Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/nyYqg23Pe_lNOysTstsd_qu0LDk.roa
File:                     nyYqg23Pe_lNOysTstsd_qu0LDk.roa (raw, json)
Hash identifier:          DoPJ9Vfo6HYMkCR+X2IQti1vqJlUdKoOuipi1WpQ1E4=
Subject key identifier:   9F:26:2A:83:6D:CF:7B:F9:4D:3B:2B:13:B2:DB:1D:FE:AB:B4:2C:39
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       23
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/nyYqg23Pe_lNOysTstsd_qu0LDk.roa
Signing time:             Wed 31 Jul 2024 01:32:33 +0000
ROA not before:           Wed 31 Jul 2024 01:32:33 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        219.100.40.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35 (0x23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:33 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=9F262A836DCF7BF94D3B2B13B2DB1DFEABB42C39
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b2:dd:2e:a9:16:1d:c8:e7:df:99:15:5f:4e:
                    6a:7b:60:0b:72:a0:27:60:55:5f:0d:11:58:77:88:
                    ce:1c:a4:59:08:74:d5:6d:16:21:04:cc:d2:82:0d:
                    31:91:0c:0c:e5:b9:b2:9a:8d:3e:1f:ed:79:95:24:
                    94:9b:6f:e2:ec:bc:ee:07:b9:ca:db:1a:72:bc:0e:
                    42:fd:c7:5a:2f:f4:a1:a8:d1:b7:e4:e7:04:a2:aa:
                    f9:df:e7:f2:d5:64:4d:36:d6:4d:50:60:c4:b8:b9:
                    5a:85:3b:f1:9c:9f:61:ce:4c:1c:71:68:e9:1b:4a:
                    bb:c5:3a:bb:76:c0:46:bc:f7:f1:29:8d:ef:c1:72:
                    3e:ca:13:00:d1:6f:e5:61:91:e5:ca:54:6e:3b:f6:
                    73:50:32:b2:a5:58:5d:b9:d9:54:38:74:9d:6a:b2:
                    57:77:e5:ad:98:ca:a6:d1:65:11:6a:df:6e:2a:fd:
                    58:bc:dd:fa:55:14:75:2c:9f:90:0a:ad:bb:d2:32:
                    5f:b3:dc:1b:44:1d:44:59:b4:cd:d8:71:c4:4b:29:
                    bb:5a:06:fc:76:f9:98:1e:f5:da:df:bb:b3:07:30:
                    65:56:84:be:fa:93:7b:7f:96:8f:03:e3:35:43:53:
                    7f:30:90:47:ea:73:6a:55:46:85:3c:ab:2b:d0:ad:
                    61:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:26:2A:83:6D:CF:7B:F9:4D:3B:2B:13:B2:DB:1D:FE:AB:B4:2C:39
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/nyYqg23Pe_lNOysTstsd_qu0LDk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.40.0/22

    Signature Algorithm: sha256WithRSAEncryption
         33:49:af:e5:3e:7d:cc:0d:b2:29:9a:ea:e7:ef:62:74:32:d3:
         65:55:7d:79:a7:9e:68:3a:b6:08:e0:1a:d5:d7:c4:c9:35:29:
         4f:84:85:ee:5f:c5:ac:cd:d3:32:da:56:cd:bc:4e:6d:b6:69:
         fc:06:10:8c:15:c5:75:59:bc:b2:7c:58:02:8b:bc:ed:be:d8:
         46:70:c9:c6:77:e3:86:b2:de:8a:c0:5f:f6:01:72:9e:01:95:
         1a:83:9a:ab:18:eb:a5:ac:7c:1e:ae:4a:cb:32:55:2e:78:f5:
         fa:8e:c7:55:11:47:59:97:f0:d7:b9:c3:a6:8d:7d:5f:72:3b:
         ca:eb:6d:a0:fd:03:50:ef:d3:f0:ae:80:1c:56:85:14:fe:5f:
         7b:98:42:54:af:11:81:6a:d3:64:1b:77:f2:a7:1c:fa:75:71:
         8e:20:51:d4:64:05:91:75:fd:47:c0:00:95:6f:4b:6f:f8:a4:
         2b:c9:19:7e:57:ac:64:06:29:33:9b:a6:fc:ac:37:6f:c2:23:
         fc:f7:51:74:ef:de:3e:10:89:97:71:3b:e0:92:22:ab:6f:6b:
         9a:8d:bb:2e:99:d1:46:10:32:8b:e7:cc:a8:56:1d:0e:ce:ac:
         57:d8:27:27:14:25:56:9a:23:b5:fc:46:6c:10:4d:9c:8c:7f:
         f1:af:a9:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:04 2024 by rpki-client on console-fra.rpki-client.org