Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/_jOqzNopNmpR7H7OZGkAUFJYtD0.roa
File:                     _jOqzNopNmpR7H7OZGkAUFJYtD0.roa (raw, json)
Hash identifier:          1P4NBfGJSp0Y40G5y+7eaUfOkcRwWrm2XyzRirIwshc=
Subject key identifier:   FE:33:AA:CC:DA:29:36:6A:51:EC:7E:CE:64:69:00:50:52:58:B4:3D
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       52
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/_jOqzNopNmpR7H7OZGkAUFJYtD0.roa
Signing time:             Sat 31 Aug 2024 01:30:27 +0000
ROA not before:           Sat 31 Aug 2024 01:30:27 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18144
IP address blocks:        61.205.32.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 02 Oct 2024 13:37:28 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug 31 01:30:27 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=FE33AACCDA29366A51EC7ECE646900505258B43D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:ba:54:91:29:44:c9:4c:8e:b8:bf:ba:9d:d0:
                    3a:77:53:da:1d:c2:99:d6:16:4d:fd:03:33:69:43:
                    18:3c:5e:e4:2a:92:18:4d:cc:9f:de:8b:7a:33:6e:
                    94:ee:c1:27:af:17:1f:1b:74:88:37:b4:ba:e6:86:
                    c2:7e:6a:d9:7f:2c:0e:0e:c2:ae:c2:fb:83:4b:16:
                    ab:eb:50:52:cd:3e:32:6c:82:29:23:30:27:61:fc:
                    75:e4:0f:24:5c:49:15:2b:cf:17:2f:7e:b7:ec:b9:
                    01:48:b7:de:0a:30:c2:5f:37:df:20:fd:c9:a1:89:
                    7e:6a:50:00:3a:89:b6:70:1d:e8:8a:a6:f4:dd:bc:
                    32:99:e1:b5:32:2c:2d:87:f8:e0:99:85:f3:7c:30:
                    e4:2e:fb:68:78:0b:de:b1:e0:a2:ad:53:ca:22:82:
                    f9:cf:c4:d2:2f:a0:0f:87:95:b2:36:f1:82:3b:55:
                    ad:62:7f:40:13:58:27:41:cd:93:d5:e7:5d:4b:b3:
                    35:76:8c:98:93:31:ea:21:12:9a:c6:7c:6b:54:ad:
                    e5:da:60:ad:da:40:c5:39:d4:db:71:25:8b:ae:40:
                    eb:59:b5:61:05:72:ef:9c:29:d9:53:23:00:d9:fa:
                    d0:f5:61:24:80:11:de:17:19:42:ab:a2:e2:41:49:
                    0a:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:33:AA:CC:DA:29:36:6A:51:EC:7E:CE:64:69:00:50:52:58:B4:3D
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/_jOqzNopNmpR7H7OZGkAUFJYtD0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.205.32.0/21

    Signature Algorithm: sha256WithRSAEncryption
         a5:21:d7:ee:cc:eb:10:28:f1:e1:be:9b:24:67:65:d8:85:ca:
         70:82:a8:55:e3:c2:1e:0d:12:06:81:85:66:12:9e:95:e6:12:
         4b:cf:d6:f5:2f:cc:ae:2d:09:a9:dc:0e:92:cf:d8:04:e7:d2:
         9a:a1:4c:eb:e0:77:f0:e1:47:8e:74:45:c6:e6:b1:1d:33:fc:
         88:a1:f1:fe:fd:62:f5:ef:10:e3:03:e7:72:98:18:15:47:fb:
         71:9f:f1:15:6a:8d:81:0e:79:8d:47:11:7b:ca:42:4a:8b:bc:
         16:c4:3f:16:72:37:3d:70:04:f0:e7:4b:6c:51:66:53:a8:fe:
         2b:89:f5:96:c3:44:83:bf:81:52:41:25:af:f4:93:3f:1e:e7:
         2f:78:82:aa:b6:3e:84:49:ba:14:82:75:ae:c0:ae:27:35:02:
         8a:cf:db:fe:52:b2:a8:ed:29:cf:96:f7:8d:78:17:e8:cb:f1:
         f8:0c:78:35:4d:7b:d9:43:8d:80:68:15:b3:e3:92:20:a3:00:
         e9:0b:b0:42:6e:91:fe:9c:93:12:bf:cc:d6:b5:c1:77:13:7d:
         97:02:30:aa:20:56:1c:2f:4e:a4:4f:c2:0c:7c:f7:68:89:7f:
         fe:d8:4d:9a:a0:f2:d9:dc:c7:a3:6c:4d:f6:9c:62:b3:13:74:
         aa:63:8e:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 27 06:22:13 2024 by rpki-client on console-ams.rpki-client.org