Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/718/p4ki4Az3d8i9qHFqpnl16iQlE9s.roa
File:                     p4ki4Az3d8i9qHFqpnl16iQlE9s.roa (raw, json)
Hash identifier:          xwq2t4cfoIhqLPmaK0G3VxchC3eAGZDEcrUlHMZdMzU=
Subject key identifier:   A7:89:22:E0:0C:F7:77:C8:BD:A8:71:6A:A6:79:75:EA:24:25:13:DB
Certificate issuer:       /CN=70124EAB896039E137736AA7022F934D797F5684
Certificate serial:       27
Authority key identifier: 70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/p4ki4Az3d8i9qHFqpnl16iQlE9s.roa
Signing time:             Thu 29 Feb 2024 01:34:23 +0000
ROA not before:           Thu 29 Feb 2024 01:34:23 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18094
IP address blocks:        175.111.92.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 39 (0x27)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=70124EAB896039E137736AA7022F934D797F5684
        Validity
            Not Before: Feb 29 01:34:23 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=A78922E00CF777C8BDA8716AA67975EA242513DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9e:3d:51:e5:34:1d:05:2e:63:24:bd:2e:13:
                    75:fe:9c:31:f5:52:fc:2f:02:70:19:b4:98:08:f3:
                    5d:b8:8a:0a:78:d1:0e:0d:62:fe:b8:aa:0f:d8:a0:
                    49:2c:27:39:c1:fb:54:80:cd:6a:59:1a:4b:a1:c5:
                    18:88:02:79:b7:c5:d8:e3:b4:33:ac:c5:d6:80:be:
                    60:5e:ff:83:7d:86:83:7a:53:47:27:18:2f:11:69:
                    d3:82:82:ed:b5:ae:d1:20:d3:e5:ad:87:3e:d6:ff:
                    e9:8f:7a:f3:e1:48:22:ff:f6:cd:33:d0:4d:87:f4:
                    f6:fb:6d:2a:9b:55:b6:7d:a5:45:fe:46:2f:81:fa:
                    9f:d8:73:d2:1a:1b:b6:3a:05:e8:d7:37:66:75:46:
                    f9:ff:7f:1c:46:be:ee:26:d2:02:dc:99:38:35:7a:
                    48:de:88:92:60:5e:aa:db:1a:a2:29:9c:23:89:d3:
                    82:80:dd:c6:70:e1:83:ce:8a:cc:51:5f:93:76:23:
                    51:d2:1f:64:9e:6e:6b:cc:4c:e8:8d:ad:b2:00:ee:
                    e6:ff:b6:eb:cd:9a:8d:9e:3e:71:dc:6b:4b:e2:65:
                    df:4a:66:bf:dc:4a:30:54:7c:2c:80:6f:17:78:c6:
                    ec:b4:be:fa:71:90:90:5a:6b:55:d1:61:5a:65:9f:
                    a0:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:89:22:E0:0C:F7:77:C8:BD:A8:71:6A:A6:79:75:EA:24:25:13:DB
            X509v3 Authority Key Identifier:
                keyid:70:12:4E:AB:89:60:39:E1:37:73:6A:A7:02:2F:93:4D:79:7F:56:84

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cBJOq4lgOeE3c2qnAi-TTXl_VoQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/718/p4ki4Az3d8i9qHFqpnl16iQlE9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.111.92.0/22

    Signature Algorithm: sha256WithRSAEncryption
         90:98:72:26:a0:40:1f:b3:98:6a:a7:d3:80:e5:59:44:c0:b7:
         5f:77:63:fd:f5:f2:56:d6:81:e2:b4:05:96:f0:55:66:73:21:
         a7:32:50:36:06:9d:bd:a6:46:e9:93:09:27:a5:88:c0:b5:de:
         50:bc:0c:d5:dc:c7:16:99:59:af:e5:79:ab:8e:80:86:36:dc:
         19:48:b0:8a:ca:e7:e6:6b:52:e7:aa:1a:f0:ae:73:1a:fa:03:
         48:ad:2c:88:39:2c:8f:55:1b:1d:51:76:96:86:65:35:af:60:
         c5:e8:44:59:be:67:2d:a7:c6:7b:dd:b9:2c:de:94:fe:e1:1c:
         96:19:62:20:a7:be:64:8f:64:bb:25:c1:44:c2:c8:ab:0c:f1:
         be:19:01:96:c2:58:5a:b0:28:21:ab:bf:d8:1b:7a:81:c5:36:
         76:fd:48:bb:42:2e:2b:73:8f:79:a9:61:37:a8:3a:63:4f:56:
         ea:6f:24:77:27:c4:95:31:84:6c:0c:fa:88:2e:94:3c:ba:26:
         b4:58:9f:6c:e1:fd:4a:e8:86:9d:d1:5c:c6:05:c6:9c:71:9d:
         88:59:00:ea:14:4f:6d:78:4a:86:b6:40:e0:e1:aa:79:ab:61:
         9f:a8:ee:70:90:b8:a1:86:90:1c:c6:6f:a8:3f:09:de:e2:e5:
         97:b7:65:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:08:56 2024 by rpki-client on console-fra.rpki-client.org