Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/948/MCIldPKdhXXyfTuuf-0wNe6IXNw.roa
File:                     MCIldPKdhXXyfTuuf-0wNe6IXNw.roa (raw, json)
Hash identifier:          4inp0IskrjdjaaQoJvoVg6F0qilu25zuSL3q4dKM+7c=
Subject key identifier:   30:22:25:74:F2:9D:85:75:F2:7D:3B:AE:7F:ED:30:35:EE:88:5C:DC
Certificate issuer:       /CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
Certificate serial:       25
Authority key identifier: C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/MCIldPKdhXXyfTuuf-0wNe6IXNw.roa
Signing time:             Sun 30 Jun 2024 01:32:39 +0000
ROA not before:           Sun 30 Jun 2024 01:32:39 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38628
IP address blocks:        116.193.96.0/19 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C4B9536C4EC785B8812E53A219D2B09A7DCBCE0C
        Validity
            Not Before: Jun 30 01:32:39 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=30222574F29D8575F27D3BAE7FED3035EE885CDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:0d:63:1d:57:9a:1e:02:4e:f5:3a:f9:35:ec:
                    9b:20:5a:8b:d2:72:0c:a9:5f:86:4e:ae:3d:b8:13:
                    64:95:3f:a6:42:e5:25:65:ff:96:f0:6b:78:f6:87:
                    a4:02:e4:1e:de:2b:85:eb:9a:f6:78:a6:5d:74:00:
                    d3:da:03:a9:30:8e:57:a4:25:0b:e7:db:71:81:bc:
                    2a:0a:d7:2b:d3:35:16:09:09:59:8b:9f:49:bd:15:
                    81:52:d6:74:6e:7d:82:43:c3:91:16:ce:44:99:b0:
                    d8:ed:a1:ff:c0:ab:b2:8c:ed:89:92:f1:44:45:9f:
                    d6:65:8e:ef:db:7b:a1:4e:30:ec:6e:87:0d:c9:7b:
                    db:f4:8c:05:5b:6d:93:f7:7c:22:43:25:1b:9b:99:
                    c9:13:82:aa:3b:18:2b:94:17:5b:4c:b2:de:cf:5b:
                    98:cb:a4:07:be:98:13:80:e0:7e:0a:75:be:72:41:
                    6a:5a:4d:37:2f:f5:9b:6d:28:c3:20:cc:70:15:f3:
                    71:62:24:ea:0c:c7:81:06:2e:2a:5f:f6:7e:28:16:
                    00:de:16:c3:86:6f:09:4c:05:ea:d4:e3:30:b4:54:
                    55:a0:71:b6:70:29:0e:e1:f1:27:86:7b:38:69:c8:
                    32:97:b1:90:74:69:cd:60:9a:b3:8d:83:27:0c:24:
                    29:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:22:25:74:F2:9D:85:75:F2:7D:3B:AE:7F:ED:30:35:EE:88:5C:DC
            X509v3 Authority Key Identifier:
                keyid:C4:B9:53:6C:4E:C7:85:B8:81:2E:53:A2:19:D2:B0:9A:7D:CB:CE:0C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xLlTbE7HhbiBLlOiGdKwmn3Lzgw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/948/MCIldPKdhXXyfTuuf-0wNe6IXNw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.193.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:a6:4a:f0:b6:42:7c:c7:be:c8:63:68:41:61:76:17:77:aa:
         5b:7e:56:4d:f9:29:8f:cd:b1:f3:c5:88:cb:39:5a:f3:94:e6:
         59:f9:98:75:52:27:98:0c:54:cb:03:aa:37:1e:d8:89:87:47:
         6f:bd:a5:65:9d:bc:fd:73:69:3f:28:ff:77:34:78:00:8c:0c:
         c3:76:24:55:92:66:9d:2d:05:66:8d:28:94:0d:bb:66:0c:24:
         de:06:c6:65:a0:39:1b:ca:c1:c1:5c:86:01:13:e2:04:a0:22:
         6e:ef:cd:d0:15:58:34:f2:b8:0c:a3:29:65:29:4c:40:3c:56:
         2a:fd:32:9a:7a:7c:ec:8c:31:f9:94:f2:17:21:a8:a4:73:6b:
         bd:a7:9a:c0:12:99:ae:60:4d:02:05:e6:ea:a2:34:99:26:a6:
         26:b8:86:26:5f:14:ed:a2:9b:ed:cb:8b:21:9f:fe:3d:99:a4:
         8c:be:bd:3d:a4:01:3a:2e:4b:55:48:85:23:33:7f:6a:da:0a:
         af:87:24:52:d1:d9:8e:e4:ca:fd:cc:8e:9f:61:3c:4d:32:8f:
         9c:49:46:95:c4:e8:e1:aa:df:cd:e2:d4:d2:ca:55:80:c3:cd:
         28:84:46:80:ac:c8:9e:35:45:66:6e:6a:40:e7:b5:9e:34:6d:
         de:42:25:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org