Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/955/jVyKejBJ6ZewaawhTsgaZmXu4SU.roa
File:                     jVyKejBJ6ZewaawhTsgaZmXu4SU.roa (raw, json)
Hash identifier:          yb9gHBx7/brba8EJ5x7T89+ZjZaO+Lqc/csK1J8BmME=
Subject key identifier:   8D:5C:8A:7A:30:49:E9:97:B0:69:AC:21:4E:C8:1A:66:65:EE:E1:25
Certificate issuer:       /CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
Certificate serial:       24
Authority key identifier: 0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/jVyKejBJ6ZewaawhTsgaZmXu4SU.roa
Signing time:             Thu 29 Feb 2024 01:34:09 +0000
ROA not before:           Thu 29 Feb 2024 01:34:09 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     55385
IP address blocks:        119.47.0.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 36 (0x24)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BBCA90DCB80D622B18884EA1E0B3B7D40C61C52
        Validity
            Not Before: Feb 29 01:34:09 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=8D5C8A7A3049E997B069AC214EC81A6665EEE125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:ce:6a:71:6d:19:fb:ca:2e:db:b3:cf:6e:69:
                    3b:bd:b5:a1:8a:5b:18:c4:4f:39:3e:97:ab:6f:46:
                    ef:4c:b8:d1:9b:c0:19:8e:d2:a0:86:68:05:68:03:
                    6e:62:b6:10:0b:80:03:ff:aa:81:f4:b3:f4:3c:9f:
                    0e:0a:ac:16:62:d6:62:dd:8a:d2:e9:38:e5:dd:59:
                    e6:a6:67:52:d5:54:0a:26:c5:f2:1e:eb:95:84:0d:
                    50:ad:c4:8e:9e:24:77:4e:a6:3d:e0:bb:90:d6:d9:
                    23:27:09:4f:65:51:92:e9:42:5f:09:bb:9c:d1:34:
                    19:31:7a:eb:1e:87:fa:15:8c:c7:5b:67:74:b8:e0:
                    8f:71:c2:3b:8b:5b:b9:16:1d:69:82:47:e2:a6:f4:
                    63:ff:0b:08:9f:5f:73:59:53:81:d8:3e:7f:ec:f9:
                    22:3a:55:00:2a:c8:15:31:68:b9:a6:4d:b2:a0:31:
                    dd:2f:95:78:32:ce:7b:70:c3:80:ed:af:d6:fb:bd:
                    6d:86:cc:73:38:d1:6f:82:2c:b8:aa:da:da:a3:c3:
                    b0:0e:3c:14:ca:8e:c0:b0:ae:ec:c0:e0:b9:c7:3f:
                    79:3a:f5:12:28:da:d7:1d:be:ae:95:87:dd:d5:4c:
                    5b:fb:a2:48:dc:b8:14:b0:f7:78:2e:eb:2e:cc:08:
                    d3:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:5C:8A:7A:30:49:E9:97:B0:69:AC:21:4E:C8:1A:66:65:EE:E1:25
            X509v3 Authority Key Identifier:
                keyid:0B:BC:A9:0D:CB:80:D6:22:B1:88:84:EA:1E:0B:3B:7D:40:C6:1C:52

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/C7ypDcuA1iKxiITqHgs7fUDGHFI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/C7ypDcuA1iKxiITqHgs7fUDGHFI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/955/jVyKejBJ6ZewaawhTsgaZmXu4SU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.47.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c1:65:92:47:d5:07:ce:d6:70:ed:e9:60:f4:d2:4e:41:9a:47:
         f2:85:80:13:ca:59:80:6e:92:8b:03:69:fb:ee:09:5d:41:04:
         0f:bd:92:2d:1c:5c:a7:4d:e5:74:dc:7f:8f:f8:9d:5f:82:47:
         16:b6:94:63:3f:4d:be:8f:c5:01:ed:83:67:07:92:92:0b:13:
         43:97:48:70:20:ae:35:9b:2b:a0:37:e8:f7:45:8a:d0:8a:9b:
         b8:9b:b1:d9:c3:de:51:5b:19:85:89:81:6f:dc:fc:68:9a:2b:
         87:20:c6:eb:31:83:0d:04:5c:fa:7d:4b:64:d9:d6:db:18:35:
         02:ac:ba:7a:5f:94:eb:6b:d1:ed:58:70:71:e0:d4:e8:82:bf:
         e6:39:da:1b:53:e4:7e:2e:f5:b7:36:d9:b5:f6:33:72:0d:25:
         c7:15:19:d8:80:14:6e:0f:5f:8c:a5:07:ae:f7:cc:85:f6:66:
         ee:58:44:da:12:e1:e9:12:c0:c5:1d:94:02:88:f2:da:2f:7f:
         4a:1d:cd:b6:6b:a6:69:a4:2f:46:b5:31:4b:29:55:72:ab:ac:
         1e:e4:39:5f:48:4b:59:8f:a1:a3:8b:dd:f1:58:05:89:f7:dc:
         b3:aa:20:1a:d0:6b:44:59:eb:15:b2:cd:b0:e4:13:8f:d1:f4:
         aa:b4:20:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org