bc:3d:0d:57:db:67:bd:aa:
         62:3f:7a:26:62:f0:00:a0:11:ba:d9:b1:f1:6b:c2:8b:a8:c1:
         59:51:29:e1:ce:18:e4:d3:e6:94:94:d4:66:00:67:8e:76:f6:
         47:b7:48:02:58:d0:86:f9:2c:c1:ac:1e:76:66:94:28:5c:5c:
         51:e2:fb:ac:e2:55:0a:f3:38:fe:8f:ac:71:80:51:07:aa:34:
         82:a5:45:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org