Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/882/TQF2qWIPpX1lhnPIu-9ySps9NuI.roa
File:                     TQF2qWIPpX1lhnPIu-9ySps9NuI.roa (raw, json)
Hash identifier:          hNgDLyBmdvGcz7VNadVUZkWN3kvbi6NUcn02O44F6Io=
Subject key identifier:   4D:01:76:A9:62:0F:A5:7D:65:86:73:C8:BB:EF:72:4A:9B:3D:36:E2
Certificate issuer:       /CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
Certificate serial:       11
Authority key identifier: B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/TQF2qWIPpX1lhnPIu-9ySps9NuI.roa
Signing time:             Sun 08 Oct 2023 23:27:03 +0000
ROA not before:           Sun 08 Oct 2023 23:27:03 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     59127
IP address blocks:        113.213.192.0/19 maxlen: 19

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B3935EEBB426B5FF872B140016A4441CDE239F3F
        Validity
            Not Before: Oct  8 23:27:03 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=4D0176A9620FA57D658673C8BBEF724A9B3D36E2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:26:ef:32:9c:e8:9e:0c:fd:8a:49:db:26:70:
                    85:17:e5:fc:4d:7c:ae:80:cb:bd:ec:2e:9d:85:7a:
                    78:e2:b5:77:65:db:f9:a5:db:39:12:8b:a3:b3:60:
                    02:c2:fb:89:39:6e:9a:f5:84:56:73:81:80:59:32:
                    6d:7a:48:a2:b1:42:e3:b4:54:fd:cf:1c:ca:da:56:
                    f9:fb:11:bb:b5:07:46:3e:8a:2a:52:e8:3f:59:af:
                    62:44:52:fc:ba:a5:8e:6b:33:7d:69:fb:8d:4c:58:
                    96:14:96:14:01:04:cf:7d:c5:d4:66:44:00:63:71:
                    60:98:a9:78:24:23:6a:d3:76:1c:e8:89:3c:75:c9:
                    03:04:60:e8:9d:5a:bf:64:ed:c0:0d:1c:c7:4a:9a:
                    f8:64:f5:39:1c:fd:df:99:83:bc:0b:51:9b:dc:b3:
                    4e:bd:ac:71:af:36:8a:cf:0a:b4:7b:2b:94:7f:11:
                    39:42:4b:49:a4:04:c5:e5:60:ff:f0:c8:5e:d1:89:
                    7d:36:55:f9:88:64:55:3e:fc:10:26:82:89:e5:7a:
                    94:4d:c4:7a:bd:83:af:56:e8:13:8b:98:43:db:cf:
                    6f:06:ab:9e:4d:c0:20:7d:42:19:05:8d:b3:81:78:
                    e4:e2:6d:b1:96:9c:f8:9b:db:c7:b3:f8:fd:15:4e:
                    23:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:01:76:A9:62:0F:A5:7D:65:86:73:C8:BB:EF:72:4A:9B:3D:36:E2
            X509v3 Authority Key Identifier:
                keyid:B3:93:5E:EB:B4:26:B5:FF:87:2B:14:00:16:A4:44:1C:DE:23:9F:3F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/s5Ne67Qmtf-HKxQAFqREHN4jnz8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/s5Ne67Qmtf-HKxQAFqREHN4jnz8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/882/TQF2qWIPpX1lhnPIu-9ySps9NuI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.213.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         82:db:68:7f:19:2d:76:3e:1c:f2:62:99:82:a4:e9:6d:09:d7:
         93:7e:ab:fa:55:0f:4d:fb:51:8f:29:d0:7f:56:30:1f:cb:8d:
         50:fa:82:37:a2:98:8f:06:2a:43:28:54:89:72:19:30:4b:4e:
         9c:65:c1:5a:53:99:97:47:5b:16:74:46:7e:ab:96:e5:85:61:
         15:6a:3a:67:3e:12:ad:28:6b:cb:cb:b2:5e:d1:11:4a:20:b7:
         67:f6:44:d9:37:f9:30:f0:d8:c0:61:83:37:74:2a:b2:5a:99:
         47:c5:bd:62:a6:57:eb:bc:c6:80:11:88:ef:ed:d6:97:49:4e:
         1a:d7:4c:ef:49:1d:e2:95:bf:ea:66:a9:1f:60:96:30:d5:a2:
         9d:f4:48:df:5e:ad:40:fe:ef:94:76:4e:a1:93:12:f4:6f:59:
         0c:a9:2f:18:86:ed:02:e8:40:46:41:aa:35:72:fc:7f:15:b9:
         5d:3d:a9:a8:a8:3b:c2:a5:e3:62:ac:9c:e3:b5:94:20:db:5e:
         87:27:03:c1:86:2f:29:0b:21:9b:89:4f:14:6c:fe:98:63:c9:
         6f:01:a3:47:b7:34:2c:50:4b:21:7a:26:9a:aa:d2:e7:8e:b1:
         b0:a3:1a:b7:28:3b:0a:b0:c1:4e:ec:12:8f:88:c0:db:9d:77:
         80:1e:f3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:47 2024 by rpki-client on console-fra.rpki-client.org