Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/859/n5bp--1eJ2hMTU5NYXYEHQUIruc.roa
File:                     n5bp--1eJ2hMTU5NYXYEHQUIruc.roa (raw, json)
Hash identifier:          gIZenNlke8h0lbAeuBcw54ZlNGUwfv0Dr6wFxpZWkv8=
Subject key identifier:   9F:96:E9:FB:ED:5E:27:68:4C:4D:4E:4D:61:76:04:1D:05:08:AE:E7
Certificate issuer:       /CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
Certificate serial:       43
Authority key identifier: 3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/n5bp--1eJ2hMTU5NYXYEHQUIruc.roa
Signing time:             Sun 31 Mar 2024 01:30:27 +0000
ROA not before:           Sun 31 Mar 2024 01:30:27 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23778
IP address blocks:        211.19.196.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 67 (0x43)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F90F2FBCAA2538CA6574FB22D8C6EB3E9CA046B
        Validity
            Not Before: Mar 31 01:30:27 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=9F96E9FBED5E27684C4D4E4D6176041D0508AEE7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8b:a0:ec:c4:4b:ac:55:98:d1:76:3b:1c:0d:
                    cb:40:3f:70:34:8d:64:65:7b:d2:0e:56:7a:f1:82:
                    f5:c5:17:d4:47:d0:f0:26:3a:f7:a3:5b:ef:be:62:
                    f0:ed:ff:3f:52:af:2c:9f:d1:79:74:72:0d:97:23:
                    38:9b:41:f3:ca:e2:d8:67:73:bd:4b:d9:df:ab:cd:
                    97:5e:48:85:5e:bc:1d:8e:72:fd:90:a9:3d:ce:af:
                    34:71:f5:81:b3:6f:ef:3e:04:a1:df:ac:1e:e6:8e:
                    c5:e2:e6:29:0a:67:27:1b:b2:d1:e1:fa:19:33:3b:
                    22:c8:de:dc:8f:9f:ee:dc:b1:2f:fe:45:a6:ae:0e:
                    b9:93:8c:b2:4f:35:80:9b:78:0f:e7:89:b8:15:a1:
                    cd:ca:3a:ad:bc:de:f6:81:4c:e1:4b:be:64:2a:eb:
                    c8:0e:50:21:7d:52:f6:98:c9:60:f6:d5:52:fa:42:
                    91:6e:87:4b:c7:74:5f:28:20:90:53:bd:9d:5c:64:
                    61:e1:12:eb:7e:ce:d0:5c:19:94:4b:e9:07:97:54:
                    cf:54:1f:47:54:5c:0b:33:61:2a:2a:45:9d:b2:b5:
                    9b:ab:09:a1:a0:34:dd:90:1f:7e:35:12:cb:14:3c:
                    80:4a:65:a7:ea:27:4d:e6:26:26:4e:f5:74:77:bf:
                    a4:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:96:E9:FB:ED:5E:27:68:4C:4D:4E:4D:61:76:04:1D:05:08:AE:E7
            X509v3 Authority Key Identifier:
                keyid:3F:90:F2:FB:CA:A2:53:8C:A6:57:4F:B2:2D:8C:6E:B3:E9:CA:04:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/P5Dy-8qiU4ymV0-yLYxus-nKBGs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/P5Dy-8qiU4ymV0-yLYxus-nKBGs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/859/n5bp--1eJ2hMTU5NYXYEHQUIruc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.19.196.0/22

    Signature Algorithm: sha256WithRSAEncryption
         84:08:fa:80:aa:ff:b6:a1:90:f3:39:29:26:0d:90:8f:6c:71:
         0e:d3:3e:0b:7e:90:66:23:b6:3a:f6:85:e6:74:ef:4d:eb:a3:
         fb:59:dd:c7:a4:c0:d5:b5:f4:0e:c3:f3:52:35:ce:1d:42:75:
         c9:66:6c:e9:a8:97:86:09:fb:ad:50:ad:ba:a1:cb:76:20:e5:
         31:42:9b:09:6d:dd:31:41:53:b8:7b:d6:18:f0:d9:7d:10:27:
         71:89:0d:3c:29:51:99:ff:e3:5c:6b:15:9d:49:5f:fc:87:bd:
         2d:3e:cb:26:db:7e:33:2b:ce:4c:64:10:fe:d7:57:be:b9:ab:
         29:bf:47:68:29:be:b2:b6:14:8b:ca:01:ea:52:d6:04:82:20:
         a3:2c:3d:77:21:72:e0:e4:55:6b:43:4e:82:6e:06:30:f3:66:
         69:13:b6:98:72:62:55:02:d4:74:ff:11:9c:9c:4e:45:a6:8e:
         c4:a3:24:fd:02:7b:23:58:ac:ca:ef:9e:a4:84:1d:a3:21:5f:
         5d:1e:7c:6d:34:84:4a:70:80:e7:08:26:35:47:05:21:0f:e3:
         cf:25:73:a8:14:87:31:04:13:ea:9a:4e:17:b7:29:77:29:3f:
         81:71:23:ea:da:a3:18:ab:db:f3:0e:40:0e:8b:54:84:09:41:
         15:4b:c1:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 1 15:54:44 2024 by rpki-client on console-ams.rpki-client.org