Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/462/mRjyLSiceFmHLnkFV6XntjxzDIc.roa
File:                     mRjyLSiceFmHLnkFV6XntjxzDIc.roa (raw, json)
Hash identifier:          NYKPW4m1LNW0mEaANm7Gw69uty1VbAPdDp26WlSo+m8=
Subject key identifier:   99:18:F2:2D:28:9C:78:59:87:2E:79:05:57:A5:E7:B6:3C:73:0C:87
Certificate issuer:       /CN=43917B23074524E9E6EA8E40FA4A0672C9620318
Certificate serial:       51
Authority key identifier: 43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/mRjyLSiceFmHLnkFV6XntjxzDIc.roa
Signing time:             Sun 31 Mar 2024 01:30:03 +0000
ROA not before:           Sun 31 Mar 2024 01:30:03 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     10019
IP address blocks:        194.193.96.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 11:53:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=43917B23074524E9E6EA8E40FA4A0672C9620318
        Validity
            Not Before: Mar 31 01:30:03 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=9918F22D289C7859872E790557A5E7B63C730C87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:f7:c9:a1:79:96:e8:41:be:af:44:ea:db:6c:
                    58:c8:68:6e:6f:d8:6d:c9:1a:c2:70:b0:0a:53:93:
                    60:c5:16:4e:f0:b3:8e:10:a9:2c:96:6b:b7:dd:4a:
                    10:fa:61:fb:cd:b1:6c:db:9a:64:5e:03:a4:c0:9f:
                    9f:6c:8e:3f:a7:68:e2:cc:17:be:cb:13:4c:c8:32:
                    f9:32:2c:ac:26:ce:e9:4b:f9:99:0d:45:bf:81:37:
                    34:d1:ca:5e:28:bc:3e:b4:7a:cf:40:7f:44:59:f8:
                    c7:b2:58:f8:27:f3:dc:85:f9:70:c6:95:45:14:54:
                    e2:00:8e:78:3e:e6:31:dc:17:25:63:c1:4c:d6:05:
                    8e:b8:05:16:01:58:5a:5b:88:0d:99:d2:5a:3e:ed:
                    f3:68:bc:f8:07:c1:22:14:72:2e:76:b9:49:b3:b8:
                    ee:1c:55:43:85:d3:8f:cb:eb:25:cc:bb:fa:b1:52:
                    ab:33:56:59:6f:3e:af:c1:f7:c1:b3:c6:33:9a:8a:
                    8c:c0:8f:35:0c:b4:e6:5d:3a:ab:d5:a0:d4:7a:30:
                    cc:6c:04:25:41:46:58:d8:1b:9e:11:80:71:f0:13:
                    db:52:3f:47:e6:3a:53:0c:23:18:a1:08:17:01:bd:
                    92:1c:fa:6b:48:18:10:35:3d:7c:ce:a5:94:33:b8:
                    66:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:18:F2:2D:28:9C:78:59:87:2E:79:05:57:A5:E7:B6:3C:73:0C:87
            X509v3 Authority Key Identifier:
                keyid:43:91:7B:23:07:45:24:E9:E6:EA:8E:40:FA:4A:06:72:C9:62:03:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/Q5F7IwdFJOnm6o5A-koGcsliAxg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Q5F7IwdFJOnm6o5A-koGcsliAxg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/462/mRjyLSiceFmHLnkFV6XntjxzDIc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  194.193.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:d8:68:52:5d:86:dc:ed:5b:e1:1e:22:bf:e9:88:8c:52:a8:
         79:d0:74:08:6e:22:8b:f2:ed:bc:da:a1:40:bb:06:ee:59:02:
         ba:01:1f:7f:e9:b9:64:91:a5:66:bd:dd:28:3b:5e:d9:c9:67:
         78:7e:8b:c0:52:e3:47:d4:08:11:14:d7:4d:86:d4:a0:4e:97:
         52:9f:c7:59:c5:e2:22:63:4f:c6:8a:96:41:80:4a:61:e6:77:
         82:23:78:98:14:77:98:ea:0d:02:5f:ee:1e:c2:05:4c:20:1c:
         4c:f8:dc:4d:08:89:3c:71:93:0d:cb:31:21:61:f8:2b:e7:30:
         b3:09:91:b9:fb:c5:6e:95:53:5f:91:fd:43:f9:8c:a0:d1:45:
         12:04:a5:44:ff:30:b9:45:64:19:b9:ab:e4:44:45:fc:44:8e:
         b8:b1:ad:a8:03:54:40:c5:45:bf:c2:36:71:ed:08:4d:ec:7b:
         2e:c1:59:03:1d:85:3b:41:f2:71:ce:af:23:11:87:f9:d4:9f:
         18:ad:df:a5:4d:af:68:c4:4c:48:43:1e:a5:b0:5a:c1:b7:55:
         16:eb:af:e4:3e:00:1f:89:87:aa:49:d0:e1:30:6b:b1:f7:35:
         ad:b4:59:42:8c:7d:1e:1d:cd:7b:7c:c8:a5:f4:38:1b:a2:3b:
         ef:43:c5:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 16 12:57:24 2024 by rpki-client on console-fra.rpki-client.org