Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10822/pm6c_QOns8o3eV6OptZb4WxptnM.roa
File:                     pm6c_QOns8o3eV6OptZb4WxptnM.roa (raw, json)
Hash identifier:          5ITijeJkZaaiLAA9JyWNH+a5OxYBwPO+jEE3K/XZ7VU=
Subject key identifier:   A6:6E:9C:FD:03:A7:B3:CA:37:79:5E:8E:A6:D6:5B:E1:6C:69:B6:73
Certificate issuer:       /CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
Certificate serial:       1A
Authority key identifier: 33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/pm6c_QOns8o3eV6OptZb4WxptnM.roa
Signing time:             Mon 18 Mar 2024 05:33:29 +0000
ROA not before:           Mon 18 Mar 2024 05:33:29 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     17698
IP address blocks:        218.216.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 26 (0x1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=33DF9B24F53BBCAC347BA5B5A8C49BFF41666A26
        Validity
            Not Before: Mar 18 05:33:29 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=A66E9CFD03A7B3CA37795E8EA6D65BE16C69B673
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:10:c9:d3:f7:09:cd:eb:aa:d2:48:9e:2f:fb:
                    24:9f:89:c5:8c:69:58:72:ce:13:18:53:b3:50:93:
                    e6:d7:52:be:19:39:25:63:62:d5:64:96:39:31:f2:
                    8a:b2:7b:4b:6c:17:19:99:7e:5c:5c:d7:bf:88:d2:
                    77:93:f3:c6:19:ad:75:a0:2d:b2:96:a2:bf:d2:26:
                    89:8c:2b:f3:c9:e7:46:83:36:d2:0d:9d:24:12:66:
                    72:74:ea:2b:5b:d7:81:7e:df:dc:fd:cb:d1:a8:e3:
                    f7:be:3f:bc:45:64:4c:b2:ce:4e:74:bd:ff:d5:b3:
                    09:c8:15:91:64:53:90:e6:f7:10:90:8d:cb:d5:b6:
                    1c:59:5d:4e:98:8b:5c:f1:5a:14:28:68:de:9d:3d:
                    68:5a:c0:11:97:b4:1b:04:3e:b2:d3:9b:e6:cb:a9:
                    d9:2f:09:89:03:ff:45:09:d5:f1:f7:da:01:92:06:
                    de:08:8d:57:51:ad:be:5c:e0:fa:84:93:5d:3d:7f:
                    d8:c2:2b:be:c6:b4:c3:3b:0c:43:23:f6:bc:dc:80:
                    e3:26:85:0e:30:6f:a2:84:d9:90:89:50:12:bf:26:
                    1e:e2:20:f5:f6:ca:1b:da:9b:74:02:a3:bc:41:ab:
                    90:28:16:24:70:a3:99:3d:ab:45:1a:29:e0:ef:2f:
                    52:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:6E:9C:FD:03:A7:B3:CA:37:79:5E:8E:A6:D6:5B:E1:6C:69:B6:73
            X509v3 Authority Key Identifier:
                keyid:33:DF:9B:24:F5:3B:BC:AC:34:7B:A5:B5:A8:C4:9B:FF:41:66:6A:26

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/M9-bJPU7vKw0e6W1qMSb_0FmaiY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/M9-bJPU7vKw0e6W1qMSb_0FmaiY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10822/pm6c_QOns8o3eV6OptZb4WxptnM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:6e:4c:fc:cb:b2:39:7b:2a:df:09:ca:ae:78:ae:cd:54:
