Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/524/Y1OOn8EtLzeI2utwhQo26tlhWQ8.roa
File:                     Y1OOn8EtLzeI2utwhQo26tlhWQ8.roa (raw, json)
Hash identifier:          6TcNOC0RtcGOOSSFv1lZ8ryab1ZrOF14YT9GVkkbP44=
Subject key identifier:   63:53:8E:9F:C1:2D:2F:37:88:DA:EB:70:85:0A:36:EA:D9:61:59:0F
Certificate issuer:       /CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
Certificate serial:       0B
Authority key identifier: EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/Y1OOn8EtLzeI2utwhQo26tlhWQ8.roa
Signing time:             Tue 29 Aug 2023 05:40:35 +0000
ROA not before:           Tue 29 Aug 2023 05:40:35 +0000
ROA not after:            Wed 14 Aug 2024 01:30:02 +0000
asID:                     2516
IP address blocks:        219.100.116.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Jun 2024 02:50:20 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 11 (0xb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE13ACCF7E77B0292AE17B05340211C8F971760B
        Validity
            Not Before: Aug 29 05:40:35 2023 GMT
            Not After : Aug 14 01:30:02 2024 GMT
        Subject: CN=63538E9FC12D2F3788DAEB70850A36EAD961590F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:a1:cd:64:f5:00:e1:30:89:bf:ef:80:ad:17:
                    03:8c:c9:74:63:83:20:82:25:94:dd:e9:8e:45:9e:
                    17:00:de:5b:91:58:42:0b:6a:53:92:46:75:b8:a1:
                    7b:b8:0c:0a:42:e2:ab:25:eb:58:ad:8f:bf:a9:13:
                    39:73:bd:e6:fb:f7:0c:09:72:77:4b:ff:58:20:eb:
                    e2:2e:1e:a0:1d:6a:f7:c9:76:71:66:84:f2:70:2a:
                    1e:e4:45:d1:4f:42:19:11:23:b2:89:ab:f5:ad:27:
                    09:e5:fc:85:1a:b0:7b:6a:66:32:f9:12:d7:cb:e4:
                    7b:24:54:aa:98:d6:a1:b1:1e:63:67:e4:a1:64:17:
                    18:a4:1b:8f:1a:e2:49:e1:f6:43:13:1d:60:f4:82:
                    94:95:df:18:4d:f3:aa:cc:b5:93:58:80:c4:b3:53:
                    0e:d4:42:04:2e:f2:2d:14:2b:0d:b7:7f:74:92:88:
                    dc:4d:cd:5f:ab:21:50:84:f8:6f:ae:1d:6a:16:db:
                    ba:3e:9e:9f:b5:66:68:8b:1d:c7:33:70:26:2d:d4:
                    01:2f:96:da:6b:3f:09:96:b7:9c:e8:93:1f:98:0f:
                    74:7a:eb:36:8b:f7:43:84:57:bf:4f:49:00:60:e4:
                    31:95:24:7d:85:71:3b:18:99:8b:e0:43:03:ce:a1:
                    bd:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:53:8E:9F:C1:2D:2F:37:88:DA:EB:70:85:0A:36:EA:D9:61:59:0F
            X509v3 Authority Key Identifier:
                keyid:EE:13:AC:CF:7E:77:B0:29:2A:E1:7B:05:34:02:11:C8:F9:71:76:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/7hOsz353sCkq4XsFNAIRyPlxdgs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/7hOsz353sCkq4XsFNAIRyPlxdgs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/524/Y1OOn8EtLzeI2utwhQo26tlhWQ8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.116.0/22

    Signature Algorithm: sha256WithRSAEncryption
         99:af:45:e5:d3:85:a4:21:92:62:bf:1b:d7:06:da:29:63:35:
         27:2b:73:ae:00:57:c6:99:a6:39:06:2d:3a:4b:c3:26:64:ec:
         8f:f2:18:49:a5:6a:9b:f1:68:f3:2b:dc:89:b8:53:75:2c:f5:
         fc:d6:02:31:72:b4:df:42:ce:a4:68:6c:55:1a:b6:84:bf:40:
         16:7f:e0:d9:91:ff:68:ac:43:d2:db:a6:37:98:f9:e8:8b:9b:
         65:50:c7:8d:cb:0a:ad:fd:cb:07:e2:69:6b:10:58:04:0f:a1:
         7c:df:66:0e:df:60:40:8c:5a:a2:3c:cb:51:d3:33:7c:e2:28:
         77:89:74:2c:3d:57:71:06:9f:b5:27:8f:82:eb:6f:3a:bc:aa:
         67:58:e4:82:d6:97:0b:89:72:47:7b:02:83:3f:f5:77:84:6b:
         e8:ad:1e:f2:95:c3:a7:99:0c:ba:bb:8b:c1:96:21:d3:cc:f2:
         5c:26:45:78:9e:f1:33:d4:1d:d6:2f:23:6b:29:df:1c:24:fc:
         50:7f:bc:51:dc:35:30:a0:4a:aa:62:c7:4a:fd:45:4d:51:fc:
         eb:35:db:5c:f3:53:1d:c5:bd:61:8f:99:a5:9b:d9:1a:2b:d8:
         99:bf:a6:d0:ac:a7:34:c9:a2:cd:8c:95:ad:11:8a:9b:95:24:
         72:6f:e6:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 14 04:10:41 2024 by rpki-client on console-fra.rpki-client.org