Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/173/jW20tVNKnvuh_jgHtmHCfhFYt9U.roa
File:                     jW20tVNKnvuh_jgHtmHCfhFYt9U.roa (raw, json)
Hash identifier:          GVzdIhN/zBEDnm4QbcnYIIPqxFlnbapgmhokd32fUrk=
Subject key identifier:   8D:6D:B4:B5:53:4A:9E:FB:A1:FE:38:07:B6:61:C2:7E:11:58:B7:D5
Certificate issuer:       /CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
Certificate serial:       B3
Authority key identifier: CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/jW20tVNKnvuh_jgHtmHCfhFYt9U.roa
Signing time:             Thu 29 Feb 2024 01:29:57 +0000
ROA not before:           Thu 29 Feb 2024 01:29:57 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     18126
IP address blocks:        202.150.48.0/21 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 179 (0xb3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD312427F800B8296DA11540C8B86E5CE12FC6C5
        Validity
            Not Before: Feb 29 01:29:57 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=8D6DB4B5534A9EFBA1FE3807B661C27E1158B7D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:76:da:6d:21:71:d1:88:81:55:44:a7:ac:ae:
                    69:8d:49:df:35:f7:6d:84:4c:ca:8f:37:6f:a0:bb:
                    0e:9a:e3:8b:28:03:ae:78:96:ec:92:26:97:74:e2:
                    27:f8:5e:79:1e:56:37:bc:e7:ea:d5:59:8e:22:af:
                    1d:6f:cc:ab:51:da:c5:43:96:9f:22:28:17:82:7b:
                    c1:0a:e9:cb:1d:f9:f3:08:ff:eb:7b:ff:86:4b:4e:
                    0b:ac:d0:92:ba:58:e9:d6:1d:32:57:04:90:a5:84:
                    ef:99:dd:d4:17:94:30:f4:27:0c:9c:16:cb:db:89:
                    cf:16:fc:d6:6c:19:03:76:bb:3c:a3:cc:2e:02:4a:
                    41:ec:9a:33:3c:37:ba:f3:c6:09:c9:49:6d:92:45:
                    af:56:d8:a9:dd:3b:84:4c:14:2d:7c:b0:4d:81:2e:
                    01:91:38:13:f4:f3:af:1f:c4:65:7e:f8:61:86:28:
                    d1:aa:1a:d7:11:60:e3:98:d5:04:de:de:fc:f2:59:
                    81:70:26:98:14:92:aa:bd:9e:60:55:27:ba:40:da:
                    93:28:1f:d0:27:1f:bb:81:51:ce:24:32:bb:8c:8e:
                    da:4a:19:c1:4f:b7:28:bd:71:6b:1c:ab:15:3b:f2:
                    93:65:9a:bb:85:1e:2f:5e:7f:92:ec:9b:47:0a:62:
                    3b:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:6D:B4:B5:53:4A:9E:FB:A1:FE:38:07:B6:61:C2:7E:11:58:B7:D5
            X509v3 Authority Key Identifier:
                keyid:CD:31:24:27:F8:00:B8:29:6D:A1:15:40:C8:B8:6E:5C:E1:2F:C6:C5

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/zTEkJ_gAuCltoRVAyLhuXOEvxsU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zTEkJ_gAuCltoRVAyLhuXOEvxsU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/173/jW20tVNKnvuh_jgHtmHCfhFYt9U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.150.48.0/21

    Signature Algorithm: sha256WithRSAEncryption
         b4:ad:21:5b:21:19:e1:c2:aa:bf:03:c0:04:e6:74:b5:e0:c9:
         88:db:55:fd:bd:65:d2:d2:68:36:85:27:67:93:c1:b3:cf:89:
         e1:b1:3f:35:7d:ba:6d:9d:b7:fe:16:46:8d:07:a5:57:46:aa:
         48:49:ff:76:d6:d3:fc:f3:71:77:25:c8:8e:d5:26:fb:00:33:
         73:68:4b:60:6c:31:26:2b:04:7e:f8:f6:3d:78:9d:bf:6d:34:
         2e:c6:27:c8:bc:35:01:2e:31:76:43:cb:44:56:7d:cc:7d:46:
         b0:a2:43:4c:99:27:48:ec:fb:1d:5b:ce:7b:b0:ff:74:71:24:
         78:f6:c8:91:ac:4a:3a:d5:09:a4:e9:70:b4:35:51:b4:2d:02:
         d8:ba:0a:56:22:6f:94:ca:0d:f1:d0:43:3a:8e:11:80:bc:c1:
         3e:d3:30:a6:75:26:3b:b9:d2:7f:c8:d3:9a:c1:25:d0:37:6e:
         8a:10:d7:01:ba:03:4b:ee:3c:b0:a5:c6:a7:ab:48:83:2e:89:
         cd:84:e8:87:2b:dc:e2:68:f8:16:74:cc:e3:ba:68:05:4a:c7:
         27:66:d1:f0:8a:d2:3e:ca:cb:f0:57:59:dd:53:8e:51:f0:0e:
         21:33:f0:7b:17:ce:5b:1a:8d:8f:a3:89:6e:8b:6e:0e:59:24:
         1e:f1:9f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:10 2024 by rpki-client on console-ams.rpki-client.org