Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/393/-aLyL-_bhqdL573KxMoOOQXv_qs.roa
File:                     -aLyL-_bhqdL573KxMoOOQXv_qs.roa (raw, json)
Hash identifier:          qZMnrEh4dr3k0e7Diu7H2orXAlFHFybibQ2FNdjA0xE=
Subject key identifier:   F9:A2:F2:2F:EF:DB:86:A7:4B:E7:BD:CA:C4:CA:0E:39:05:EF:FE:AB
Certificate issuer:       /CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
Certificate serial:       63
Authority key identifier: 5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-aLyL-_bhqdL573KxMoOOQXv_qs.roa
Signing time:             Thu 29 Feb 2024 01:31:43 +0000
ROA not before:           Thu 29 Feb 2024 01:31:43 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     9622
IP address blocks:        203.76.64.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D055B2DAAC48878CC9B1127A29CF11666920A23
        Validity
            Not Before: Feb 29 01:31:43 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=F9A2F22FEFDB86A74BE7BDCAC4CA0E3905EFFEAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:ed:cf:4d:cc:dc:bc:79:b2:0a:da:28:80:8b:
                    25:98:78:4e:35:d4:04:9a:5f:78:0c:35:a5:c3:15:
                    ac:65:14:04:33:7d:b2:b3:69:74:12:19:5b:fd:32:
                    2b:8e:a7:d5:49:7f:7b:24:23:ee:d3:a9:40:02:1a:
                    5f:e2:4f:21:13:a6:0a:b1:3b:02:7a:c8:ae:ec:1d:
                    ab:f0:6e:6f:07:e5:47:d9:77:9c:f5:7e:d2:02:41:
                    1e:6b:87:e0:0a:c9:4f:1a:d9:c0:55:d6:a4:d1:82:
                    03:d5:48:21:ee:d5:39:c2:a1:7b:88:db:9c:fd:dd:
                    c6:c6:62:fa:74:2d:7e:8d:08:d9:c6:6b:6c:bc:e9:
                    a4:1e:4a:7d:44:35:c9:29:35:80:ee:bc:d9:fb:38:
                    df:93:3a:f0:b7:9a:a7:31:40:e5:03:39:8c:cc:fd:
                    e1:66:9f:97:de:4c:e8:d3:70:10:ca:0d:f7:41:c2:
                    67:38:e8:86:89:fe:2c:30:c8:d7:17:16:71:77:ee:
                    40:cf:5a:64:ff:a2:88:61:79:dd:19:aa:7c:af:e0:
                    2b:e8:6e:02:2f:43:0c:23:63:ac:88:4a:28:ed:12:
                    10:da:0a:b8:1e:47:fe:f4:08:77:1e:89:58:fd:3b:
                    82:d9:82:95:61:e9:03:d2:ab:8a:71:e8:a1:85:65:
                    31:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:A2:F2:2F:EF:DB:86:A7:4B:E7:BD:CA:C4:CA:0E:39:05:EF:FE:AB
            X509v3 Authority Key Identifier:
                keyid:5D:05:5B:2D:AA:C4:88:78:CC:9B:11:27:A2:9C:F1:16:66:92:0A:23

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/XQVbLarEiHjMmxEnopzxFmaSCiM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XQVbLarEiHjMmxEnopzxFmaSCiM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/393/-aLyL-_bhqdL573KxMoOOQXv_qs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.76.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4e:9a:c8:da:00:3a:ad:01:4a:f0:d5:d8:10:d6:2b:ba:2c:5b:
         b1:52:b0:d9:d2:a4:d7:ed:cb:41:f4:4b:42:8a:bb:59:4d:fa:
         4e:57:4c:56:ca:a4:eb:64:e8:b0:10:05:c8:c9:23:3c:77:69:
         91:7e:dd:bb:30:7d:2b:c5:2c:f2:c1:8a:d2:63:8f:a0:38:1d:
         84:f7:ac:f4:6a:86:2f:b0:b1:3c:2a:64:78:b9:dd:0c:92:9e:
         e8:f6:b2:a3:d1:34:ec:77:35:28:aa:84:d8:61:19:ec:00:92:
         3c:80:e9:67:90:6d:a7:ae:e8:19:0b:35:0e:e8:ed:0d:69:c2:
         b4:ad:60:00:94:ce:6f:b2:3d:38:24:74:d4:50:55:cb:c2:e3:
         0a:1b:d0:30:bc:1e:fd:c8:9d:7b:b7:2a:20:e1:38:4e:24:a5:
         70:cd:34:04:f6:a3:bd:43:d3:11:33:cd:dd:0d:23:f8:e9:f4:
         95:8d:c0:9f:af:6d:75:1a:c5:a0:e1:0f:fe:7f:13:ab:20:89:
         0b:cb:e8:a7:30:e3:31:7e:3d:4c:6f:de:bd:24:56:27:fe:6e:
         fd:86:cc:03:19:95:86:3f:71:ad:d9:d0:96:7d:f0:18:c7:b2:
         69:7a:33:0c:0a:b1:00:7c:ce:10:ef:5c:f4:a0:e5:48:af:31:
         03:17:d3:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:03 2024 by rpki-client on console-fra.rpki-client.org