Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa
File:                     6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa (raw, json)
Hash identifier:          s8N21nayat0LaOn90kwx9uMe+7QoE9Vahswe+ydjznk=
Subject key identifier:   EB:03:2E:1F:AB:F0:54:C8:4B:DD:DE:F2:1A:7C:A3:9B:D5:EC:1E:14
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       4F
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa
Signing time:             Sat 31 Aug 2024 01:30:26 +0000
ROA not before:           Sat 31 Aug 2024 01:30:26 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18144
IP address blocks:        36.53.232.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug 31 01:30:26 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=EB032E1FABF054C84BDDDEF21A7CA39BD5EC1E14
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a2:01:71:d9:a5:95:04:b8:19:97:50:51:46:
                    be:2f:a1:29:7f:b9:30:b6:f1:2b:e0:85:4c:e4:fc:
                    e9:fd:9c:29:a3:70:65:ee:90:b7:1d:ef:7b:f0:a5:
                    34:27:7a:83:2c:c9:ea:11:a9:be:a1:76:e2:f3:39:
                    70:f8:6a:e9:fc:6a:49:6a:0a:df:c2:d6:61:37:a4:
                    4b:81:67:df:a8:71:56:ee:7d:12:e0:eb:d1:26:dd:
                    40:e4:d4:52:f9:35:75:47:b6:e7:b2:ea:a6:fa:43:
                    df:fb:44:db:98:9f:5b:3c:16:6e:3c:81:b0:c3:87:
                    96:97:11:74:79:1c:9c:97:64:a5:6f:65:c8:ad:46:
                    95:91:c2:1f:97:a7:b5:8a:49:b1:16:af:28:e8:3c:
                    21:a1:a4:58:43:3a:64:62:56:d9:55:ad:e1:31:8f:
                    15:bc:30:a2:e5:27:fb:5f:69:c8:49:64:aa:42:86:
                    0a:d7:98:80:c5:b3:a1:f1:1c:30:d6:33:65:9b:3f:
                    d2:ef:0d:9b:48:5b:db:52:12:76:86:a8:4b:00:7a:
                    11:90:21:a0:f1:3a:0d:fd:eb:9d:54:8e:ea:9c:ff:
                    b1:df:d2:56:39:47:77:ef:b0:48:c7:c2:9f:a5:43:
                    34:e3:5a:13:76:c3:db:fc:90:6f:46:e9:b8:96:2a:
                    bd:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:03:2E:1F:AB:F0:54:C8:4B:DD:DE:F2:1A:7C:A3:9B:D5:EC:1E:14
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/6wMuH6vwVMhL3d7yGnyjm9XsHhQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.232.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:ff:fd:0c:47:0f:c6:4e:79:cf:a7:6d:de:be:47:54:d3:03:
         c4:c2:f2:a6:2f:61:b4:93:a3:0a:cf:c3:e3:29:59:ef:50:e5:
         1d:0d:36:8d:db:78:58:17:40:dd:d9:f2:36:bb:71:c7:1c:11:
         20:d5:57:e4:a9:c8:5b:e4:76:d0:4b:a1:12:f7:26:bc:fd:e6:
         dd:19:08:d4:92:06:49:14:5a:f3:c6:45:89:a7:cb:88:14:df:
         9d:22:df:1f:5b:03:f8:42:87:43:88:32:8f:28:da:7b:72:3a:
         49:06:ba:9c:21:dc:0d:95:a5:a2:ea:1d:a2:84:06:7b:d9:59:
         f5:a1:f9:2e:a7:00:b4:71:58:85:c0:b8:33:36:d9:32:e1:80:
         85:47:33:ad:50:51:b8:15:b5:da:6c:46:1a:fe:80:c5:bf:36:
         57:f4:c8:55:54:d7:97:0a:d2:da:dd:71:35:c6:ed:fa:c2:21:
         9b:6a:25:71:c0:d2:7e:0a:1a:c7:32:ef:d5:a8:1b:99:c0:fe:
         ef:0d:10:75:7e:ff:85:1b:fe:9b:c6:c5:5d:a8:d2:29:49:be:
         73:c6:99:4a:55:c5:01:67:9e:26:05:51:87:f9:ca:8c:e2:8d:
         21:d5:a0:e2:b4:c6:05:03:6f:ce:46:8b:8f:c3:67:98:0c:9d:
         8c:34:4e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 05:00:26 2024 by rpki-client on console-fra.rpki-client.org