Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/8Vfx8GyphXbWZkHk3gVXUc-5d0I.roa
File:                     8Vfx8GyphXbWZkHk3gVXUc-5d0I.roa (raw, json)
Hash identifier:          YmSf4wb6ltNyymSFXG8K616zik9FOJEaoF7Xcmv6NA0=
Subject key identifier:   F1:57:F1:F0:6C:A9:85:76:D6:66:41:E4:DE:05:57:51:CF:B9:77:42
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       44
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/8Vfx8GyphXbWZkHk3gVXUc-5d0I.roa
Signing time:             Sun 31 Mar 2024 01:30:27 +0000
ROA not before:           Sun 31 Mar 2024 01:30:27 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23778
IP address blocks:        219.100.96.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Mar 31 01:30:27 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F157F1F06CA98576D66641E4DE055751CFB97742
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:74:4d:b6:b6:57:00:44:81:d2:02:29:ae:eb:
                    5c:a4:d6:d7:17:8c:a4:6c:cf:26:2d:c1:ea:0f:ae:
                    b2:0c:b3:80:6e:49:00:52:28:1e:80:86:30:1e:39:
                    aa:53:24:90:a3:4c:7d:4b:6c:e6:c6:c4:5b:f8:93:
                    c8:dc:51:49:35:d9:5b:c6:e2:6a:39:3e:ca:9d:c5:
                    a9:9c:fb:08:87:a4:a9:ad:aa:3e:31:24:b5:d0:ce:
                    92:55:45:fa:75:25:67:34:f2:f7:e2:f8:0e:1a:bf:
                    7c:67:cb:1f:85:13:a7:4e:1f:5d:2d:88:e1:f3:ce:
                    fd:49:be:6e:81:c5:df:15:25:c7:31:bd:56:e0:b8:
                    ed:2c:6e:d9:8e:34:d5:52:41:0c:5b:7c:6b:23:58:
                    06:b2:35:8d:c4:07:07:a9:b5:f2:8e:03:b0:78:66:
                    2b:d8:2f:2b:2a:1d:71:2b:d3:29:8b:4d:b7:ba:f7:
                    f7:3c:bd:7f:7c:46:07:2c:11:30:a2:27:63:0b:89:
                    f1:4f:c1:96:02:95:70:e1:c6:2b:9b:98:5e:53:75:
                    33:38:f0:07:31:c2:38:f3:44:7f:54:b9:ac:f6:9d:
                    4c:32:53:85:ba:a9:19:41:02:d8:eb:19:32:90:c2:
                    b5:0b:ba:b4:27:5f:bb:95:24:ed:80:2c:24:6e:c1:
                    a5:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:57:F1:F0:6C:A9:85:76:D6:66:41:E4:DE:05:57:51:CF:B9:77:42
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/8Vfx8GyphXbWZkHk3gVXUc-5d0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.96.0/22

    Signature Algorithm: sha256WithRSAEncryption
         45:44:da:68:7a:2b:91:0f:56:88:ff:d2:f7:c8:81:cc:e9:22:
         6d:b5:c8:fe:34:0b:92:03:ea:90:84:a9:ff:02:85:7c:9a:2c:
         c1:f6:db:e8:2a:4b:47:32:46:44:ae:c7:db:0d:26:1d:4c:eb:
         ac:ae:b2:34:f5:46:68:16:74:40:a1:e9:d1:69:07:50:f5:cb:
         cb:8e:85:1f:17:2e:50:83:2c:d4:5a:57:e4:b1:c7:07:3d:61:
         38:20:10:27:b9:c7:d2:3d:7b:8b:cc:44:70:e4:c8:40:44:d5:
         12:50:02:e6:a4:a3:6b:e2:25:11:97:25:84:0c:35:46:40:2f:
         56:56:d2:65:88:2f:72:71:3f:7c:34:1b:d4:eb:ff:f4:c2:30:
         02:a8:09:99:54:5c:93:d5:47:e7:85:9d:e0:6f:e2:a5:84:88:
         e9:eb:6a:7e:96:c7:e0:22:01:ac:38:45:cb:75:0d:8b:d3:85:
         bc:2a:76:c3:c5:38:54:fa:c3:92:08:b7:cf:2b:88:8e:a3:74:
         4e:9a:86:ce:4f:10:0f:01:39:2b:3f:58:a3:88:40:3a:52:33:
         59:e1:3a:0a:8a:1b:cd:ca:45:23:20:57:c4:f7:c4:e0:f6:80:
         27:91:b2:29:28:a4:d7:d5:9b:15:28:40:14:c5:d0:35:f9:36:
         16:a6:96:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org