Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20266/9Xx8PmrOYj48G9uslmYem785Qtk.roa
File:                     9Xx8PmrOYj48G9uslmYem785Qtk.roa (raw, json)
Hash identifier:          rcBl3VQC5LrBALEyUvSqWfVOZ6pxUbyZJCZk8f1LIo0=
Subject key identifier:   F5:7C:7C:3E:6A:CE:62:3E:3C:1B:DB:AC:96:66:1E:9B:BF:39:42:D9
Certificate issuer:       /CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
Certificate serial:       04
Authority key identifier: 40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/9Xx8PmrOYj48G9uslmYem785Qtk.roa
Signing time:             Sat 19 Oct 2024 02:46:20 +0000
ROA not before:           Sat 19 Oct 2024 02:46:20 +0000
ROA not after:            Sun 19 Oct 2025 00:01:36 +0000
asID:                     18526
IP address blocks:        160.25.134.0/23 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 13:07:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40DACCE2006CE7A6A8C76B5320A0E189845D1560
        Validity
            Not Before: Oct 19 02:46:20 2024 GMT
            Not After : Oct 19 00:01:36 2025 GMT
        Subject: CN=F57C7C3E6ACE623E3C1BDBAC96661E9BBF3942D9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:97:87:e7:a8:30:bd:4c:ed:20:b3:73:1a:a6:
                    c8:a1:8a:9f:ff:50:01:49:b8:42:b7:5c:09:67:18:
                    36:c3:bb:6b:a0:89:7f:2b:6f:57:cc:2d:78:48:c4:
                    90:db:71:1f:3b:7b:06:a3:bd:4d:78:68:46:41:38:
                    97:c7:b9:36:52:cd:de:72:71:02:68:83:fe:11:17:
                    5d:51:f4:ac:d1:26:e8:e2:d2:3d:90:65:b5:a2:c9:
                    3d:c0:43:62:6a:b2:7f:68:96:d0:9b:70:13:8f:00:
                    94:2c:79:54:a7:95:6b:1c:f3:83:62:5f:d4:79:66:
                    80:e5:98:ef:f1:6a:09:1f:c0:4e:40:3d:5e:6e:5c:
                    1e:b6:30:5c:b1:13:c4:59:2c:ac:e4:96:4a:c6:fd:
                    6a:fc:7e:d0:9c:0f:cf:57:c7:d1:fe:ba:b0:a1:40:
                    3c:2f:c9:4d:ce:88:a7:85:0f:cd:a5:0e:14:a6:ba:
                    0e:0a:ca:01:0b:a0:ed:79:7f:00:e6:07:ab:3b:d5:
                    c9:09:eb:a3:7f:a0:9f:ee:4a:e2:a2:4d:3f:cf:1e:
                    ba:30:4c:73:98:22:2e:be:0d:b2:8c:97:8c:9f:4b:
                    16:7d:40:c2:15:9f:c8:e8:e5:ff:d8:e4:5a:d4:aa:
                    01:e7:36:74:c8:b3:a8:16:03:94:6f:20:78:eb:28:
                    5f:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:7C:7C:3E:6A:CE:62:3E:3C:1B:DB:AC:96:66:1E:9B:BF:39:42:D9
            X509v3 Authority Key Identifier:
                keyid:40:DA:CC:E2:00:6C:E7:A6:A8:C7:6B:53:20:A0:E1:89:84:5D:15:60

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/QNrM4gBs56aox2tTIKDhiYRdFWA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNrM4gBs56aox2tTIKDhiYRdFWA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20266/9Xx8PmrOYj48G9uslmYem785Qtk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.25.134.0/23

    Signature Algorithm: sha256WithRSAEncryption
         2a:1e:85:e6:f2:b8:9e:63:75:71:e8:7b:c7:3f:68:81:14:d8:
         92:69:5b:0c:5e:81:02:ae:d7:88:62:48:27:c5:fa:07:89:29:
         98:4a:9b:2e:6b:4f:67:db:35:9e:d4:97:f8:43:da:26:0d:22:
         22:90:a9:a1:2b:5d:a5:79:f8:c3:58:00:22:46:a6:da:92:03:
         ee:a3:5b:68:61:9c:9f:56:54:d0:9c:17:b1:90:60:80:3b:b6:
         b4:7a:3e:65:5f:7d:fa:fa:69:30:f7:35:f3:fa:e7:67:dc:c3:
         81:78:40:e3:b0:95:1b:84:16:08:0c:d8:f0:b9:cd:48:18:94:
         2b:ba:56:b4:82:cb:d2:e3:52:f7:55:35:ef:74:47:a5:81:13:
         4c:f5:14:3a:73:52:60:cc:eb:91:25:0a:24:37:49:19:f6:d7:
         3f:dc:4d:68:f3:c5:00:54:b6:b9:08:28:e6:ac:50:ee:32:e1:
         a4:ba:72:ce:bb:75:5e:c2:87:a2:b9:cf:02:3b:46:6e:f2:d3:
         2b:43:e9:5a:1d:14:41:06:6f:8e:0e:12:f0:bf:b9:99:38:5b:
         cf:cc:26:85:db:50:25:0d:08:d2:52:21:6f:f3:95:71:08:35:
         77:bd:39:b0:d1:6c:25:35:97:37:7d:6b:03:4c:19:ed:97:10:
         fe:ed:d6:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:11 2024 by rpki-client on console-ams.rpki-client.org