Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1384/g48mbOG36muLASQk_XNgHIA9LOo.roa
File:                     g48mbOG36muLASQk_XNgHIA9LOo.roa (raw, json)
Hash identifier:          zCyik0NKEZcdI8z4VJdp7m1MSYPWHt7Y7DsH7DDobr4=
Subject key identifier:   83:8F:26:6C:E1:B7:EA:6B:8B:01:24:24:FD:73:60:1C:80:3D:2C:EA
Certificate issuer:       /CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
Certificate serial:       3F
Authority key identifier: 87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/g48mbOG36muLASQk_XNgHIA9LOo.roa
Signing time:             Fri 31 May 2024 01:32:04 +0000
ROA not before:           Fri 31 May 2024 01:32:04 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     16509
IP address blocks:        150.70.218.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 01 Dec 2024 23:39:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87AC474F6833E4A01A86B23B51E56A661CF2E1F4
        Validity
            Not Before: May 31 01:32:04 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=838F266CE1B7EA6B8B012424FD73601C803D2CEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:91:c1:53:dd:21:1e:e0:43:c5:57:e9:38:cc:
                    d8:19:28:cc:ac:20:a9:2f:4a:83:e1:6c:dc:cf:7b:
                    25:53:b4:62:d9:bb:bc:9a:32:a3:12:11:cd:4f:d2:
                    d3:19:db:f0:44:4d:f1:0a:c0:aa:a6:f6:3a:1d:1a:
                    87:7f:c3:d9:0d:4f:00:a9:71:91:cd:7f:aa:8e:e7:
                    46:65:20:ce:b6:79:35:ce:80:c2:2d:18:f8:20:a0:
                    88:62:b2:96:12:ce:f5:57:ce:e9:45:c3:c3:8a:d3:
                    da:0b:cc:04:32:7c:39:7e:ee:92:ef:87:8c:b5:f0:
                    57:04:7f:9a:2b:c8:91:2b:d0:12:a7:0c:22:ee:6e:
                    a5:c5:96:fd:62:27:c1:36:fa:8b:1b:10:c3:5a:06:
                    70:11:aa:5c:34:1a:c1:05:02:75:f6:87:a5:d1:1f:
                    b1:93:45:da:f8:b6:c1:aa:dc:72:43:e0:40:e0:12:
                    86:3e:fa:2a:0d:8e:cd:c9:82:31:d7:0c:8a:51:fb:
                    00:ce:4c:f2:f0:26:02:df:d5:2a:d6:6e:33:e6:aa:
                    d5:95:01:d8:67:89:12:b7:c4:22:36:3b:94:e7:94:
                    09:71:46:fc:33:8e:46:eb:1d:c8:93:d7:1c:b2:fe:
                    c2:33:4d:0b:30:50:26:5c:6f:bc:9a:44:5e:5e:7d:
                    88:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:8F:26:6C:E1:B7:EA:6B:8B:01:24:24:FD:73:60:1C:80:3D:2C:EA
            X509v3 Authority Key Identifier:
                keyid:87:AC:47:4F:68:33:E4:A0:1A:86:B2:3B:51:E5:6A:66:1C:F2:E1:F4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/h6xHT2gz5KAahrI7UeVqZhzy4fQ.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h6xHT2gz5KAahrI7UeVqZhzy4fQ.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1384/g48mbOG36muLASQk_XNgHIA9LOo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.70.218.0/24

    Signature Algorithm: sha256WithRSAEncryption
         52:77:2c:cd:76:c4:89:3c:eb:ff:57:a3:93:35:40:dc:00:05:
         2f:ca:65:11:0a:91:51:95:2c:6d:7e:f7:46:e0:e9:7d:da:7b:
         26:4b:68:ee:38:d8:72:11:28:3d:c3:4d:bb:52:ca:61:00:ea:
         d7:c2:53:98:a6:26:df:12:0d:1d:05:f8:a1:ad:15:2c:6d:2d:
         35:57:23:f7:91:bd:29:46:5b:c1:cf:50:3a:44:71:b2:f5:3d:
         15:be:43:6b:e7:dd:81:b3:47:87:fe:08:e8:a6:d1:6d:0f:01:
         d2:63:1d:0b:91:f2:b6:d0:2d:57:8d:f7:96:54:17:29:6d:4b:
         99:bc:33:ab:57:92:17:c4:9b:b0:8f:d6:28:f7:b8:09:31:51:
         7c:f9:b3:40:72:e6:7f:82:f1:05:49:8e:3f:b3:d8:23:37:23:
         e2:19:4a:1b:0d:8c:b1:79:a8:f1:28:4a:45:25:f4:59:3a:06:
         9a:80:25:86:2b:96:b4:d7:b5:a6:77:22:d6:3f:8d:45:c6:1a:
         27:09:df:41:f3:68:d5:5f:12:98:97:d2:bb:fc:85:0c:d5:0b:
         ea:87:7b:c2:65:41:57:54:a9:4e:66:ce:46:cf:61:33:d1:66:
         6f:c8:33:64:39:a1:b2:12:ad:4b:1c:d5:c5:eb:84:ee:39:4b:
         41:fe:c3:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 01:00:49 2024 by rpki-client on console-ams.rpki-client.org