Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa
File:                     l2ALdwC7BH0fjGsqhGESH0m3tlY.roa (raw, json)
Hash identifier:          uwLm2X+MZd3Sxr0WhoXzVWCDu0AzoXxFrWMrGUeuW6c=
Subject key identifier:   97:60:0B:77:00:BB:04:7D:1F:8C:6B:2A:84:61:12:1F:49:B7:B6:56
Certificate issuer:       /CN=55061B7BA6111F230BDB61E29781E46D0165E99E
Certificate serial:       30
Authority key identifier: 55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa
Signing time:             Tue 09 Jan 2024 05:03:57 +0000
ROA not before:           Tue 09 Jan 2024 05:03:57 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     9354
IP address blocks:        219.100.224.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=55061B7BA6111F230BDB61E29781E46D0165E99E
        Validity
            Not Before: Jan  9 05:03:57 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=97600B7700BB047D1F8C6B2A8461121F49B7B656
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:ff:24:be:19:cb:4c:69:50:bd:ea:3b:70:74:
                    c6:98:cc:c8:43:56:e2:89:fd:18:5c:2f:68:bd:0d:
                    c6:c1:44:66:07:83:65:3b:e3:fc:f6:6a:3e:b8:21:
                    af:44:f5:8f:d9:99:8a:ea:99:e0:2d:28:03:eb:a4:
                    ff:e0:41:48:4f:e7:b5:4b:1a:96:21:aa:0f:25:f3:
                    d4:81:b3:d6:42:f3:78:96:55:3a:80:32:47:c7:63:
                    b6:84:d6:2d:35:32:d4:32:0e:13:2d:9a:01:57:fc:
                    bf:e6:af:1e:a6:40:d8:90:05:88:1f:e8:12:96:2a:
                    11:af:8c:cd:c7:36:6a:3f:8f:be:2c:51:19:6e:e5:
                    d8:18:21:3d:c1:ce:d8:3c:ba:61:00:7e:a3:91:d3:
                    bb:25:6f:53:05:71:fb:8f:b7:d2:0f:87:51:19:8c:
                    80:53:27:20:8a:ba:da:6a:3f:a7:df:0e:82:fa:66:
                    22:34:57:1b:50:20:53:85:be:44:f8:0c:3f:47:c8:
                    c3:4f:bf:3f:f0:f8:9d:66:70:61:15:a2:ef:48:cc:
                    a8:92:4c:d2:8e:30:3d:42:1f:07:c3:04:50:7c:91:
                    b8:57:c5:df:e3:73:0d:6f:ba:0b:1a:58:1f:4a:37:
                    cf:df:70:e5:71:d7:9f:f5:02:1b:b7:3a:ae:21:39:
                    0b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:60:0B:77:00:BB:04:7D:1F:8C:6B:2A:84:61:12:1F:49:B7:B6:56
            X509v3 Authority Key Identifier:
                keyid:55:06:1B:7B:A6:11:1F:23:0B:DB:61:E2:97:81:E4:6D:01:65:E9:9E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/VQYbe6YRHyML22Hil4HkbQFl6Z4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/VQYbe6YRHyML22Hil4HkbQFl6Z4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/822/l2ALdwC7BH0fjGsqhGESH0m3tlY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.224.0/22

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:66:4e:15:8f:9d:4a:41:14:98:4d:13:94:e9:c4:79:2e:
         e8:e4:b9:56:a7:ef:17:2e:d2:3b:32:60:63:48:55:8a:88:cf:
         2f:ba:9d:08:ec:17:79:45:6f:9e:72:54:6a:a0:81:63:8a:1f:
         f2:57:93:58:f2:1f:24:2d:12:22:30:45:2e:12:b0:45:b7:b1:
         8a:8a:87:0b:1b:18:bd:b7:ab:ea:40:3d:a2:6f:4f:28:f2:1a:
         a8:99:3f:c8:a9:3f:8f:ce:45:82:a6:06:87:e3:ee:04:4a:ef:
         23:11:93:63:3e:f8:7d:b5:08:ae:e5:73:f7:db:29:fd:26:e3:
         98:c5:28:2e:5f:ff:4b:6f:06:e5:1c:d0:f0:44:b0:b3:fe:9d:
         77:f7:53:c0:df:b5:8c:0e:de:bf:80:6e:41:11:40:15:7a:6d:
         fa:c0:75:43:7c:3b:17:ef:13:f7:d0:87:91:42:23:ee:77:df:
         4e:38:d1:f5:ad:ac:d4:57:c0:12:cc:23:13:a8:96:de:e4:c9:
         0c:f0:44:72:4e:bf:64:f7:4d:34:69:b0:fb:68:09:67:a9:4a:
         df:9a:69:b6:bd:b0:e1:31:d3:bb:91:c2:cf:d4:f2:ad:92:1b:
         f9:57:a2:33:ca:c8:bd:f3:a0:84:97:8b:dc:5c:26:b2:27:3b:
         52:88:23:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:32 2024 by rpki-client on console-ams.rpki-client.org