Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa
File:                     4ntYgocY0FrItMT6mrEv8f4f0uo.roa (raw, json)
Hash identifier:          5VoalpYosrXFU4PrxnhdAhNk5c5vWz9pF6f2YuJOy1M=
Subject key identifier:   E2:7B:58:82:87:18:D0:5A:C8:B4:C4:FA:9A:B1:2F:F1:FE:1F:D2:EA
Certificate issuer:       /CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
Certificate serial:       A7
Authority key identifier: 10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa
Signing time:             Thu 29 Feb 2024 01:30:12 +0000
ROA not before:           Thu 29 Feb 2024 01:30:12 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        124.18.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 167 (0xa7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=101A90E4E74C403ABE8E5E0A1FE8E4157ABD2AE7
        Validity
            Not Before: Feb 29 01:30:12 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=E27B58828718D05AC8B4C4FA9AB12FF1FE1FD2EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:26:de:a1:f0:51:d6:3e:2e:db:4b:de:ad:c2:
                    46:50:b5:63:16:db:e4:18:c3:8f:aa:bb:33:b7:54:
                    65:16:d2:bb:f3:44:8a:b9:70:19:7e:46:4f:30:c0:
                    7b:8b:c8:4e:2b:85:f7:b4:ef:4b:7e:07:f2:14:29:
                    af:49:ae:0f:7d:c4:b5:89:fd:2f:62:4b:e4:8e:be:
                    f6:0f:55:dd:5f:7a:76:d8:1d:da:08:ca:c6:84:62:
                    45:b9:2f:47:bb:8b:4c:1a:b4:b4:14:7f:da:53:66:
                    87:98:a7:e3:b5:17:a1:1b:4a:1e:7f:59:f9:b8:f7:
                    a7:69:d6:55:f5:05:21:5e:3e:84:47:74:e3:69:3e:
                    6d:9e:92:1f:43:f2:f8:6f:69:61:c5:b0:83:fd:5f:
                    0f:c6:26:d9:e6:2e:25:d9:f3:5a:09:30:c1:c1:95:
                    0d:16:d1:4f:53:a0:a6:ce:6a:36:7f:bf:6e:c3:c3:
                    ea:73:e4:b2:54:25:cf:da:72:77:33:da:56:cf:25:
                    67:21:de:f1:c7:09:d4:da:b3:b9:2c:0f:da:41:73:
                    0f:11:4a:6c:da:5b:32:66:ef:09:a5:c6:f9:ee:21:
                    76:ca:7a:d5:1c:94:3a:a3:45:b3:f4:b7:a3:4c:43:
                    f7:21:bc:b8:a7:aa:2c:f4:f2:ee:4e:cd:c6:79:ba:
                    a4:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:7B:58:82:87:18:D0:5A:C8:B4:C4:FA:9A:B1:2F:F1:FE:1F:D2:EA
            X509v3 Authority Key Identifier:
                keyid:10:1A:90:E4:E7:4C:40:3A:BE:8E:5E:0A:1F:E8:E4:15:7A:BD:2A:E7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/EBqQ5OdMQDq-jl4KH-jkFXq9Kuc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10173/4ntYgocY0FrItMT6mrEv8f4f0uo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.18.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         6a:d0:d3:6b:1f:c3:fa:74:4f:7c:a5:35:75:0c:a7:4f:6d:bd:
         8e:3a:31:68:8c:fd:9b:03:ec:8d:1b:a9:05:39:1a:8c:fd:83:
         e4:ea:a9:27:00:5c:81:00:5e:92:45:81:82:40:cf:f8:c0:1e:
         40:ba:28:c5:c1:c1:c3:7d:1a:51:a3:7d:5e:2f:0b:6e:38:bd:
         0c:2d:47:a2:e0:7f:7e:50:4b:48:c7:96:d3:6f:70:1f:38:40:
         48:7f:d2:97:0b:ec:da:9e:09:f9:c5:cc:9b:0c:4f:60:30:e2:
         82:48:1c:6c:13:4c:a0:12:3c:f2:55:1d:c8:b5:37:0b:8e:6f:
         c2:e7:71:6a:9b:e3:e9:de:d6:f6:15:cb:da:6f:54:be:bb:0a:
         52:9c:cd:a0:9d:a8:1f:f5:b2:f2:b3:2c:a2:0e:09:d9:24:98:
         1a:c0:0c:44:9e:74:9c:39:b0:2c:b1:05:94:7a:e3:01:d9:3c:
         d7:87:ac:c6:23:61:84:ff:bf:bb:62:9d:64:a9:81:e6:1b:61:
         97:b0:1e:fc:06:d3:c1:fa:44:52:34:11:2f:4f:a6:e5:a6:f9:
         d8:00:a0:8b:c6:c5:d3:cd:fd:56:00:b4:d1:58:91:ae:9f:9a:
         8f:e3:9a:fd:4e:b4:91:91:ae:8d:70:f4:9a:a5:64:5a:23:1a:
         d6:76:6a:48
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org