Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/958/JCyeBQnKTI99iaIHOpr515ca1nw.roa
File:                     JCyeBQnKTI99iaIHOpr515ca1nw.roa (raw, json)
Hash identifier:          tPQnWJ1lt5w9ZZE0VaqE1jJ5377jH+BehwM0PgkB11w=
Subject key identifier:   24:2C:9E:05:09:CA:4C:8F:7D:89:A2:07:3A:9A:F9:D7:97:1A:D6:7C
Certificate issuer:       /CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
Certificate serial:       8A
Authority key identifier: 99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JCyeBQnKTI99iaIHOpr515ca1nw.roa
Signing time:             Thu 29 Feb 2024 01:30:36 +0000
ROA not before:           Thu 29 Feb 2024 01:30:36 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     38631
IP address blocks:        119.235.232.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 22 Jun 2024 01:30:49 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 138 (0x8a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9904ECBCD85F22A2E8AE7E1F991E8345D06A9816
        Validity
            Not Before: Feb 29 01:30:36 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=242C9E0509CA4C8F7D89A2073A9AF9D7971AD67C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:b4:da:b3:a3:85:be:7f:2b:07:ae:4d:64:0f:
                    fe:24:d0:c7:9f:4a:e6:8b:5c:00:15:85:e4:4f:2d:
                    7c:fd:49:e6:b9:cc:64:1c:9e:83:6f:81:a7:57:f6:
                    9f:20:17:c4:b5:aa:a1:75:49:0f:34:a0:7e:3f:9b:
                    41:19:df:3d:eb:9c:02:46:9e:c8:e1:61:f0:6e:9d:
                    3b:19:e4:59:16:8f:04:0a:c6:40:18:b5:98:a2:21:
                    71:99:c6:7d:f2:f7:96:9f:54:41:08:39:2c:03:22:
                    38:72:6c:12:23:ec:b1:c0:88:a4:3a:fe:52:ac:cf:
                    1f:8f:fb:24:6d:df:db:b0:06:9a:91:b9:bf:6c:be:
                    b9:fb:91:34:27:5c:6f:2e:df:7b:40:6a:8c:a0:4c:
                    2e:d6:7e:23:c7:75:c5:31:43:a4:0f:26:96:c5:a2:
                    3b:63:39:02:4a:01:4a:c9:53:65:3b:52:31:04:5a:
                    56:fc:11:46:7f:4e:77:f4:12:68:e1:fb:63:ba:f6:
                    94:12:dc:d7:f5:e8:ec:0c:c8:b1:7e:71:78:a7:0c:
                    97:16:29:28:7a:98:ac:aa:15:20:18:b2:7e:5c:a5:
                    22:e4:a3:44:76:bc:4f:9e:9b:8c:63:3e:2f:90:3b:
                    3b:e6:eb:d5:2b:4f:4d:d3:97:aa:1f:ad:34:5f:f0:
                    04:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:2C:9E:05:09:CA:4C:8F:7D:89:A2:07:3A:9A:F9:D7:97:1A:D6:7C
            X509v3 Authority Key Identifier:
                keyid:99:04:EC:BC:D8:5F:22:A2:E8:AE:7E:1F:99:1E:83:45:D0:6A:98:16

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/mQTsvNhfIqLorn4fmR6DRdBqmBY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/mQTsvNhfIqLorn4fmR6DRdBqmBY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/958/JCyeBQnKTI99iaIHOpr515ca1nw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.235.232.0/24

    Signature Algorithm: sha256WithRSAEncryption
         57:a0:22:ea:74:9e:9c:2c:e3:d7:e4:6c:99:dd:f1:47:f6:3b:
         ba:fd:07:bf:79:b6:5d:51:45:0d:e8:da:1a:bc:16:d5:dd:6a:
         ec:73:6a:0c:76:60:cf:e5:a6:69:48:ed:41:60:10:96:65:65:
         32:b6:92:5f:9a:18:46:7b:5c:5c:6e:f9:46:42:21:b6:4c:0e:
         cc:17:87:0d:04:77:ae:5e:d3:51:be:20:2e:3c:96:78:a0:ce:
         09:6e:af:7f:60:90:e5:ee:b5:c0:6e:5c:bf:68:5e:f3:f3:0f:
         f2:5e:e4:c0:59:34:4f:c9:a2:7b:c1:bd:ad:83:f3:0d:6f:a6:
         22:31:88:8d:5c:6c:16:38:0c:6b:8d:c8:78:97:cd:2d:53:38:
         d0:37:88:58:2b:14:fd:22:ca:15:be:e6:eb:9c:eb:f0:fd:61:
         82:30:71:65:ee:15:ed:72:ba:2e:44:4e:19:29:a9:48:5a:8e:
         72:f3:cb:80:f4:b2:db:5a:2d:32:77:81:e7:12:4b:e9:3c:53:
         67:2a:de:58:87:5f:43:46:c5:c4:45:a4:4d:57:ad:3b:f9:4d:
         71:e2:c1:ee:53:6b:71:f6:0d:24:05:df:48:5c:15:7d:11:2c:
         33:db:70:26:16:ef:86:35:b6:70:27:6b:01:b6:18:20:cc:9b:
         ed:e4:22:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 15 02:01:47 2024 by rpki-client on console-fra.rpki-client.org