Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/miKPDcqHr2Gw6yaO2ewOyWaWJRQ.roa
File:                     miKPDcqHr2Gw6yaO2ewOyWaWJRQ.roa (raw, json)
Hash identifier:          drEcwwopvY4zBy3HLUiq0KYivHgDj9EYa3IvgPiXVio=
Subject key identifier:   9A:22:8F:0D:CA:87:AF:61:B0:EB:26:8E:D9:EC:0E:C9:66:96:25:14
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       18
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/miKPDcqHr2Gw6yaO2ewOyWaWJRQ.roa
Signing time:             Mon 18 Sep 2023 04:18:08 +0000
ROA not before:           Mon 18 Sep 2023 04:18:08 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18274
IP address blocks:        219.100.164.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 24 (0x18)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Sep 18 04:18:08 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=9A228F0DCA87AF61B0EB268ED9EC0EC966962514
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:25:76:b4:75:cb:d8:ef:75:58:46:80:d4:58:
                    13:b3:c9:97:5f:39:93:e7:3d:ee:57:31:83:9a:64:
                    54:c0:b8:9f:e8:19:53:54:de:b6:5f:51:69:92:e6:
                    34:62:40:0f:df:73:f0:35:78:9b:eb:d3:05:2f:8d:
                    8a:13:2a:20:db:9b:65:e0:e0:38:2e:37:9e:76:41:
                    f9:ad:d5:bc:97:33:52:e9:9f:af:1d:07:c2:4d:f0:
                    20:62:a6:21:e6:31:1b:3d:c3:bf:41:60:1e:a6:c9:
                    a2:6b:6b:16:00:ee:01:5d:35:c1:7a:57:a0:38:49:
                    9b:b9:f1:9c:38:c8:29:c3:d7:bb:f3:44:73:c4:00:
                    25:6e:99:ef:28:56:63:a0:1f:e3:97:66:f5:1e:00:
                    22:02:fc:00:c0:b7:93:f8:bc:47:00:92:5a:09:2c:
                    b7:5c:b3:ef:40:ac:51:4f:3d:d8:1c:b2:53:6a:f4:
                    13:a1:d5:57:26:a4:44:4e:03:97:ba:7d:b9:a9:1f:
                    d4:ad:a4:1f:a2:93:35:28:9d:e5:db:8c:36:df:4e:
                    ee:92:79:38:75:26:a5:d1:48:6c:04:7e:f5:88:ea:
                    ae:cb:b3:c6:32:0e:ea:93:02:88:3e:b8:2c:d8:60:
                    d5:df:d6:47:96:62:f6:f8:be:17:2b:e3:0b:b4:d6:
                    a6:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:22:8F:0D:CA:87:AF:61:B0:EB:26:8E:D9:EC:0E:C9:66:96:25:14
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/miKPDcqHr2Gw6yaO2ewOyWaWJRQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.164.0/22

    Signature Algorithm: sha256WithRSAEncryption
         81:9f:73:1f:f8:98:bb:3a:43:0b:3e:26:ee:a8:64:70:a4:3b:
         94:5c:bc:fe:35:f5:56:c3:29:61:9c:62:5b:eb:d9:3e:ea:61:
         e4:d8:32:33:27:ec:80:d2:46:88:d9:60:f2:6f:87:d0:25:d3:
         1e:bd:7f:4a:73:1e:1f:29:56:c3:3f:5b:17:6e:ec:00:8f:2e:
         ae:ad:33:5d:28:7f:ac:e2:73:95:b1:23:e1:76:69:ec:1c:02:
         1c:6b:dd:ed:13:a8:a4:94:f3:bf:e9:d5:ac:70:5f:e7:f7:93:
         f7:6f:8d:04:68:9a:10:1e:24:27:70:4c:bc:b7:ee:02:18:04:
         4b:04:d7:bc:b7:d3:f1:f7:0c:6e:75:fb:b7:e3:75:14:c4:38:
         f0:6c:e6:6a:a3:f4:8a:ec:77:c1:2e:12:9f:5c:3c:af:33:ca:
         4d:66:0e:f7:04:85:80:ad:45:50:ca:54:19:b9:6f:3a:b0:b8:
         22:3b:a6:ac:99:be:fe:14:b8:7d:25:3c:33:c7:1c:80:43:31:
         1b:72:00:9f:20:bc:3e:67:40:98:de:8e:95:96:b9:b7:3b:f6:
         20:d4:e1:e8:31:14:59:ad:f0:05:05:f7:9c:fb:81:43:cf:6e:
         33:9e:b0:ab:02:d9:c6:17:27:5b:61:fa:35:d9:59:df:02:bb:
         f6:d1:de:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org