Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/la9q7m9OxxznB_ct86Yr13VWslQ.roa
File:                     la9q7m9OxxznB_ct86Yr13VWslQ.roa (raw, json)
Hash identifier:          z8JKJpmwb4PnSn9s3i3yBy0SqMosqBe0/z+vwYPTfFI=
Subject key identifier:   95:AF:6A:EE:6F:4E:C7:1C:E7:07:F7:2D:F3:A6:2B:D7:75:56:B2:54
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       3E
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/la9q7m9OxxznB_ct86Yr13VWslQ.roa
Signing time:             Thu 28 Mar 2024 08:35:42 +0000
ROA not before:           Thu 28 Mar 2024 08:35:42 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     2519
IP address blocks:        203.79.62.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 18:36:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 62 (0x3e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:35:42 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=95AF6AEE6F4EC71CE707F72DF3A62BD77556B254
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b8:ad:c2:72:2d:a5:7b:47:71:27:e3:a3:de:
                    13:af:f9:16:cf:ff:de:93:c6:4d:9a:22:75:b6:20:
                    32:2d:c2:72:bb:d6:16:13:c5:a8:82:12:86:f1:7d:
                    64:fd:e2:c3:76:ad:2e:79:7a:67:ba:e3:39:c2:46:
                    70:e1:66:62:00:70:b1:c9:7b:ac:36:4e:7d:fc:ec:
                    53:ff:57:5d:81:47:29:4b:8f:41:12:4a:eb:80:02:
                    4f:3e:11:95:05:34:6a:44:e3:a2:03:1b:55:f9:c2:
                    96:9c:a9:f8:53:7c:54:ae:84:13:76:95:21:15:3d:
                    2d:0f:85:83:27:1b:f7:1a:fb:7b:be:71:4e:03:94:
                    34:e5:1e:ed:52:cc:64:06:ed:1d:64:3f:57:8f:61:
                    19:0f:b9:d2:39:ae:5a:d7:43:05:fd:10:b0:8b:6a:
                    bf:40:92:c8:98:36:5d:98:75:a7:89:a1:a5:4d:d0:
                    0f:fd:be:2d:0f:63:17:0b:c6:23:45:34:d4:02:51:
                    d4:c1:0f:b4:38:9a:bf:4c:14:3b:17:6d:80:49:df:
                    8d:aa:60:03:1c:7a:53:b9:37:ac:ed:bf:99:fb:1a:
                    03:4b:f7:ba:ca:62:20:71:ea:2e:b0:4c:44:fe:c5:
                    26:da:66:8c:da:9e:c9:23:f7:f1:63:0e:04:12:c9:
                    79:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AF:6A:EE:6F:4E:C7:1C:E7:07:F7:2D:F3:A6:2B:D7:75:56:B2:54
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/la9q7m9OxxznB_ct86Yr13VWslQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:0f:cd:6c:43:0b:c8:b7:9e:54:7e:1b:21:7b:8f:b9:03:4a:
         8a:f0:98:08:4a:fd:d3:98:9e:ab:27:20:22:64:e7:56:f1:4b:
         1f:dd:21:eb:73:60:e2:70:43:86:1e:de:c3:bf:b3:fb:69:36:
         cc:37:d7:17:37:76:35:91:99:54:1e:e7:8a:08:6b:70:5e:31:
         04:73:76:ac:ff:3f:30:97:a0:49:5f:40:e3:26:83:bf:b5:82:
         63:df:19:b5:7f:71:bc:41:dd:8d:3b:a2:65:eb:08:7d:82:06:
         77:11:99:fe:d7:f3:55:06:74:42:e5:f3:fb:31:15:55:ee:a9:
         a9:be:72:61:a3:f1:01:bf:12:66:a5:81:1e:34:b3:fd:af:a4:
         14:00:dc:d3:d8:c3:a5:62:3a:40:26:64:86:70:0f:20:4e:47:
         34:ed:4d:13:4a:f7:c9:6c:00:6e:3e:da:31:f3:97:af:92:d3:
         b4:6c:ef:8a:a7:f5:07:87:35:aa:da:57:8f:5d:50:59:48:97:
         48:4c:f1:ca:a7:fd:6a:ed:99:bd:46:27:00:e3:fb:4a:97:d8:
         53:87:15:b3:df:94:38:fc:45:fc:f6:ac:72:22:a4:41:2e:5f:
         40:18:05:8f:e4:29:cb:37:9c:37:94:0e:12:d8:29:d7:33:2c:
         e3:38:62:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 19:48:02 2024 by rpki-client on console-fra.rpki-client.org