Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20099/euC0bz1J245zQ36pfi5-ClWjAF0.roa
File:                     euC0bz1J245zQ36pfi5-ClWjAF0.roa (raw, json)
Hash identifier:          fE6XAAo/tzm/OYcbdVhOcaHIkTODGmmNdOo+JS4e/ns=
Subject key identifier:   7A:E0:B4:6F:3D:49:DB:8E:73:43:7E:A9:7E:2E:7E:0A:55:A3:00:5D
Certificate issuer:       /CN=2327CD1B4F1F8B8956861597E494314A68561591
Certificate serial:       25
Authority key identifier: 23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/euC0bz1J245zQ36pfi5-ClWjAF0.roa
Signing time:             Fri 12 Apr 2024 01:59:07 +0000
ROA not before:           Fri 12 Apr 2024 01:59:07 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     131966
IP address blocks:        202.226.60.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2327CD1B4F1F8B8956861597E494314A68561591
        Validity
            Not Before: Apr 12 01:59:07 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=7AE0B46F3D49DB8E73437EA97E2E7E0A55A3005D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:0d:b1:3e:f9:58:9d:1a:4e:02:4e:41:da:6d:
                    95:e0:43:20:83:1b:21:e5:d1:9b:03:ba:22:b2:30:
                    5b:22:27:c8:5d:36:8d:13:a6:1a:c2:bd:cb:08:53:
                    02:d3:c6:a2:bd:aa:eb:f3:6b:37:39:d9:5f:b9:c7:
                    18:c8:61:29:02:a3:6f:3e:33:a2:b6:49:d6:08:ab:
                    fe:b0:93:31:66:df:2f:ae:79:72:86:f1:c0:15:77:
                    db:9d:4e:c5:21:a1:c5:72:2d:a7:06:9a:e2:8c:8e:
                    5d:89:de:12:da:e4:6c:25:b1:4c:3c:7d:39:c3:14:
                    b4:7c:fb:01:4c:29:fc:16:44:af:55:e8:5c:3c:2d:
                    c4:42:97:7e:ae:a5:28:30:3e:30:ff:68:3e:12:ba:
                    97:e7:b3:7a:56:50:66:49:d5:fe:81:c3:35:ef:78:
                    80:69:1f:3b:a5:e1:2b:33:cf:4d:4c:1d:85:0b:d8:
                    0a:a2:4a:20:8a:57:db:38:0f:ea:1f:32:4f:39:07:
                    92:8a:cd:58:5b:1e:34:25:d2:13:93:d7:7b:83:47:
                    6e:39:e3:4f:48:56:f3:6e:9b:c4:39:ff:eb:c5:e6:
                    66:15:ea:b8:b3:db:7e:66:18:1d:c0:f9:22:22:70:
                    63:3a:05:50:f8:b5:b7:90:37:b6:fe:3f:2a:d0:c5:
                    ca:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:E0:B4:6F:3D:49:DB:8E:73:43:7E:A9:7E:2E:7E:0A:55:A3:00:5D
            X509v3 Authority Key Identifier:
                keyid:23:27:CD:1B:4F:1F:8B:89:56:86:15:97:E4:94:31:4A:68:56:15:91

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/IyfNG08fi4lWhhWX5JQxSmhWFZE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IyfNG08fi4lWhhWX5JQxSmhWFZE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20099/euC0bz1J245zQ36pfi5-ClWjAF0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.60.0/22

    Signature Algorithm: sha256WithRSAEncryption
         6b:26:eb:0f:a9:1c:b7:65:80:5e:ae:b1:71:de:c9:8c:20:3d:
         b7:2a:ea:4a:22:38:0c:5d:37:9e:5d:c0:58:6e:f4:2d:b8:5e:
         c7:a4:07:db:ac:48:89:75:32:23:6f:55:00:1e:9c:81:3e:3d:
         e3:5a:35:9d:f4:ec:95:e4:2c:81:73:f3:eb:67:3d:12:81:a5:
         c3:88:d1:1d:6b:a5:eb:1d:83:b6:15:f2:6b:b4:10:4a:49:66:
         12:6b:07:7c:a4:20:09:5f:57:bc:87:f7:e4:29:fb:0a:5a:cc:
         3c:d9:72:bf:da:cf:f6:8d:11:33:2b:66:05:84:32:77:e8:79:
         0e:5f:91:6b:9d:3b:07:43:b5:50:9e:ca:ca:a0:87:56:3c:61:
         a2:67:87:f7:4f:24:8e:b0:3a:da:e0:fe:32:e2:d8:74:17:be:
         57:7d:10:63:8d:31:f2:50:0f:eb:3c:b5:85:b3:2e:6f:69:80:
         37:cb:82:dc:cf:07:53:73:29:45:fe:3f:5f:1e:74:bc:06:c1:
         df:83:86:7a:08:7f:ba:86:02:5d:fc:2b:be:ec:42:13:2d:18:
         61:0e:42:18:af:4a:16:35:f0:2e:3b:5a:b0:d1:d9:cc:80:d3:
         9a:ef:f5:48:a2:89:4a:8c:28:f7:c4:f1:41:44:9b:0b:75:5d:
         5f:83:07:6d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:27 2024 by rpki-client on console-ams.rpki-client.org