         cb:96:22:1e:5d:28:fb:99:6e:b1:80:5b:46:68:38:fa:bf:ca:
         b1:0c:00:a1:a9:35:33:6f:20:6c:9d:a6:db:92:e7:c4:64:54:
         00:ed:94:3a:02:d0:5c:fa:ee:56:f0:d7:b1:de:82:36:f4:ea:
         97:2a:73:d4:0c:29:e9:19:ec:ce:7a:69:5c:7d:17:51:20:32:
         48:6b:06:a8:0f:31:c8:9b:57:41:49:d5:d3:ee:d3:50:00:6e:
         43:94:17:79:e7:59:87:9c:fe:10:75:cc:e7:19:2d:38:e8:ee:
         19:d3:2b:32:24:bb:c9:41:32:22:ba:07:08:da:39:17:52:12:
         f1:c5:dd:df:b2:1b:89:f4:a7:bb:7c:c4:d9:5a:c9:9c:9b:cb:
         a0:2a:0b:10:83:96:7a:b8:e7:97:07:a9:1b:65:8d:6c:9d:99:
         de:b8:3f:87:57:13:e6:c6:53:3f:68:00:e7:74:55:ea:0f:81:
         ef:06:d4:ee:5f:cf:b9:80:7f:cb:f9:c8:9c:44:84:81:21:16:
         38:3b:32:37:31:c0:11:f4:36:7c:8f:90:d2:36:c0:fe:55:04:
         36:00:0b:0c:c6:e3:42:88:d3:d2:76:53:11:c2:ad:2a:da:fe:
         fe:0f:ce:2e
-----BEGIN CERTIFICATE-----
MIIFCzCCA/OgAwIBAgIBGjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzM0RG
OUIyNEY1M0JCQ0FDMzQ3QkE1QjVBOEM0OUJGRjQxNjY2QTI2MB4XDTI0MDMxODA1
MzMyOVoXDTI1MDMxNTAxMzAwMlowMzExMC8GA1UEAxMoQTY2RTlDRkQwM0E3QjND
QTM3Nzk1RThFQTZENjVCRTE2QzY5QjY3MzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAK0QydP3Cc3rqtJIni/7JJ+JxYxpWHLOExhTs1CT5tdSvhk5JWNi
1WSWOTHyirJ7S2wXGZl+XFzXv4jSd5PzxhmtdaAtspaiv9ImiYwr88nnRoM20g2d
JBJmcnTqK1vXgX7f3P3L0ajj974/vEVkTLLOTnS9/9WzCcgVkWRTkOb3EJCNy9W2
HFldTpiLXPFaFCho3p09aFrAEZe0GwQ+stOb5sup2S8JiQP/RQnV8ffaAZIG3giN
V1Gtvlzg+oSTXT1/2MIrvsa0wzsMQyP2vNyA4yaFDjBvooTZkIlQEr8mHuIg9fbK
G9qbdAKjvEGrkCgWJHCjmT2rRRop4O8vUj0CAwEAAaOCAigwggIkMB0GA1UdDgQW
BBSmbpz9A6ezyjd5Xo6m1lvhbGm2czAfBgNVHSMEGDAWgBQz35sk9Tu8rDR7pbWo
xJv/QWZqJjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTA4MjIvTTktYkpQVTd2S3cwZTZXMXFNU2JfMEZtYWlZLmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvTTktYkpQVTd2S3cwZTZXMXFNU2Jf
MEZtYWlZLmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEwODIyL3BtNmNfUU9uczhvM2VWNk9wdFpiNFd4cHRuTS5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHwYIKwYBBQUHAQcBAf8EEDAOMAwE
AgABMAYDBAba2MAwDQYJKoZIhvcNAQELBQADggEBADL7bkz8y7I5eyrfCcqueK7N
VMuWIh5dKPuZbrGAW0ZoOPq/yrEMAKGpNTNvIGydptuS58RkVADtlDoC0Fz67lbw
17Hegjb06pcqc9QMKekZ7M56aVx9F1EgMkhrBqgPMcibV0FJ1dPu01AAbkOUF3nn
WYec/hB1zOcZLTjo7hnTKzIku8lBMiK6BwjaORdSEvHF3d+yG4n0p7t8xNlayZyb
y6AqCxCDlnq455cHqRtljWydmd64P4dXE+bGUz9oAOd0VeoPge8G1O5fz7mAf8v5
yJxEhIEhFjg7MjcxwBH0NnyPkNI2wP5VBDYACwzG40KI09J2UxHCrSra/v4Pzi4=
-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:26 2024 by rpki-client on console-ams.rpki-client.org