Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/T7oK9U1x5qmAgXbKxNqybZ4J1io.roa
File:                     T7oK9U1x5qmAgXbKxNqybZ4J1io.roa (raw, json)
Hash identifier:          cUzdFV+Eyi6eji3AbscfYpXf9uNk7Er/wry98VhF+H4=
Subject key identifier:   4F:BA:0A:F5:4D:71:E6:A9:80:81:76:CA:C4:DA:B2:6D:9E:09:D6:2A
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       5B
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/T7oK9U1x5qmAgXbKxNqybZ4J1io.roa
Signing time:             Sat 31 Aug 2024 01:31:53 +0000
ROA not before:           Sat 31 Aug 2024 01:31:53 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        218.223.96.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:53 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=4FBA0AF54D71E6A9808176CAC4DAB26D9E09D62A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:0b:48:ca:a9:6b:89:85:ef:de:ca:27:d0:21:
                    a2:42:2e:18:f7:9a:50:33:28:69:d5:5f:38:00:dd:
                    60:4a:ab:94:fc:8e:a4:ea:9a:2d:b2:2d:fa:38:3c:
                    a2:51:97:d1:87:6a:00:e9:ac:ec:c6:1a:20:62:41:
                    dd:bd:6b:37:a3:44:f0:51:84:6f:2c:2d:b2:74:80:
                    10:4c:af:8f:16:6c:23:ea:ad:a4:66:3f:5e:05:25:
                    67:d4:1a:f4:49:cc:33:cb:72:7c:d8:16:60:76:40:
                    9a:c1:51:ab:7e:3a:a8:60:67:d9:f2:68:b3:ee:92:
                    04:9e:e7:73:a4:b2:cf:ca:95:eb:cc:22:e5:1b:fb:
                    cb:6b:af:40:e6:3c:ec:c1:c1:f4:ec:eb:5d:f6:93:
                    4f:b1:e0:ee:95:10:6f:65:7d:82:dd:01:63:4f:ab:
                    6d:35:06:3d:db:6c:0f:71:3b:39:38:2d:98:88:b9:
                    01:b4:08:64:61:44:f0:fe:aa:d9:46:6f:20:7c:ab:
                    38:28:38:73:27:d3:99:0a:ed:b4:83:d4:e4:9c:c7:
                    70:fa:30:3f:34:52:89:ec:fb:ca:fc:26:5a:1f:da:
                    93:ec:c6:05:e3:b0:4f:f8:c1:b5:ac:1f:43:c9:1c:
                    57:49:4e:c1:56:92:0e:32:e2:a7:97:df:31:af:a9:
                    bf:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:BA:0A:F5:4D:71:E6:A9:80:81:76:CA:C4:DA:B2:6D:9E:09:D6:2A
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/T7oK9U1x5qmAgXbKxNqybZ4J1io.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         35:95:fd:6a:9e:12:91:ec:69:9a:be:8e:6a:46:70:12:ce:0a:
         c4:6b:ba:75:cf:26:ba:42:02:1e:35:60:cf:71:b7:04:ea:f6:
         6a:07:b0:0b:72:63:00:0f:ab:50:30:96:fb:8f:e7:e7:b4:29:
         d0:9d:bf:bb:bf:ae:9b:29:bb:eb:aa:e5:52:28:1a:7d:b3:52:
         b0:bc:2f:b3:1b:bb:5a:c4:65:d6:51:ca:a0:04:cb:86:d6:78:
         70:eb:75:8d:79:30:d9:0f:43:05:b2:91:20:0e:b5:08:7b:7b:
         2f:ef:b7:af:09:9f:dd:e8:fd:0b:5e:a9:a6:1d:78:69:8c:b8:
         fc:c5:5c:b3:b8:4a:c2:ac:e5:d8:cf:fb:eb:30:a8:98:8a:ef:
         a7:fa:74:75:4a:ba:64:4a:0d:aa:4a:93:ae:76:f2:4f:d6:82:
         7b:8d:fd:24:62:a0:b7:6d:94:e3:e7:a2:4c:6e:80:72:95:3d:
         74:ca:c2:6f:47:87:a7:a7:68:ae:8d:cf:cd:d0:ab:53:e8:b2:
         ed:1f:c2:58:94:f0:f8:16:19:a1:63:f2:bb:94:2e:6d:cf:58:
         5f:85:f4:e9:d9:61:33:a9:3c:28:30:11:a1:de:8c:c6:54:ee:
         4f:8e:b1:a6:c8:98:55:f0:0a:a6:b9:fc:69:33:6c:14:09:b4:
         cd:18:9f:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:47 2024 by rpki-client on console-ams.rpki-client.org