Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/ALckuVhuCKNwpecmomxfYHMMKCQ.roa
File:                     ALckuVhuCKNwpecmomxfYHMMKCQ.roa (raw, json)
Hash identifier:          SDslNmmu+BBYhm2S4C0DfQ8ydM+eA8fkljcvVt0pSxM=
Subject key identifier:   00:B7:24:B9:58:6E:08:A3:70:A5:E7:26:A2:6C:5F:60:73:0C:28:24
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B6
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/ALckuVhuCKNwpecmomxfYHMMKCQ.roa
Signing time:             Thu 29 Feb 2024 01:29:59 +0000
ROA not before:           Thu 29 Feb 2024 01:29:59 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        202.124.0.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Feb 29 01:29:59 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=00B724B9586E08A370A5E726A26C5F60730C2824
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:96:a2:88:55:fc:10:e2:f8:8b:63:60:10:a3:
                    80:73:da:ac:c0:25:9d:46:c1:cc:2c:93:67:73:cb:
                    b1:3e:41:07:02:e5:f2:c3:9b:94:c0:9d:d2:25:bd:
                    a0:7b:ec:3a:db:28:85:bc:88:2c:92:a5:ea:c1:1d:
                    42:94:8a:97:23:b1:b2:24:44:79:42:2a:ee:5a:6c:
                    e7:70:60:5e:40:93:8f:c8:b7:ad:0f:4b:e9:9e:e3:
                    1d:c7:7b:b1:44:d5:28:7c:d3:c3:ae:fe:f3:0e:1b:
                    63:d0:ec:a1:4f:e1:bd:de:7d:05:ca:26:d1:32:6d:
                    20:3c:78:ee:25:fe:02:8b:ca:0d:43:c0:8c:68:3d:
                    5e:fe:80:6a:11:60:0f:bf:51:fc:da:d8:eb:6a:c5:
                    da:4f:6e:f4:33:03:ad:41:0a:9c:0d:1f:d6:7d:01:
                    97:91:a3:85:b1:26:b5:86:dd:30:0d:55:59:30:9d:
                    7d:00:d4:df:3e:d1:08:cd:44:51:df:21:ac:ef:f3:
                    8c:5d:a9:93:05:4f:76:2a:d3:5e:eb:b5:f1:4e:45:
                    ac:9d:48:83:6f:7a:41:e1:49:0c:05:8f:f3:c9:54:
                    0d:07:c6:c6:52:32:75:93:dd:4b:3d:9b:e7:9c:6f:
                    39:c3:76:24:d1:b0:0e:bb:27:87:59:a6:7c:51:f7:
                    e9:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B7:24:B9:58:6E:08:A3:70:A5:E7:26:A2:6C:5F:60:73:0C:28:24
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/ALckuVhuCKNwpecmomxfYHMMKCQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.124.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         41:82:07:44:10:c7:20:3c:07:26:96:5c:6a:ea:e0:dc:16:37:
         3d:a8:77:be:65:c8:cb:86:98:a9:75:e6:cc:9b:f3:71:c7:0d:
         6c:57:e5:4b:2e:04:15:35:0a:81:be:e6:95:eb:a2:30:ff:33:
         29:39:78:12:3b:a9:df:f7:14:93:91:65:2f:e5:b2:17:82:3a:
         ab:69:ac:1f:c1:a2:12:23:be:6d:f5:dc:32:6f:52:cc:75:83:
         63:fb:8c:4b:eb:89:eb:9c:f0:71:23:d7:c7:54:eb:7a:71:ad:
         3b:b0:e7:62:64:10:19:74:3d:db:ed:82:62:a6:a2:a5:bb:24:
         ad:8d:c0:3a:be:01:a1:30:53:cd:e6:6f:a7:38:2e:9b:24:86:
         7e:b5:25:ee:14:61:52:9b:48:76:f4:12:7a:01:b6:50:1f:53:
         cf:31:81:02:b9:dc:09:27:36:30:4c:2a:ad:a9:1b:61:c0:fb:
         9b:d3:2f:2e:b0:83:61:67:3b:9c:e5:84:98:78:3a:47:76:27:
         aa:d8:8c:fd:5d:51:74:ae:ad:71:df:81:a9:c9:0e:3c:a9:a0:
         26:a4:d5:21:8a:39:4c:a4:7c:c2:2b:e1:5a:66:c9:57:db:b9:
         bf:a2:7c:91:34:c3:ea:0a:b8:a9:15:d3:02:29:80:ee:52:73:
         fa:1b:7f:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org