Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/NpmGuknp9wZWiDYU5JnEJ7RbewA.roa
File:                     NpmGuknp9wZWiDYU5JnEJ7RbewA.roa (raw, json)
Hash identifier:          AfwiSr6SV367gkz2td36yaUJUpztIBVXbwX0A1+hA7o=
Subject key identifier:   36:99:86:BA:49:E9:F7:06:56:88:36:14:E4:99:C4:27:B4:5B:7B:00
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       BC
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/NpmGuknp9wZWiDYU5JnEJ7RbewA.roa
Signing time:             Sun 30 Jun 2024 01:28:42 +0000
ROA not before:           Sun 30 Jun 2024 01:28:42 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     19905
IP address blocks:        218.216.176.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 188 (0xbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Jun 30 01:28:42 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=369986BA49E9F70656883614E499C427B45B7B00
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:f4:8b:b7:69:56:b2:06:e7:af:56:60:4e:cb:
                    30:48:0a:9b:5c:46:1c:b4:14:a5:89:63:ea:a7:56:
                    a6:53:b9:9e:40:5f:3d:9f:3b:be:50:8a:0f:77:2b:
                    83:89:3e:16:2f:4a:72:66:40:7f:0b:c8:cd:20:c2:
                    40:bc:d8:a7:23:90:8b:78:c6:d3:d0:8b:02:fa:15:
                    85:9f:eb:86:1c:89:bc:02:57:b4:0d:65:68:28:26:
                    78:81:2d:30:ba:4d:eb:02:30:cf:fc:e2:69:05:97:
                    98:36:d6:81:c3:5e:8d:08:cd:87:fc:52:f1:9f:c3:
                    18:95:0b:54:06:1b:c3:73:af:19:a8:d9:de:ec:93:
                    62:63:06:c9:fb:ce:5a:9d:ea:6a:8a:c4:76:6a:d0:
                    11:99:7c:75:8c:91:ef:29:71:74:44:81:1a:f4:21:
                    51:0c:63:6e:e0:71:18:e6:4c:96:d8:e3:fe:3b:c0:
                    14:84:67:2b:0c:52:0b:00:c8:b1:c7:c7:6e:9b:4c:
                    21:36:f8:28:e3:24:14:1a:4c:7e:68:88:7c:79:15:
                    b0:e7:25:8b:be:d0:6a:3f:50:df:f2:6c:1b:35:ea:
                    ce:2b:87:70:2d:5e:6e:88:54:05:08:27:fe:dc:90:
                    d7:57:f7:c8:a6:10:ac:82:b4:5a:7a:75:2c:f3:82:
                    94:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:99:86:BA:49:E9:F7:06:56:88:36:14:E4:99:C4:27:B4:5B:7B:00
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/NpmGuknp9wZWiDYU5JnEJ7RbewA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.216.176.0/20

    Signature Algorithm: sha256WithRSAEncryption
         30:95:3a:0d:1d:5b:d9:40:32:87:b0:5a:1f:71:71:ec:06:3b:
         56:69:ef:7d:fe:cd:2b:6a:7e:ed:5d:b7:8c:37:4d:ac:7e:0d:
         d5:9d:bc:ea:ad:a1:3b:3f:14:9e:86:02:1a:b6:30:1a:85:9d:
         9e:e8:94:e2:7c:46:13:fe:aa:38:01:41:45:9c:ac:3c:16:b5:
         51:94:fe:a6:78:08:cc:21:0c:5b:61:d6:f9:8c:23:d7:de:16:
         ee:98:d8:ad:8a:fb:90:78:22:0c:23:70:38:61:11:ee:c7:b9:
         05:9c:5f:4c:f7:a6:4a:0e:26:aa:c5:18:5c:65:db:12:f3:da:
         e1:09:1c:d0:cb:b3:f0:32:35:07:8e:35:c4:6f:8b:c6:e4:c1:
         59:77:a3:c5:d0:5e:a6:b7:0c:cb:b0:63:70:29:ef:60:93:1f:
         62:15:79:b5:cd:58:05:6e:20:e9:af:ad:b9:d6:ef:00:25:67:
         00:20:f5:d5:5c:54:41:41:56:08:75:a7:92:c0:89:5e:81:73:
         c3:8c:35:39:13:a3:d6:00:06:f8:0d:df:ff:fc:44:e5:9b:0c:
         88:d8:6a:98:18:ea:98:54:8a:3e:7e:ab:ae:13:3e:b8:c2:c9:
         92:22:28:ee:23:12:2c:53:fd:ad:73:c7:c1:a4:42:a1:ff:09:
         bb:47:54:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 02:07:16 2024 by rpki-client on console-fra.rpki-client.org