Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/26PByFPUeQ6MHUFybjn0KwtrKiM.roa
File:                     26PByFPUeQ6MHUFybjn0KwtrKiM.roa (raw, json)
Hash identifier:          HUCNPps9SMMiU4IbMdBVxbR3hEswK2e4qSu4lTSOk4k=
Subject key identifier:   DB:A3:C1:C8:53:D4:79:0E:8C:1D:41:72:6E:39:F4:2B:0B:6B:2A:23
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B0
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/26PByFPUeQ6MHUFybjn0KwtrKiM.roa
Signing time:             Thu 29 Feb 2024 01:29:56 +0000
ROA not before:           Thu 29 Feb 2024 01:29:56 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        203.209.176.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 176 (0xb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Feb 29 01:29:56 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=DBA3C1C853D4790E8C1D41726E39F42B0B6B2A23
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:e1:d7:1c:cf:3a:0f:13:02:00:1d:38:4f:e3:
                    57:47:61:74:c4:56:ea:4c:95:4e:81:8e:71:6f:a3:
                    67:a0:f7:8f:c8:66:bb:81:0d:29:ac:8d:1d:e5:e4:
                    7a:e7:89:00:21:de:1e:27:74:34:f8:4a:e2:c5:dd:
                    92:95:34:23:74:75:28:dc:2a:5f:6a:52:7a:c6:e6:
                    ab:44:a6:15:94:64:cc:0f:50:a2:f5:c5:2f:83:39:
                    a7:ba:c1:17:6c:dd:2d:81:4d:60:c0:e5:52:73:bb:
                    a5:b4:a4:57:81:99:09:8e:6b:12:3b:22:83:7e:93:
                    f4:c4:81:65:24:57:ea:41:9b:7a:84:85:fe:5f:3e:
                    92:d2:82:51:d4:c4:84:54:0e:e3:e7:70:3e:10:c2:
                    cf:47:a1:df:29:b8:a0:61:2c:a4:f7:88:6a:7d:90:
                    55:2c:99:32:8b:5a:af:39:da:c9:cd:09:e1:dd:c2:
                    be:6e:21:02:c9:b4:f9:de:fc:cd:94:d9:70:e2:1f:
                    26:71:a9:36:98:75:c3:67:e9:be:08:6e:b7:b9:26:
                    58:6f:37:28:2f:6c:d0:22:1d:fe:90:75:f6:f2:b1:
                    0d:5d:99:f0:e6:d6:8e:94:0f:7d:7e:0d:61:91:47:
                    53:88:65:e3:91:ca:5b:97:10:bd:39:99:b9:f4:be:
                    2f:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DB:A3:C1:C8:53:D4:79:0E:8C:1D:41:72:6E:39:F4:2B:0B:6B:2A:23
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/26PByFPUeQ6MHUFybjn0KwtrKiM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.209.176.0/22

    Signature Algorithm: sha256WithRSAEncryption
         7f:5e:55:f9:cf:a7:e5:93:dd:75:05:ef:fa:d8:c8:40:94:d0:
         a1:aa:35:bd:8f:3a:3b:7a:3f:eb:e9:f8:b8:94:20:71:38:a1:
         c6:f0:5e:fc:a9:39:39:e3:62:fa:df:0a:43:42:d2:ae:f6:e7:
         43:9e:69:37:df:dd:74:39:f0:a4:f4:b8:83:5f:9a:ee:3c:96:
         5f:b7:ec:06:9f:b5:ee:60:03:69:bb:52:95:0d:3d:06:1e:e1:
         2c:ea:1c:75:e0:83:21:3e:bf:2c:08:e8:bc:2a:11:a5:ed:df:
         a1:1a:6e:29:66:f7:43:e3:67:47:9b:a3:07:47:19:b4:c0:c3:
         42:07:33:e2:ae:83:28:3d:8d:a5:70:fe:0b:eb:36:19:14:cb:
         b3:60:3e:13:42:d9:b7:a2:11:7b:ef:72:de:e7:f6:91:c2:cf:
         e4:5e:02:f0:12:15:21:aa:81:12:7a:5b:2e:f3:c0:dd:05:9f:
         a3:9b:ca:de:fd:94:e7:27:59:84:4e:c4:93:41:cf:97:e5:e7:
         41:4a:ac:36:16:5c:75:41:6d:43:b7:24:82:f1:9c:a0:03:17:
         8e:28:46:fc:bd:15:71:c2:6b:4d:84:59:18:02:80:96:76:19:
         de:bc:f9:73:de:3e:f0:d4:37:e2:70:4e:c3:31:40:99:4f:4b:
         45:1d:75:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:10 2024 by rpki-client on console-fra.rpki-client.org