Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/tsTlllxQt62aEygZLqM193Z4RpA.roa
File:                     tsTlllxQt62aEygZLqM193Z4RpA.roa (raw, json)
Hash identifier:          wybjxUbyskJFY3wHyxemDvey+9c8fsqaQ6ILPeytyWY=
Subject key identifier:   B6:C4:E5:96:5C:50:B7:AD:9A:13:28:19:2E:A3:35:F7:76:78:46:90
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       1A
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/tsTlllxQt62aEygZLqM193Z4RpA.roa
Signing time:             Wed 31 Jul 2024 01:32:39 +0000
ROA not before:           Wed 31 Jul 2024 01:32:39 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23791
IP address blocks:        202.122.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul 31 01:32:39 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=B6C4E5965C50B7AD9A1328192EA335F776784690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:46:67:a6:7a:5b:af:ab:b3:25:2c:b1:51:2c:
                    b3:a1:63:a7:e7:ba:e0:07:fe:47:2c:59:42:d7:f0:
                    d7:3e:d7:c6:87:6f:c9:04:21:ea:4d:8a:a1:8b:86:
                    48:5a:36:7f:45:4a:51:73:81:f9:5b:f3:aa:f2:70:
                    a4:20:b8:88:89:21:10:17:5a:73:00:a1:da:64:7a:
                    9b:81:9c:d2:ac:56:80:32:98:68:45:7e:37:2e:99:
                    bc:32:b5:1a:2e:f9:ae:93:69:32:bf:1d:ab:e4:2a:
                    f9:77:73:99:08:04:43:5d:b5:39:62:02:3e:55:e2:
                    72:5c:be:a3:12:4c:23:f3:7e:00:87:1f:81:9b:b3:
                    c0:1e:d0:f0:64:e4:18:01:6a:24:f8:6d:76:53:af:
                    fc:40:ea:ad:83:06:25:cc:ac:09:9b:60:ce:8e:ef:
                    11:e5:f0:05:ef:19:eb:b9:64:02:c6:2d:9a:3a:d0:
                    0d:c6:bf:21:ca:1a:7d:2e:d3:4f:61:4f:2c:08:12:
                    20:3b:64:15:d8:00:99:7f:3c:64:04:60:d9:64:ef:
                    35:b1:99:ba:4a:4a:ee:45:69:93:59:df:79:b4:f6:
                    f0:25:8f:47:3a:3f:b1:01:7b:ad:73:5f:db:21:c0:
                    8f:5f:98:77:fe:64:5b:7a:96:a9:16:0c:c1:2d:54:
                    4a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C4:E5:96:5C:50:B7:AD:9A:13:28:19:2E:A3:35:F7:76:78:46:90
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/tsTlllxQt62aEygZLqM193Z4RpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.122.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3e:99:d7:5d:12:bc:9e:a6:94:d0:d7:50:c7:13:25:36:64:91:
         95:9f:13:d5:71:29:f5:59:9d:48:da:a4:b2:fa:1f:56:81:a2:
         d6:ef:11:17:23:29:4a:75:ef:75:6d:ee:b2:ab:c9:7a:ad:05:
         e0:a2:6c:85:03:cf:85:e3:cf:45:56:f7:30:40:cb:bb:2c:18:
         02:6b:03:08:c7:1e:a0:87:9e:b4:1a:5a:78:4c:19:81:5e:d2:
         93:bd:8d:e2:0c:ee:63:24:40:bb:cc:41:e5:81:1c:f5:98:d1:
         65:3e:bb:82:c8:7c:7a:58:1f:a6:3a:c5:d3:7d:86:5f:e6:bb:
         bf:44:29:54:2a:a0:e3:1d:c9:a8:4b:55:ce:04:dd:fd:57:59:
         ba:4b:65:40:b0:5c:be:af:ee:b6:b6:88:ac:99:da:c0:62:bc:
         6e:46:89:30:22:b1:e8:09:a5:4f:d5:d7:93:b4:90:3c:d6:33:
         80:63:a9:34:c9:02:64:ca:9d:d4:b2:4f:9c:99:18:04:12:56:
         2a:fe:e5:30:a7:60:ab:64:ad:51:b6:8b:8e:c0:8f:86:8a:07:
         b8:72:a7:fd:84:55:98:5d:90:67:e7:d3:91:8e:f5:a5:bb:e3:
         26:37:1c:f7:6a:e4:a1:36:db:d7:00:76:f2:61:7f:95:72:a6:
         54:f2:b2:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:17 2024 by rpki-client on console-fra.rpki-client.org