Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/98c776jrxfQrwm6pluOJv02LldU.roa
File:                     98c776jrxfQrwm6pluOJv02LldU.roa (raw, json)
Hash identifier:          PCONvJZOhdTBWn2gsesbNAKB5bQ47kLouRmIO4hpJfc=
Subject key identifier:   F7:C7:3B:EF:A8:EB:C5:F4:2B:C2:6E:A9:96:E3:89:BF:4D:8B:95:D5
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       15
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/98c776jrxfQrwm6pluOJv02LldU.roa
Signing time:             Mon 18 Mar 2024 04:49:35 +0000
ROA not before:           Mon 18 Mar 2024 04:49:35 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        202.86.240.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Sep 2024 01:30:47 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 04:49:35 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F7C73BEFA8EBC5F42BC26EA996E389BF4D8B95D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:07:89:e6:83:17:06:a0:4a:ac:bb:6f:13:eb:
                    50:23:a9:7c:8d:f6:ba:e4:0c:3e:3a:24:fe:b7:f5:
                    04:e2:0e:94:63:7e:38:47:9a:f2:cf:47:ec:87:37:
                    3d:86:26:69:1b:d6:d4:8b:43:14:40:f3:67:c0:d6:
                    40:b0:19:38:26:3a:af:3e:b5:2f:d3:ea:e8:c8:a4:
                    58:07:48:61:16:88:a0:f8:91:0c:85:0c:32:56:47:
                    9e:4a:8c:74:d8:a8:9c:97:0f:f0:0f:d9:cb:52:4a:
                    1c:22:2e:46:e7:88:c8:6a:aa:c9:2d:cc:58:58:b4:
                    fc:1a:ee:e5:db:07:fc:5c:c9:83:aa:51:c7:b2:e4:
                    fb:b5:20:3d:f3:f9:b5:b2:43:42:bc:c2:39:ca:54:
                    c9:db:6f:cb:2a:b8:3b:8f:b8:48:aa:fc:cc:da:12:
                    7c:93:44:96:25:54:80:80:8a:f7:b7:97:1a:dc:06:
                    66:ee:34:44:97:ea:15:49:f8:4a:87:c5:8d:bf:65:
                    c2:59:19:cc:e6:85:d3:64:09:28:c4:6a:23:39:00:
                    45:e8:6d:39:aa:7a:dd:d1:4d:1b:c7:02:f8:d4:8a:
                    15:c9:6c:04:d5:2e:4e:83:62:fe:2f:09:dc:32:61:
                    73:38:ec:b4:9e:37:3f:25:02:21:96:db:a6:8d:07:
                    8e:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:C7:3B:EF:A8:EB:C5:F4:2B:C2:6E:A9:96:E3:89:BF:4D:8B:95:D5
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/98c776jrxfQrwm6pluOJv02LldU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.86.240.0/21

    Signature Algorithm: sha256WithRSAEncryption
         7a:0f:0f:56:30:ae:3e:b7:f7:8e:ed:3f:b0:5f:ed:23:6b:c4:
         f4:c8:e2:c0:59:6d:a6:61:19:12:ea:8d:7d:64:cc:25:93:b8:
         59:b2:2e:d9:ca:31:65:31:0d:60:d5:07:9c:c8:ad:2f:d5:a9:
         c1:68:84:8d:83:a8:4b:1e:43:0a:dd:7c:5b:68:b6:d8:c1:e6:
         0b:b1:d7:2c:e2:f9:d1:df:62:f7:56:64:0e:8b:49:8f:e4:d3:
         57:63:63:14:1b:b0:f5:4c:bd:db:3a:49:a9:6b:4b:e4:e9:21:
         f9:a8:d4:a0:82:69:1b:91:ac:bd:b6:25:ef:f2:f6:29:ed:42:
         b2:a6:cf:9c:6a:37:6e:a7:9c:fd:b5:d8:5b:c0:95:ed:fe:18:
         78:0e:b8:3d:8e:89:e9:fb:d0:05:b5:f8:2b:d0:bd:b7:a1:44:
         9a:d2:6d:c1:b5:44:f4:66:62:77:93:77:b6:c1:34:b3:74:32:
         a8:35:b7:ad:f3:5d:3d:38:60:0e:6e:8e:2e:cd:0e:61:5c:de:
         eb:d8:89:2c:d9:24:c6:85:42:5e:86:bb:4a:ee:56:6b:83:52:
         fb:d9:7d:ce:47:17:cc:a6:39:78:c4:06:26:c3:63:df:80:30:
         24:c5:12:22:06:f2:d6:ce:8a:b1:07:9b:b5:2d:fd:f2:0c:61:
         c9:06:72:6e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 20 10:51:54 2024 by rpki-client on console-fra.rpki-client.org