Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mO18VIi-Fhu0zVqpky7a_bASgSU.roa
File:                     mO18VIi-Fhu0zVqpky7a_bASgSU.roa (raw, json)
Hash identifier:          mZPs+CzFjtyINB/WoRneIGI47yYUPlnRfK1G7J5qNIs=
Subject key identifier:   98:ED:7C:54:88:BE:16:1B:B4:CD:5A:A9:93:2E:DA:FD:B0:12:81:25
Certificate issuer:       /CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
Certificate serial:       14
Authority key identifier: C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mO18VIi-Fhu0zVqpky7a_bASgSU.roa
Signing time:             Tue 02 Apr 2024 00:25:08 +0000
ROA not before:           Tue 02 Apr 2024 00:25:08 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     18071
IP address blocks:        202.244.202.0/23 maxlen: 23

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 25 May 2024 01:38:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C60076FC28F04DEB9817A3482226942CBEF1F80D
        Validity
            Not Before: Apr  2 00:25:08 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=98ED7C5488BE161BB4CD5AA9932EDAFDB0128125
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:6a:00:58:80:c1:f2:4b:f1:ee:aa:aa:75:1f:
                    aa:64:00:9c:52:da:e9:2f:80:be:a9:bc:88:8e:59:
                    27:57:2c:bd:38:74:2e:cc:fe:32:2c:6d:05:93:68:
                    02:80:98:d7:be:75:7c:a0:27:44:99:6e:ce:65:63:
                    d7:69:8e:17:7a:66:c4:52:80:73:1a:cc:8a:46:a0:
                    90:16:d1:89:80:0b:ff:d6:25:df:90:5a:86:6e:18:
                    0a:6b:44:a6:8e:39:01:c6:3d:da:ba:9e:a8:b2:c9:
                    e7:da:82:07:d4:8a:09:96:7b:fa:73:48:11:8b:38:
                    c3:b8:6a:3b:72:bb:92:28:5b:72:1b:f1:05:35:c1:
                    dd:f6:28:e9:95:31:22:9b:d1:3d:bb:db:eb:81:a2:
                    ea:fe:c5:cf:ee:2c:cc:6d:97:cb:3d:01:32:73:3d:
                    74:54:fa:da:ee:72:92:78:8f:73:7c:ba:ca:89:9e:
                    15:92:bc:72:dd:a9:89:38:4a:29:bc:f7:1a:3f:78:
                    83:db:4d:f8:9e:05:52:d9:af:0d:56:8e:78:57:64:
                    b9:07:f0:90:27:c5:9d:5b:26:f5:6a:22:bb:07:90:
                    6e:e9:e5:a7:c8:76:51:89:4a:a3:00:e7:12:f1:22:
                    b9:d9:14:7d:ec:6a:a0:4f:2a:79:72:d5:7f:a7:72:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:ED:7C:54:88:BE:16:1B:B4:CD:5A:A9:93:2E:DA:FD:B0:12:81:25
            X509v3 Authority Key Identifier:
                keyid:C6:00:76:FC:28:F0:4D:EB:98:17:A3:48:22:26:94:2C:BE:F1:F8:0D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/xgB2_CjwTeuYF6NIIiaULL7x-A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xgB2_CjwTeuYF6NIIiaULL7x-A0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1937/mO18VIi-Fhu0zVqpky7a_bASgSU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.202.0/23

    Signature Algorithm: sha256WithRSAEncryption
         4b:ad:2b:60:f8:f6:6f:1b:6b:74:d2:68:e5:7b:13:02:4b:bb:
         5c:1d:07:73:c8:8d:8c:4a:98:7e:7f:5e:67:f9:45:9c:58:d7:
         52:05:b4:1f:9e:01:6b:03:82:a5:c8:07:77:8f:3a:a4:89:0f:
         21:b1:53:d3:55:c3:03:cb:cb:5c:49:2e:83:49:ff:06:ca:8a:
         d0:51:4c:23:f4:a7:d9:31:2a:cc:56:4d:7f:d2:49:44:1e:3f:
         0d:d1:dc:d3:30:55:4c:e8:aa:59:5e:c3:92:07:fe:02:30:b0:
         a9:fb:c0:6b:47:8c:ce:84:66:64:2d:f0:71:52:c8:38:78:19:
         d9:a1:5b:cb:03:fb:65:55:e8:b8:f6:b9:57:6f:c1:2f:7a:96:
         38:bb:50:b9:72:3e:bd:12:04:1e:f1:ad:6e:de:0d:cd:e7:0e:
         eb:ba:b5:c2:7d:2e:38:b6:05:43:a4:72:03:43:35:20:24:0e:
         2e:30:ae:c9:60:cd:2c:c8:ef:4a:d0:7a:b2:79:3d:f7:29:b9:
         cd:44:df:60:c5:2a:d6:e4:d3:60:6d:4b:79:1c:2d:34:62:80:
         66:3b:ff:35:1c:d2:07:e5:cc:37:ed:4a:85:28:44:79:91:cd:
         f0:d5:0f:5e:3b:11:bd:db:03:5f:6f:0d:b8:d4:a1:7f:ee:74:
         c8:c3:04:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon May 20 02:36:26 2024 by rpki-client on console-ams.rpki-client.org