Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/GrER284vfwUlv5mZnExLK4DCD5Q.roa
File:                     GrER284vfwUlv5mZnExLK4DCD5Q.roa (raw, json)
Hash identifier:          +cmwPsXCHJEKst7A0s0gTP2q32NJ6DzSSv4qpOwr6fs=
Subject key identifier:   1A:B1:11:DB:CE:2F:7F:05:25:BF:99:99:9C:4C:4B:2B:80:C2:0F:94
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       2C
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/GrER284vfwUlv5mZnExLK4DCD5Q.roa
Signing time:             Sat 01 Jun 2024 06:45:17 +0000
ROA not before:           Sat 01 Jun 2024 06:45:17 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        183.90.224.0/19 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:17 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=1AB111DBCE2F7F0525BF99999C4C4B2B80C20F94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:e8:74:ed:e6:40:9b:b2:47:49:a4:bf:aa:
                    da:0b:96:ec:92:01:87:ca:c3:39:6c:7c:e0:0b:a2:
                    9c:f0:16:3e:1c:eb:da:99:d5:9b:69:44:fa:48:8f:
                    72:0d:74:8b:44:c4:17:07:37:d3:a8:bd:21:33:b9:
                    26:8e:cc:5f:f1:a1:44:92:03:9e:6f:4a:77:43:3e:
                    54:86:e7:35:ec:44:4e:ba:d7:69:65:f5:d9:8c:57:
                    58:2b:48:60:76:f9:c4:73:27:c8:f1:3d:2d:23:32:
                    06:3e:1c:d5:a5:b2:1f:f3:df:b1:cd:3e:b2:b7:7f:
                    96:5b:9d:49:0b:e8:a4:9b:9c:2c:cd:b9:30:ce:a2:
                    e3:b6:ae:61:d8:02:f4:fe:0d:85:ef:5a:55:f9:0c:
                    45:12:bf:83:13:5b:ab:31:a1:b2:53:78:be:d5:9b:
                    b7:2b:b2:72:f7:df:ea:e1:45:b1:af:c5:5f:51:9c:
                    c6:d4:e5:ae:b6:a3:f4:69:c2:5c:35:6e:e9:b2:f2:
                    0c:84:ec:45:ce:bd:0d:ca:d2:db:52:3b:d8:dc:49:
                    c3:93:f2:3a:a4:cb:d1:62:c9:76:b6:41:79:fa:c1:
                    89:2e:81:03:d9:cb:2c:60:e9:05:54:07:9b:1e:84:
                    e0:ac:d3:f7:a0:ec:4e:5d:95:4c:8b:2c:67:40:7f:
                    00:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:B1:11:DB:CE:2F:7F:05:25:BF:99:99:9C:4C:4B:2B:80:C2:0F:94
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/GrER284vfwUlv5mZnExLK4DCD5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.90.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         63:08:44:a5:de:ab:4d:dd:dc:7b:ec:90:d9:45:2b:35:93:4d:
         e9:f3:6e:ba:e0:31:9c:ed:62:a6:bc:38:2b:b5:c7:a3:42:b0:
         fc:f5:7d:40:24:e2:95:12:ad:82:be:1b:87:65:bb:41:e1:ac:
         72:8a:69:5f:34:fe:66:e2:ee:7b:fb:9b:56:30:7e:9b:2c:f5:
         29:28:54:64:3a:72:68:32:42:9a:8f:8d:0a:23:28:63:b0:2e:
         22:fb:33:8d:ab:3c:5c:62:b3:2e:aa:14:23:2c:63:0a:a5:4a:
         e3:4e:32:3b:5d:b8:e7:c5:ac:17:7d:ea:2b:b3:74:f6:b3:57:
         17:17:36:2a:23:6f:f4:c0:2e:1c:37:3c:c0:2c:bd:8f:94:69:
         18:27:b5:a2:a7:ab:01:3d:db:df:fe:5a:a6:5a:9b:b5:cf:c8:
         03:22:d8:cf:9f:c8:52:ad:0f:34:1c:13:60:41:91:86:5c:5f:
         d0:88:4c:47:df:96:1e:1a:48:34:5d:8b:39:2c:46:91:1a:f8:
         2f:5c:56:46:17:64:53:4c:42:a8:90:33:58:22:d1:5b:a8:4f:
         7f:49:c9:da:dd:b3:80:79:b5:07:77:ca:6a:c3:f0:35:d5:db:
         03:98:d3:60:8d:31:71:ce:65:a2:b7:7f:f4:db:bb:69:2c:55:
         e5:4a:db:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:07 2024 by rpki-client on console-fra.rpki-client.org