Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/RgN8C-ClMmg-8hztoq-ggmTETTU.roa
File:                     RgN8C-ClMmg-8hztoq-ggmTETTU.roa (raw, json)
Hash identifier:          Yfku1KcS5Dx7WGp1PinzJ9icsa2b0oP+QIRuM8paYdo=
Subject key identifier:   46:03:7C:0B:E0:A5:32:68:3E:F2:1C:ED:A2:AF:A0:82:64:C4:4D:35
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       04
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/RgN8C-ClMmg-8hztoq-ggmTETTU.roa
Signing time:             Mon 21 Oct 2024 01:58:58 +0000
ROA not before:           Mon 21 Oct 2024 01:58:58 +0000
ROA not after:            Tue 21 Oct 2025 01:23:02 +0000
asID:                     9354
IP address blocks:        222.229.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct 21 01:58:58 2024 GMT
            Not After : Oct 21 01:23:02 2025 GMT
        Subject: CN=46037C0BE0A532683EF21CEDA2AFA08264C44D35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:12:f4:8e:a6:92:f1:8f:96:b3:85:7f:ae:7a:
                    79:4f:ad:ba:87:90:c5:53:b0:91:e6:52:9b:0c:16:
                    73:c9:99:d7:dc:2e:d2:7e:0d:cb:b0:64:99:3b:db:
                    5f:cc:a2:33:fc:b8:4d:f5:38:5b:25:36:c8:a6:ba:
                    b4:27:60:f2:5a:93:32:75:c9:27:f0:0a:57:82:bc:
                    7e:1f:21:b0:54:ac:81:55:21:ab:3c:22:6c:4a:09:
                    93:98:62:f0:03:8a:45:c0:69:81:27:d6:a8:51:8f:
                    c8:ac:e5:81:56:ff:90:38:f1:74:a6:d4:76:80:b9:
                    9d:25:d8:2f:61:60:c3:ec:2d:28:21:d8:b2:9b:63:
                    ae:10:64:dc:f8:aa:51:1b:92:66:0f:93:84:85:11:
                    41:34:ca:e0:02:ac:cf:46:04:71:73:33:ab:53:5b:
                    ba:fc:33:42:41:f0:f3:91:14:b4:91:4f:4c:c9:8c:
                    5d:a7:d2:5b:46:e6:ce:c7:3a:d1:bc:3b:77:95:56:
                    f3:f6:1d:38:5e:84:24:a6:6c:4d:33:95:5e:80:2b:
                    8c:29:1b:6e:a0:35:13:ff:33:43:81:9b:12:d5:a5:
                    8e:e3:d7:66:81:f4:9e:73:7e:39:cd:a3:9e:49:a8:
                    6f:4a:1d:c9:0e:8f:36:47:18:8e:82:b6:eb:66:0d:
                    a7:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:03:7C:0B:E0:A5:32:68:3E:F2:1C:ED:A2:AF:A0:82:64:C4:4D:35
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/RgN8C-ClMmg-8hztoq-ggmTETTU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  222.229.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         7a:9d:fc:81:58:6b:92:80:0f:b4:67:0f:4f:d8:23:d6:22:9c:
         8a:72:90:7a:70:5f:36:ec:af:d2:1a:3d:14:84:72:9e:c9:15:
         b8:96:e7:1d:a0:c9:cd:2d:b9:a4:35:45:34:f8:62:28:b8:8b:
         e3:7f:5b:5d:9a:d7:2c:f1:ee:05:5f:01:ad:e0:ff:be:8a:fe:
         48:78:dd:53:d2:2c:a9:8e:f0:d7:a9:f1:82:ce:96:bc:cf:58:
         37:aa:b9:0c:99:b8:61:5a:ce:8a:33:ef:c8:f5:35:66:6d:99:
         cf:26:52:b3:64:ea:3f:ff:4f:f5:22:fc:f0:f5:7f:13:8c:39:
         30:90:e6:f5:26:79:90:41:49:90:94:32:f4:e4:b3:6d:8e:55:
         ef:d5:d3:d7:90:2e:da:af:c8:04:bf:12:a9:93:fc:d6:f9:80:
         d1:19:4c:61:b1:51:b2:04:8c:c6:b3:99:f2:da:8f:12:71:00:
         63:99:a9:46:f5:3d:88:e7:ae:3f:b2:f5:70:57:76:c8:d4:6d:
         4e:1f:17:e4:9f:0f:2a:da:b4:fb:00:a3:29:c1:a1:21:72:a0:
         8b:89:b1:73:52:90:41:bc:96:4d:c0:42:98:bf:b4:b3:8f:ce:
         41:23:1d:c9:a2:e3:6a:97:60:0e:1d:3f:51:0c:2b:57:05:42:
         d4:34:5b:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:46 2024 by rpki-client on console-ams.rpki-client.org