Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/465/Zz9KICcxfpcVqsw0qNeQJs5tfZg.roa
File:                     Zz9KICcxfpcVqsw0qNeQJs5tfZg.roa (raw, json)
Hash identifier:          MOg5H16Z0oyuROoI5nKzhMfvwdUPhjNo7KsHZvLEZYU=
Subject key identifier:   67:3F:4A:20:27:31:7E:97:15:AA:CC:34:A8:D7:90:26:CE:6D:7D:98
Certificate issuer:       /CN=47A27188E214C396304497DB571B23F93EBFBDC6
Certificate serial:       48
Authority key identifier: 47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Zz9KICcxfpcVqsw0qNeQJs5tfZg.roa
Signing time:             Mon 01 Jan 2024 01:30:32 +0000
ROA not before:           Mon 01 Jan 2024 01:30:32 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     10011
IP address blocks:        219.100.68.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 19:56:27 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=47A27188E214C396304497DB571B23F93EBFBDC6
        Validity
            Not Before: Jan  1 01:30:32 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=673F4A2027317E9715AACC34A8D79026CE6D7D98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:a4:f4:61:13:f1:34:c4:b0:43:c2:93:ba:ff:
                    24:b4:a9:6c:1f:b6:a0:3f:9b:dc:9e:2f:f0:ff:a0:
                    21:7e:10:d4:9a:6f:00:88:29:cc:42:29:0e:a1:27:
                    03:36:b8:78:06:58:b3:65:4f:37:24:a1:51:13:47:
                    f9:ef:5d:d2:46:59:ab:b6:32:62:41:e1:e7:21:e0:
                    ff:a0:a7:dc:b8:9b:68:51:b8:bf:38:df:3a:b6:ae:
                    2e:c4:8d:59:95:6e:4b:81:fc:5b:e8:9d:5f:b8:f5:
                    f4:da:c4:25:ec:26:52:4b:37:fa:86:9a:9e:a9:50:
                    5e:77:2d:cd:4e:90:2d:4f:23:8b:3c:19:ad:93:35:
                    82:9b:d8:47:97:72:98:ff:ad:13:d1:bd:aa:bf:bd:
                    87:6e:3c:d6:d9:67:6e:be:de:b9:65:e1:a7:49:06:
                    ef:a9:6b:a5:68:e3:6c:c4:cd:29:b0:79:9e:95:11:
                    2a:71:fa:70:6e:0b:46:ca:ff:f6:4c:15:fd:07:0a:
                    6f:4b:b9:7b:4a:70:e8:17:23:67:74:37:5d:2b:61:
                    98:04:1a:85:65:2c:11:89:27:7a:fd:23:fa:b0:82:
                    ae:83:a6:4d:52:4e:b4:e0:52:39:4a:dc:1e:10:c4:
                    b0:29:4c:2c:0c:a2:be:40:a5:4a:7b:e7:2d:c8:37:
                    93:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:3F:4A:20:27:31:7E:97:15:AA:CC:34:A8:D7:90:26:CE:6D:7D:98
            X509v3 Authority Key Identifier:
                keyid:47:A2:71:88:E2:14:C3:96:30:44:97:DB:57:1B:23:F9:3E:BF:BD:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/R6JxiOIUw5YwRJfbVxsj-T6_vcY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/R6JxiOIUw5YwRJfbVxsj-T6_vcY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/465/Zz9KICcxfpcVqsw0qNeQJs5tfZg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.68.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8c:fe:a7:51:93:e1:3b:12:04:e6:43:b4:99:63:7e:43:93:49:
         fb:1f:f6:56:0a:49:db:ae:56:5a:32:74:3f:1a:99:6b:1e:fe:
         02:d7:11:3d:4b:74:f2:e6:ed:db:1a:6f:bd:a4:f7:95:5f:4e:
         f0:b3:9a:29:9c:38:a3:2d:a1:cd:b4:d8:6d:b1:53:31:94:a5:
         24:35:98:08:7b:20:e1:17:f5:c9:e3:3c:99:5c:1e:3b:09:a8:
         99:0b:f8:03:d8:8a:f4:b9:43:74:7a:e5:0d:d1:f5:32:df:c9:
         ec:0c:49:cf:74:09:91:06:8a:07:3d:32:d3:8c:d6:48:f3:0b:
         a4:1c:e9:12:ca:28:a2:05:dc:b4:b2:32:90:26:94:b4:0e:44:
         72:46:72:dc:cc:0c:64:35:ae:d5:f5:b4:a8:b7:cf:f8:46:5b:
         6c:f5:99:c9:6b:94:c8:2e:2b:80:31:b9:a0:00:dc:4b:8b:32:
         48:f6:2f:8c:87:1e:85:af:72:e2:3e:b6:31:96:cc:91:51:95:
         82:55:22:37:dc:c4:14:4c:89:60:29:f5:01:af:62:7f:6b:73:
         a9:25:60:8e:1d:6a:8f:ff:3c:01:d5:94:62:50:08:66:11:50:
         8d:25:cd:c7:3a:87:86:f1:81:26:03:01:1b:61:26:c3:fc:c0:
         4b:0c:dd:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 21:03:59 2024 by rpki-client on console-fra.rpki-client.org