Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
File:                     hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa (raw, json)
Hash identifier:          t3CfgOBG4dtjEBRqwwrghaMBvwiXjANDuGNOEbbbKjY=
Subject key identifier:   86:AB:AF:06:53:85:FE:82:0D:05:E6:3B:FF:95:B1:BB:C6:44:79:B4
Certificate issuer:       /CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
Certificate serial:       62
Authority key identifier: 8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
Signing time:             Fri 10 May 2024 09:29:11 +0000
ROA not before:           Fri 10 May 2024 09:29:11 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     63804
IP address blocks:        101.78.4.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 98 (0x62)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D26E0D17E30D8BF5714F4BA92EEEB0D22DDDB1D
        Validity
            Not Before: May 10 09:29:11 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=86ABAF065385FE820D05E63BFF95B1BBC64479B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:e6:ce:67:4c:08:f6:34:0a:12:02:12:c8:f3:
                    fe:54:00:90:4b:1f:52:58:da:12:c6:f6:d6:e4:89:
                    14:1e:5f:1e:60:c8:23:08:1a:9b:ed:fa:00:bd:ba:
                    69:98:d8:1f:51:8b:0a:f1:a4:78:74:01:bd:14:f7:
                    e1:5e:1e:b7:45:b9:47:20:75:ec:d9:41:9d:3e:5c:
                    c8:99:fe:0a:fc:49:18:09:20:d0:4d:ef:33:d7:b0:
                    8d:82:1c:04:6a:9c:58:9d:67:12:79:17:83:82:05:
                    43:f2:7a:18:a1:38:70:47:10:2d:73:67:e0:a5:76:
                    49:b0:3b:80:97:62:31:12:06:da:0c:dd:af:2c:4b:
                    70:ff:fe:e9:51:90:f4:d3:de:44:2e:c2:52:8c:b4:
                    b9:71:fb:63:26:e7:2c:a4:8f:da:0c:34:fb:6e:bc:
                    ee:ab:c5:93:64:f2:20:44:4c:a3:85:86:a1:99:0f:
                    95:9d:50:9f:58:8a:7a:79:dd:ec:92:10:ab:d6:71:
                    40:cd:e2:b6:c8:b8:fc:5f:48:56:c1:2c:3f:e0:bb:
                    0f:7b:3b:2d:f9:ad:66:01:a0:2b:d4:79:3c:79:ab:
                    fd:ec:c8:3d:bd:7d:81:d0:f5:f5:b5:5a:3f:b6:b1:
                    d0:78:5a:e2:f5:e3:b3:91:0f:63:81:15:55:3a:7e:
                    0a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:AB:AF:06:53:85:FE:82:0D:05:E6:3B:FF:95:B1:BB:C6:44:79:B4
            X509v3 Authority Key Identifier:
                keyid:8D:26:E0:D1:7E:30:D8:BF:57:14:F4:BA:92:EE:EB:0D:22:DD:DB:1D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/jSbg0X4w2L9XFPS6ku7rDSLd2x0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jSbg0X4w2L9XFPS6ku7rDSLd2x0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/989/hquvBlOF_oINBeY7_5Wxu8ZEebQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.78.4.0/23

    Signature Algorithm: sha256WithRSAEncryption
         7e:ef:b5:c4:f0:9c:c6:e5:24:e7:04:67:98:3a:d0:93:38:77:
         5f:cc:d0:84:8a:cd:4b:83:d9:22:94:89:9e:35:e7:8e:eb:3b:
         fc:5f:19:34:66:18:ed:da:35:cb:81:42:14:a0:b5:c7:e9:88:
         89:7a:96:b7:fe:17:cf:c7:82:9d:2c:02:11:80:b7:52:07:bc:
         f0:61:fe:bc:5c:ad:c9:f9:83:87:d1:60:5c:20:2f:38:ec:7e:
         84:e4:d9:b4:99:79:ed:97:00:b2:3d:4b:66:ac:99:23:6b:a5:
         e6:e8:d1:74:87:3f:c1:a1:bb:29:56:ce:da:da:33:47:d4:cc:
         34:65:45:a6:e2:80:f9:ac:8c:fa:ec:f2:85:bc:8d:d8:60:c8:
         2f:63:45:54:45:8e:bb:fd:16:6a:2c:b3:0a:57:d7:b5:49:c4:
         fd:8a:e2:e2:72:4a:d7:1e:83:fa:35:4e:70:b6:da:f8:5e:b9:
         b8:82:69:90:78:8c:b5:0c:0e:b8:6f:16:c7:cf:cd:4d:65:90:
         76:f1:75:03:e8:ec:8e:c3:c1:47:5d:d1:01:47:99:8a:b0:c4:
         74:f1:53:1a:bc:9a:f5:15:00:82:69:7d:92:7f:5a:f3:b3:a0:
         02:e1:6e:23:b7:12:7a:14:74:20:84:57:7e:34:38:74:3a:e4:
         af:5d:7b:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:50 2024 by rpki-client on console-ams.rpki-client.org