Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa
File:                     DQEb4JjEZooK2dxR-vl3PpMYUGA.roa (raw, json)
Hash identifier:          Hex4NOdLxQgX/tsW8pX3TRhP2gb96tmj3k6KQVKqJx0=
Subject key identifier:   0D:01:1B:E0:98:C4:66:8A:0A:D9:DC:51:FA:F9:77:3E:93:18:50:60
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       55
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa
Signing time:             Sun 31 Mar 2024 01:30:05 +0000
ROA not before:           Sun 31 Mar 2024 01:30:05 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        219.100.20.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:05 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=0D011BE098C4668A0AD9DC51FAF9773E93185060
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:67:12:a1:83:e4:63:77:69:85:ea:2b:9f:ea:
                    76:ff:1e:e1:d5:5b:4a:9a:4d:c4:91:58:42:1b:74:
                    5f:f1:db:4a:3c:6b:2b:21:90:8d:20:dc:3b:a2:d9:
                    63:74:bc:f4:98:9b:4e:35:96:4f:05:68:85:ba:8f:
                    e8:c4:7a:6f:ba:5e:e3:45:a0:c6:a7:98:ad:19:62:
                    95:ee:38:76:7a:5d:12:c3:59:94:a8:7c:8c:15:bd:
                    49:8f:9e:40:7e:12:e2:fe:48:e5:bc:b6:94:03:65:
                    8a:dd:47:0b:bd:34:d5:fd:ac:22:89:f6:43:79:09:
                    00:1f:ee:a1:0e:d1:34:0b:0c:02:dd:97:4e:a2:38:
                    d4:b6:8f:98:1e:4e:79:62:c5:82:8d:30:1e:22:52:
                    92:cf:39:0a:0e:d7:a9:bd:7f:2e:6b:ee:9b:c8:62:
                    18:b9:c3:a1:17:6d:8f:63:e3:c5:3d:81:e8:40:f2:
                    83:11:3b:76:59:ce:22:91:ec:0a:62:eb:71:a1:18:
                    00:62:0d:19:05:db:1d:f6:41:87:c8:d4:b9:d7:c6:
                    dc:d2:0e:6e:4c:6b:91:37:82:e9:4e:70:3a:90:25:
                    20:54:d0:91:64:fe:d5:ef:40:d0:74:1b:8b:91:33:
                    e5:a4:3c:e4:1b:2f:4a:f9:8f:f2:ff:b5:06:8c:bd:
                    ca:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:01:1B:E0:98:C4:66:8A:0A:D9:DC:51:FA:F9:77:3E:93:18:50:60
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/DQEb4JjEZooK2dxR-vl3PpMYUGA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.20.0/22

    Signature Algorithm: sha256WithRSAEncryption
         77:33:b9:4d:2c:ac:d6:ff:d1:1f:0c:80:3e:59:e0:f9:23:15:
         d2:2d:98:25:da:75:e4:dc:65:44:df:c2:29:70:16:fc:6f:92:
         33:b0:e5:78:30:d1:0e:5c:1c:9a:dd:96:22:8d:83:31:b8:e0:
         2c:66:4f:0d:f6:14:8f:1a:6e:cd:5b:cd:eb:3e:45:54:df:3c:
         26:c1:75:9b:83:6c:59:d4:d5:c4:23:fb:a5:e9:09:79:d2:d0:
         ef:f4:bd:5a:2d:94:cd:62:90:43:e3:3e:d2:24:37:76:82:58:
         1f:e9:72:af:74:a6:38:40:16:02:37:7a:65:70:73:22:c0:2e:
         e9:c2:bb:37:69:6c:46:a7:12:63:14:b3:83:37:da:3d:f8:b2:
         8f:a9:9f:bb:87:41:5d:5c:20:ba:84:e4:0d:b6:90:7a:05:80:
         fa:f4:90:ab:46:71:ae:de:57:cc:3a:c8:a9:d4:91:ad:e0:e0:
         cf:01:ff:2a:ae:30:7d:01:46:d6:46:97:45:e2:da:cb:31:bd:
         7d:df:69:51:10:d9:b6:a8:29:0c:10:d8:b9:16:2f:5b:02:4a:
         e7:ef:26:19:33:b8:f1:1e:21:5d:fa:c2:00:9e:e0:21:6c:2a:
         ba:a0:44:ff:fa:6a:b2:7e:39:57:4c:05:5c:15:6a:e5:8d:33:
         d0:c6:50:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org