Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/SsIwZgx5bLASpdSSBX1jG4Bb1yk.roa
File:                     SsIwZgx5bLASpdSSBX1jG4Bb1yk.roa (raw, json)
Hash identifier:          lxYCAZ2i6qQ69M5YagWj2cG0T1qzOEKYM7gSvqshsv4=
Subject key identifier:   4A:C2:30:66:0C:79:6C:B0:12:A5:D4:92:05:7D:63:1B:80:5B:D7:29
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       4C
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SsIwZgx5bLASpdSSBX1jG4Bb1yk.roa
Signing time:             Sat 31 Aug 2024 01:31:45 +0000
ROA not before:           Sat 31 Aug 2024 01:31:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        119.224.160.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4AC230660C796CB012A5D492057D631B805BD729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:05:a0:00:66:4a:d0:18:fd:86:9a:4d:9c:7f:
                    c4:83:05:e8:2b:ca:8e:2e:e9:66:e7:92:1b:e3:58:
                    41:cd:1b:63:34:af:8b:23:2a:a5:c7:6a:0c:04:16:
                    d0:17:ca:02:90:02:7a:f7:e1:2d:69:80:08:86:5e:
                    94:02:74:cc:51:64:e7:c7:25:51:af:7c:7b:a6:4a:
                    20:f9:df:1c:d5:ac:d2:6d:aa:55:43:6a:92:b7:71:
                    08:82:2e:31:18:c8:fb:af:5b:84:12:9b:bb:e9:f7:
                    cc:a3:68:a1:3b:0f:ae:f1:02:ea:61:0f:87:70:84:
                    76:25:00:96:8b:cc:9d:6f:84:8e:51:a3:84:6b:70:
                    a2:7b:55:3a:6b:4d:a3:36:91:af:8b:1e:ce:d6:d1:
                    0e:a8:7a:0a:b6:45:0a:a2:83:35:a8:b2:14:18:f2:
                    2a:75:df:67:64:08:b8:74:b4:1d:28:bd:d3:cc:c3:
                    1d:bf:ee:32:a4:a4:88:b3:a4:9f:ff:c5:1a:39:04:
                    f4:20:23:03:f1:61:3b:74:f8:32:c1:93:d2:c5:27:
                    6d:79:fd:32:16:2f:f8:ac:56:45:45:53:1c:4a:81:
                    00:59:23:58:d7:4e:94:f5:de:ae:54:dc:9a:31:9e:
                    07:58:35:7e:71:96:bf:f3:4e:a6:73:64:a7:19:d1:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:C2:30:66:0C:79:6C:B0:12:A5:D4:92:05:7D:63:1B:80:5B:D7:29
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/SsIwZgx5bLASpdSSBX1jG4Bb1yk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.224.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         12:24:77:77:e9:23:18:65:12:c5:bc:2b:87:40:09:eb:6a:a5:
         b9:c6:31:d9:32:fe:93:16:a3:c0:59:47:ff:a1:a7:d3:c7:46:
         86:11:b9:5c:31:b0:1a:47:ea:ca:b3:58:33:33:d4:51:a4:b0:
         7e:74:ce:9d:fa:25:76:7e:57:46:db:0f:67:12:18:8d:73:f5:
         e5:ad:62:08:5e:3c:8f:19:84:8a:a5:9a:79:a5:af:58:79:1b:
         1a:22:92:2a:61:9e:2d:16:3b:3b:45:79:3d:34:e3:a5:ba:6b:
         6d:eb:c5:c6:69:d4:c3:9c:55:67:28:89:2c:59:c4:aa:41:5b:
         b6:52:0e:0d:05:a8:ae:9b:e1:b9:ea:f7:81:54:10:eb:06:7f:
         7e:46:23:d4:86:bd:4a:ae:3a:da:4e:d7:d5:f6:26:87:19:ca:
         83:a3:06:5b:fd:c5:6a:4c:81:23:b7:0e:e0:53:e6:45:40:f2:
         af:cf:b8:bf:0c:63:6a:42:61:b5:4a:1c:35:f9:70:14:ad:a7:
         93:33:00:90:4f:37:58:af:b4:52:35:ec:22:44:0f:2b:2f:c6:
         ca:07:91:d2:44:7c:82:8a:ee:28:6f:f1:dd:13:69:b5:62:90:
         43:09:e5:c8:e0:95:ad:6f:9d:3a:46:ed:5b:98:6f:1d:54:6d:
         67:95:d9:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org