Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/g6C0tb-6UOvTOXzA7NmsXA8Wb3o.roa
File:                     g6C0tb-6UOvTOXzA7NmsXA8Wb3o.roa (raw, json)
Hash identifier:          O7b94iJBzFm/EL6n1qEJRvgYqJL285CuUKaQbQjjgHo=
Subject key identifier:   83:A0:B4:B5:BF:BA:50:EB:D3:39:7C:C0:EC:D9:AC:5C:0F:16:6F:7A
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       06
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/g6C0tb-6UOvTOXzA7NmsXA8Wb3o.roa
Signing time:             Wed 08 May 2024 07:33:35 +0000
ROA not before:           Wed 08 May 2024 07:33:35 +0000
ROA not after:            Thu 08 May 2025 07:05:01 +0000
asID:                     24279
IP address blocks:        219.100.192.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 6 (0x6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: May  8 07:33:35 2024 GMT
            Not After : May  8 07:05:01 2025 GMT
        Subject: CN=83A0B4B5BFBA50EBD3397CC0ECD9AC5C0F166F7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c6:ad:e1:19:d7:78:ac:1c:85:be:19:cd:a7:
                    d0:23:77:7a:89:ef:b5:08:96:8d:2a:a6:ea:c3:c0:
                    c3:96:d5:b8:53:e3:f3:79:34:3f:de:7d:36:54:be:
                    25:3a:0f:4f:2b:1e:20:5c:75:fa:7a:23:a0:22:7a:
                    41:bc:b4:84:d8:f3:3a:f6:ad:2e:ac:29:e4:a1:57:
                    93:f2:09:68:9e:7e:cf:e7:c3:e9:ab:71:2a:48:ca:
                    fe:2d:62:dd:1d:2b:66:8a:ec:fa:6e:90:b4:50:b3:
                    5c:66:99:39:a7:e5:9b:c3:62:eb:d9:4f:96:21:2c:
                    59:98:7e:6a:45:c0:3a:f3:a3:26:ae:0c:a8:5b:be:
                    65:91:2f:1d:fc:da:2f:b9:fa:1e:8c:63:6e:7e:9e:
                    06:8f:9d:45:d0:84:8f:da:62:52:6c:e2:89:41:ca:
                    5f:6b:50:85:a8:6f:cb:f8:93:46:c2:f2:ee:72:fa:
                    9b:53:bf:23:a0:31:f7:b2:0a:c9:c6:ba:9a:39:d6:
                    b8:d5:3d:3d:38:fa:a7:9d:ae:9e:2c:80:d6:cf:69:
                    ef:1b:4b:39:3f:4a:e7:38:37:d2:90:6f:17:92:ce:
                    ea:da:8f:f8:df:e4:e0:fa:7b:2f:ac:09:a2:7c:24:
                    84:ca:09:02:c5:01:73:d8:6d:f8:8c:ac:c9:0e:31:
                    77:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:A0:B4:B5:BF:BA:50:EB:D3:39:7C:C0:EC:D9:AC:5C:0F:16:6F:7A
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/g6C0tb-6UOvTOXzA7NmsXA8Wb3o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.100.192.0/22

    Signature Algorithm: sha256WithRSAEncryption
         96:4f:f5:65:88:32:64:3f:63:e8:40:13:80:08:a6:14:5a:41:
         9c:ad:53:b7:58:ab:c4:8f:81:c9:1b:20:3e:bd:24:f5:02:6e:
         bf:cd:a2:f6:46:63:f9:72:22:fd:fe:42:46:91:3a:32:c7:f2:
         d7:cc:b5:5d:82:35:85:f5:a5:00:b8:22:12:48:75:00:cb:b4:
         7e:f8:d5:59:42:bc:a3:b2:c5:8d:c4:7e:7e:81:91:cb:d9:e1:
         e6:10:96:b9:16:ae:6c:87:71:d8:7a:4c:61:68:9c:c6:93:9f:
         85:7c:4e:80:94:44:15:86:04:c2:5d:7c:de:0a:d7:f7:98:8b:
         af:5f:51:18:db:c8:bd:10:fb:a3:ad:5d:4e:ad:cf:3e:d7:2a:
         be:58:57:b1:ee:20:3b:ff:a2:17:9d:66:d3:59:cb:e1:6e:43:
         0d:a6:83:e8:06:3c:44:95:ae:96:91:fb:67:b7:93:fb:b5:89:
         66:3a:97:7e:99:bc:aa:ce:d3:8f:4c:67:c1:a6:9e:36:66:6f:
         c4:45:80:f4:5d:7d:76:71:ff:88:72:66:bc:92:81:65:a4:79:
         28:44:10:ea:99:a2:18:6b:a3:ee:29:b9:c6:49:31:69:6a:48:
         27:bc:95:0d:ca:b9:a5:54:4f:ba:20:3f:b9:54:62:66:83:bd:
         ab:b0:5c:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:02 2025 by rpki-client