Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/ppqdFLDQlF2vKrGb17xHbc8ivwY.roa
File:                     ppqdFLDQlF2vKrGb17xHbc8ivwY.roa (raw, json)
Hash identifier:          BEoeu+7rZSOIxXVQFBnHQ8eeZq3zuk8aidn4NtYpBJc=
Subject key identifier:   A6:9A:9D:14:B0:D0:94:5D:AF:2A:B1:9B:D7:BC:47:6D:CF:22:BF:06
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       6A
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/ppqdFLDQlF2vKrGb17xHbc8ivwY.roa
Signing time:             Wed 31 Jul 2024 01:30:48 +0000
ROA not before:           Wed 31 Jul 2024 01:30:48 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     146984
IP address blocks:        115.69.236.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 106 (0x6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Jul 31 01:30:48 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=A69A9D14B0D0945DAF2AB19BD7BC476DCF22BF06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:9e:d9:eb:35:c3:6c:88:f2:4d:e4:e6:93:37:
                    2d:33:f6:1f:7b:9f:57:97:31:8f:08:2a:78:6c:51:
                    ce:2f:c7:94:45:39:8f:6c:c9:49:3d:08:ca:2e:e0:
                    c8:b3:e5:33:9c:cd:cd:3e:3d:2a:ee:23:cd:08:70:
                    f3:55:f6:d5:50:27:c9:c6:1d:7e:f9:d7:54:86:1b:
                    f7:89:cb:2a:83:5a:af:ba:55:25:a8:6e:93:75:b8:
                    35:74:3a:af:a0:c7:5d:c2:7e:fa:be:83:0a:c0:ef:
                    54:9a:41:c6:67:e7:9a:06:1e:d2:09:f8:52:d8:a4:
                    4f:ae:3d:26:bd:53:7e:40:6c:da:95:6e:ec:6f:76:
                    66:b5:24:4e:12:0f:3c:af:52:07:ec:0f:84:5c:31:
                    f7:70:1d:91:f7:c4:c2:21:43:8b:e7:82:3a:ea:de:
                    9c:9d:6c:cd:c7:e5:67:ba:50:e7:32:6d:57:07:5e:
                    4c:dd:0b:97:e9:6c:fb:26:b8:c2:aa:28:f2:00:87:
                    55:b4:87:61:5f:cd:bf:7e:63:11:c1:ae:f2:fa:da:
                    63:9c:e4:a8:74:00:99:ba:a9:db:42:40:b0:1d:fe:
                    ab:c9:e1:23:07:ca:af:9b:9f:44:a7:3b:62:09:be:
                    d5:75:66:d6:50:36:34:a3:7b:85:98:77:f7:8c:86:
                    e4:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:9A:9D:14:B0:D0:94:5D:AF:2A:B1:9B:D7:BC:47:6D:CF:22:BF:06
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/ppqdFLDQlF2vKrGb17xHbc8ivwY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:09:c6:e7:d1:96:6a:a4:3b:6f:d8:3d:46:2d:be:ef:09:52:
         76:a3:7f:63:96:55:a3:df:d4:22:f4:a6:f5:09:f0:c4:00:b3:
         45:88:d1:bc:5f:63:98:fb:8c:bf:de:f5:5c:e8:66:83:49:68:
         a3:97:1c:b6:2f:90:cf:22:ad:27:d0:71:26:61:c1:f8:6a:92:
         ea:62:23:cb:c7:48:ee:0a:f7:41:ff:3c:5a:dc:ec:a3:dc:36:
         a3:1c:fb:a3:0a:01:73:89:0c:78:ab:c3:44:d9:90:cb:21:c4:
         12:eb:43:ea:0a:e8:59:53:9d:13:fe:43:d9:86:0d:88:f6:73:
         0e:d7:d6:1b:2c:59:9f:06:67:26:5e:33:d6:fd:29:04:be:30:
         88:3b:52:eb:f9:20:70:36:fc:ec:e7:fa:d8:f1:c5:f2:27:80:
         6e:ce:57:41:9b:39:5c:b3:f5:47:72:35:05:ec:90:3c:d0:87:
         c9:14:b9:97:e4:4d:df:ef:b3:cd:dd:5c:ad:b9:53:60:5a:8f:
         d0:a6:a3:39:18:3d:3d:5a:8b:a9:51:52:6b:83:b9:fd:aa:b8:
         0d:4c:4e:5b:e8:7f:c5:90:f1:ca:70:04:b4:06:8c:0b:ac:fa:
         57:f5:60:7f:d4:1a:4c:39:2c:b1:f3:3e:93:b5:94:37:9b:5c:
         34:84:c9:25
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:24 2024 by rpki-client on console-ams.rpki-client.org