Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/800/jQlCT_ggJKTpmrZH0ruXaLLATKI.roa
File:                     jQlCT_ggJKTpmrZH0ruXaLLATKI.roa (raw, json)
Hash identifier:          1s1q/kUwfW7jJciGNGjBwtCi+PRpoac9qygyxNbebn0=
Subject key identifier:   8D:09:42:4F:F8:20:24:A4:E9:9A:B6:47:D2:BB:97:68:B2:C0:4C:A2
Certificate issuer:       /CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
Certificate serial:       1D
Authority key identifier: 08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/jQlCT_ggJKTpmrZH0ruXaLLATKI.roa
Signing time:             Thu 31 Oct 2024 01:32:06 +0000
ROA not before:           Thu 31 Oct 2024 01:32:06 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18278
IP address blocks:        183.91.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 29 (0x1d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=084F88D837A2A2132EA8F6F8F2DB82C1C1E90A8B
        Validity
            Not Before: Oct 31 01:32:06 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=8D09424FF82024A4E99AB647D2BB9768B2C04CA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:76:dc:60:a6:e0:65:ea:34:65:65:98:2f:47:
                    bf:da:41:e9:aa:2b:06:c5:90:3a:f9:a0:94:27:93:
                    29:74:c3:bd:1b:89:77:23:56:b6:c9:77:c3:23:22:
                    b1:6a:f1:b8:d3:1a:32:e4:4f:bf:d2:ad:1e:11:54:
                    12:c7:db:04:e3:47:9a:75:fa:8a:75:94:66:58:47:
                    5a:76:9b:02:21:2f:9c:f1:4c:02:85:6b:b9:99:89:
                    b6:be:76:d6:81:39:62:25:ca:65:27:4c:c2:af:1d:
                    1d:3e:5a:37:fe:97:80:ee:4a:0d:ea:80:21:42:71:
                    84:54:1c:0c:e3:5b:58:50:d5:81:2d:a6:27:d4:2d:
                    31:22:3f:0a:49:bf:36:bb:e5:7c:9b:0a:5a:46:c6:
                    4b:03:2e:ca:d5:47:1e:96:be:02:84:e3:da:0f:77:
                    e6:af:4c:19:9c:0c:0c:fa:5a:26:12:26:4c:b7:84:
                    a7:74:15:e8:01:60:62:53:68:19:01:31:9c:b5:67:
                    62:bf:16:d7:88:9a:f7:40:23:90:f3:f7:08:de:0c:
                    b5:86:f8:94:f0:eb:1c:8c:78:e4:93:34:a3:4b:92:
                    41:00:90:ed:ec:d7:9c:79:6b:6e:43:75:d8:9f:55:
                    4b:7c:ba:8e:fe:66:05:aa:e9:85:ed:2f:f9:c4:e5:
                    14:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:09:42:4F:F8:20:24:A4:E9:9A:B6:47:D2:BB:97:68:B2:C0:4C:A2
            X509v3 Authority Key Identifier:
                keyid:08:4F:88:D8:37:A2:A2:13:2E:A8:F6:F8:F2:DB:82:C1:C1:E9:0A:8B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/CE-I2DeiohMuqPb48tuCwcHpCos.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CE-I2DeiohMuqPb48tuCwcHpCos.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/800/jQlCT_ggJKTpmrZH0ruXaLLATKI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.91.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         1e:8d:d6:a5:4d:f0:1e:7c:c1:7c:5e:f6:4e:48:4b:13:3f:c4:
         51:83:67:10:3d:1d:ff:6d:5e:23:27:94:20:27:8f:e8:5e:9a:
         c1:ec:13:06:6e:f8:65:fa:2f:0b:b2:52:da:f6:4c:97:54:7a:
         1f:8f:55:e5:a0:3a:80:3d:aa:84:1a:4a:c0:51:a0:f7:6f:15:
         f4:04:96:48:7e:5e:23:16:06:d8:f9:e9:91:3e:5d:83:21:9f:
         59:aa:6f:38:63:c5:09:35:8a:cd:19:e8:8b:fb:89:8b:d2:cf:
         b1:29:d8:22:a0:83:79:30:a6:46:3b:6a:4e:1c:cb:5d:52:ff:
         0a:1a:54:be:c2:90:bf:d7:8f:2f:d1:0d:db:8a:f9:07:1d:75:
         78:f6:de:74:ba:0c:a6:79:98:61:c0:9d:9c:a1:5a:93:76:73:
         e1:be:3e:99:a2:84:ca:4d:a0:85:8b:f7:22:7f:7f:b2:d7:8a:
         cd:5e:4e:55:78:5d:7a:0a:26:3f:a4:94:27:f4:4b:6e:92:93:
         e5:23:84:d0:da:72:bb:ef:fb:b3:d6:54:a1:2b:e6:ba:d0:ef:
         3c:66:0d:b5:de:cb:64:ce:0c:10:05:65:96:33:52:61:0f:6c:
         44:a0:15:5e:ea:eb:17:6b:c6:1b:dd:cc:63:cf:6d:d4:ac:8b:
         3e:86:85:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:01 2025 by rpki-client