Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/905/Q6o5MU1dGM8EiJr-wpYe9-hNSTg.roa
File:                     Q6o5MU1dGM8EiJr-wpYe9-hNSTg.roa (raw, json)
Hash identifier:          St/onrWM9Zv1hFl9cGwhFvkYkmhefdgNiZptXV5gbMA=
Subject key identifier:   43:AA:39:31:4D:5D:18:CF:04:88:9A:FE:C2:96:1E:F7:E8:4D:49:38
Certificate issuer:       /CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
Certificate serial:       04
Authority key identifier: FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/Q6o5MU1dGM8EiJr-wpYe9-hNSTg.roa
Signing time:             Tue 03 Oct 2023 07:00:39 +0000
ROA not before:           Tue 03 Oct 2023 07:00:39 +0000
ROA not after:            Wed 18 Sep 2024 07:00:52 +0000
asID:                     24255
IP address blocks:        219.100.184.0/22 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FAEF57FF144D25094E460E0FD38C80379334ED6D
        Validity
            Not Before: Oct  3 07:00:39 2023 GMT
            Not After : Sep 18 07:00:52 2024 GMT
        Subject: CN=43AA39314D5D18CF04889AFEC2961EF7E84D4938
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:f2:9f:ee:99:11:5b:8c:48:1e:1d:70:fd:08:
                    7a:2f:8e:c1:2d:f1:24:59:65:37:a9:a1:60:7e:4e:
                    b0:df:8a:43:63:8b:1b:a2:4b:cf:0e:5a:1c:de:20:
                    9d:6a:5a:59:44:23:ff:3c:ac:d9:7e:f7:4b:1e:c3:
                    ce:ac:3e:4b:9a:f6:80:2e:58:ea:ad:e5:59:eb:ef:
                    14:d9:db:74:4d:45:d3:10:b9:a2:33:a1:36:95:1f:
                    47:21:4d:a1:ac:06:21:5c:27:73:68:1e:76:70:55:
                    46:c4:f0:33:80:a0:9a:1e:75:5f:e7:3f:bc:42:62:
                    9c:0d:66:96:33:64:c2:b1:14:36:ad:ed:ce:71:7d:
                    de:23:11:16:4d:b0:d2:cb:e5:0f:51:94:7b:0d:77:
                    04:c2:e9:50:2f:18:28:26:0c:e1:47:b7:4a:08:db:
                    e6:2b:eb:ea:06:bc:f7:9f:be:36:65:dc:f5:89:66:
                    01:24:6b:84:20:3c:eb:ec:90:72:67:74:ed:65:90:
                    45:79:46:dd:eb:02:0f:6f:fa:ac:8a:94:b8:4a:91:
                    6e:e2:3a:84:1c:00:4c:06:04:c7:6b:98:64:4f:e1:
                    fa:14:bc:9b:51:34:32:6d:49:d3:dd:b4:ca:e6:f7:
                    ea:b5:7f:2b:1d:3d:86:90:75:0f:82:9d:45:ad:ce:
                    9c:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AA:39:31:4D:5D:18:CF:04:88:9A:FE:C2:96:1E:F7:E8:4D:49:38
            X509v3 Authority Key Identifier:
                keyid:FA:EF:57:FF:14:4D:25:09:4E:46:0E:0F:D3:8C:80:37:93:34:ED:6D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/-u9X_xRNJQlORg4P04yAN5M07W0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-u9X_xRNJQlORg4P04yAN5M07W0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/905/Q6o5MU1dGM8EiJr-wpYe9-hNSTg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.184.0/22

    Signature Algorithm: sha256WithRSAEncryption
         1a:36:78:52:a5:60:4e:ae:58:63:92:89:6c:50:71:c4:d9:13:
         a8:ed:73:58:ce:89:76:e9:f2:e4:0a:b1:3c:50:5b:57:a2:e2:
         ca:07:de:cd:c2:60:b4:39:46:8d:23:73:99:54:8d:6d:0c:c7:
         cf:0b:ed:ae:1c:d1:6f:ef:e3:b7:41:cc:f7:20:ef:fd:75:96:
         d4:41:2f:f4:e6:10:8c:f9:b0:c7:40:29:d1:f4:87:76:00:b2:
         c6:ef:8b:92:4c:b0:a2:ec:81:40:9a:42:56:1b:3e:04:bf:23:
         d6:17:e6:41:a2:aa:d2:2f:d9:5d:da:a6:b1:a1:be:aa:c9:14:
         80:22:98:3b:85:97:ab:c0:fa:d8:9e:60:60:b4:93:12:f7:6f:
         46:b2:1e:16:15:1d:17:33:de:ff:3b:60:79:92:a5:30:ab:4b:
         6c:ef:0f:32:94:94:81:92:7e:9a:e9:d3:75:71:70:3b:89:97:
         4c:3e:59:84:11:70:bd:a5:f4:e1:0a:00:71:42:88:cb:d6:37:
         88:76:e9:d3:c1:41:a9:f4:06:48:93:d9:56:cd:62:f7:de:29:
         6f:5a:84:bf:2b:22:e4:f6:c5:9c:3f:9a:b3:44:14:92:ee:7b:
         bb:79:9a:ff:26:f6:13:a9:10:ae:84:33:33:a1:bf:19:b4:f5:
         8e:de:5a:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org