Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/SojdYgRgNJ9smiqV6l36ZBoAeqs.roa
File:                     SojdYgRgNJ9smiqV6l36ZBoAeqs.roa (raw, json)
Hash identifier:          fwjVZ6M10fgEsuN/8xq6474x7PiEsjTuxRqKRu877qE=
Subject key identifier:   4A:88:DD:62:04:60:34:9F:6C:9A:2A:95:EA:5D:FA:64:1A:00:7A:AB
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       EC
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/SojdYgRgNJ9smiqV6l36ZBoAeqs.roa
Signing time:             Thu 19 Oct 2023 09:28:09 +0000
ROA not before:           Thu 19 Oct 2023 09:28:09 +0000
ROA not after:            Mon 14 Oct 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        203.167.32.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 236 (0xec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct 19 09:28:09 2023 GMT
            Not After : Oct 14 01:30:03 2024 GMT
        Subject: CN=4A88DD620460349F6C9A2A95EA5DFA641A007AAB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:66:87:88:e3:42:d2:20:ab:03:27:30:20:64:
                    77:11:8f:94:11:65:a3:d7:34:73:c5:65:76:32:54:
                    4b:8e:65:cf:76:05:93:0e:f6:70:8e:54:68:52:97:
                    13:e3:28:86:44:59:6c:c1:3c:77:da:c2:c1:b2:c0:
                    cb:b8:b5:d3:f2:60:79:a1:3d:6c:fd:27:7e:f4:7a:
                    e0:d4:23:86:30:2d:46:30:e9:86:ae:0e:9f:ed:06:
                    a0:29:4d:c9:40:84:26:d7:e4:e3:6b:26:09:7e:9a:
                    f9:62:9e:57:0f:b6:4c:ba:04:7e:eb:57:9b:b3:21:
                    80:12:be:07:0a:50:a5:b4:49:9c:da:f7:e5:16:12:
                    db:78:df:83:f1:3d:7d:2d:89:b9:71:a3:0a:fd:f5:
                    20:c7:77:ea:c2:6a:22:1d:d9:8b:16:fb:ec:ff:a5:
                    9d:d3:3d:85:b1:6d:99:c3:d7:44:8f:3a:71:75:bf:
                    c2:1b:79:6a:bf:fe:44:79:59:eb:2e:0b:cb:15:28:
                    82:5f:4d:88:68:fb:b7:dc:7b:0e:6d:f6:2f:97:16:
                    d8:fb:bb:18:49:9a:45:b3:2b:94:11:42:8c:38:03:
                    6e:52:59:05:8a:e1:01:d9:9a:3e:9e:6c:90:66:ef:
                    36:08:b1:4f:43:d2:d7:93:20:92:b9:65:67:90:c7:
                    e1:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:88:DD:62:04:60:34:9F:6C:9A:2A:95:EA:5D:FA:64:1A:00:7A:AB
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/SojdYgRgNJ9smiqV6l36ZBoAeqs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.167.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         99:3a:62:fd:63:e8:8e:f9:ea:07:54:b8:9a:81:09:12:62:4e:
         e0:c7:6a:68:40:7b:7f:8e:e3:64:71:c0:c5:6e:59:ae:f4:8d:
         08:6e:ef:e5:5e:c3:71:8f:15:c5:d1:4e:15:a3:f2:06:7c:30:
         bb:b1:42:75:66:ec:66:27:e0:44:48:55:55:3a:42:83:85:32:
         84:40:ce:44:5f:26:5e:4f:67:52:20:83:5f:3e:44:99:5d:58:
         8e:65:33:e2:ae:66:ac:91:b5:9b:02:b3:59:04:5f:59:0d:72:
         e8:2d:a7:ec:96:f6:f2:fe:a9:2c:63:33:b1:b8:bb:35:c6:80:
         35:13:52:3e:d0:93:e9:04:db:77:55:0f:b3:83:fe:ad:84:aa:
         24:cc:20:57:b1:1d:3e:f0:d9:20:62:d2:7e:b7:22:7b:e7:5d:
         ec:2a:ec:1b:91:0a:62:d5:f4:f1:72:ab:6f:aa:87:5c:48:07:
         01:00:17:17:39:c4:c9:0d:78:95:06:56:73:7a:14:5e:34:b4:
         ba:ba:8d:90:e4:00:04:c9:00:ae:f2:bd:d1:73:e4:c8:2f:fb:
         12:96:50:20:b8:2d:0f:d5:89:8f:dc:33:81:f7:7c:b1:aa:df:
         0a:5d:29:9d:b7:15:2f:f1:f0:03:2f:02:8a:b8:a1:59:58:18:
         c1:02:80:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:50:30 2024 by rpki-client on console-fra.rpki-client.org