Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/Bam3ne3_63m-JTJYqhX2LZIt3sA.roa
File:                     Bam3ne3_63m-JTJYqhX2LZIt3sA.roa (raw, json)
Hash identifier:          we/vNqxnuRuU8Y855XGKhD/uVfxMDxXbYdSP2CiLTWw=
Subject key identifier:   05:A9:B7:9D:ED:FF:EB:79:BE:25:32:58:AA:15:F6:2D:92:2D:DE:C0
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0199
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Bam3ne3_63m-JTJYqhX2LZIt3sA.roa
Signing time:             Thu 31 Oct 2024 01:30:18 +0000
ROA not before:           Thu 31 Oct 2024 01:30:18 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131925
IP address blocks:        202.247.168.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 409 (0x199)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Oct 31 01:30:18 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=05A9B79DEDFFEB79BE253258AA15F62D922DDEC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:2b:32:0b:e2:ee:da:e8:19:61:e0:6d:07:
                    18:80:c9:ca:90:73:16:7a:c5:eb:8c:49:34:15:9a:
                    70:ae:cd:99:cf:9d:94:4f:20:ab:f8:7d:8b:9c:e4:
                    4c:c8:69:91:d9:c2:b0:cf:d8:3d:e2:8f:61:4e:f0:
                    6a:4a:9c:23:f6:8e:92:c4:f6:a5:95:13:a4:72:57:
                    b6:c9:30:3b:2a:3c:b0:18:e6:b6:53:45:c5:5c:9f:
                    3c:c0:c4:a0:14:79:63:1e:11:b4:e3:4e:9d:ee:ed:
                    1e:88:3d:1a:e6:97:68:60:86:53:42:67:78:cc:5d:
                    d5:9e:97:1a:75:4c:b8:bf:8a:12:02:dc:33:d1:87:
                    c2:cb:44:d6:06:74:8f:24:d3:5f:6a:cb:3b:84:4f:
                    b6:45:6b:4f:90:04:49:27:98:f5:eb:4d:43:6f:9f:
                    23:d4:ed:11:36:56:2e:80:32:d1:55:68:9c:55:1e:
                    6a:83:2f:02:fc:8d:99:cf:fa:20:04:b4:1f:50:8a:
                    1c:03:fc:11:e2:97:ca:21:8e:bd:3d:a6:7e:9f:29:
                    5b:d4:2d:3e:89:08:d4:cd:9f:80:04:7d:df:d0:9c:
                    b1:30:4b:43:6a:ef:67:71:b8:d3:2b:b2:da:1f:1a:
                    43:40:2b:dc:d9:ca:41:12:5b:a4:84:a5:71:0f:da:
                    24:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:A9:B7:9D:ED:FF:EB:79:BE:25:32:58:AA:15:F6:2D:92:2D:DE:C0
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/Bam3ne3_63m-JTJYqhX2LZIt3sA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.168.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9b:af:f7:2d:05:24:20:a3:d6:f7:40:eb:e3:38:9f:36:35:ae:
         e3:b5:27:35:63:80:8b:a1:c6:de:69:a7:92:77:a3:9a:68:fe:
         77:32:d4:52:3f:11:a8:79:71:02:d1:27:55:07:f3:b8:71:67:
         55:66:87:92:14:1f:d9:d9:a6:48:64:92:ee:5e:b1:e9:70:dd:
         88:0c:ea:5d:9b:90:c9:45:81:34:a3:07:6a:58:65:17:24:9b:
         87:9a:78:d8:01:b8:eb:60:7c:25:6a:34:8f:10:a8:14:50:2b:
         6a:3f:8a:2d:e1:dc:ad:f2:5e:62:fa:f7:5a:38:59:86:ed:59:
         08:bc:94:c6:76:13:aa:c6:78:b3:ec:8f:42:30:3d:f0:02:89:
         0b:8d:20:2d:bf:b9:fa:55:1f:2c:e5:c7:82:47:bc:a6:3b:fd:
         f7:f1:18:cc:8f:ed:f2:dd:dd:ec:37:fe:24:07:51:db:28:8a:
         d9:81:57:2a:4e:f0:29:84:2e:da:a6:54:7d:97:b4:5b:e3:96:
         9b:79:03:37:df:af:a3:22:15:da:55:42:3a:57:02:47:97:41:
         81:33:13:27:0d:98:50:d6:80:7d:79:0a:68:6e:e6:fa:12:7c:
         71:d6:68:9e:f0:4b:52:e1:30:e9:e9:10:4d:3b:77:47:cf:db:
         fa:ea:be:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:30 2024 by rpki-client on console-ams.rpki-client.org