Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
File:                     _DM02CLaNNG-Sdqjt-alNt2tnPE.roa (raw, json)
Hash identifier:          B7w94eaOeTtKInvWnwu7Rq9VEj7g/Tt4dRwk5udZw9U=
Subject key identifier:   FC:33:34:D8:22:DA:34:D1:BE:49:DA:A3:B7:E6:A5:36:DD:AD:9C:F1
Certificate issuer:       /CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
Certificate serial:       02
Authority key identifier: 14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
Signing time:             Fri 27 Sep 2024 00:03:51 +0000
ROA not before:           Fri 27 Sep 2024 00:03:51 +0000
ROA not after:            Fri 26 Sep 2025 07:28:48 +0000
asID:                     2907
IP address blocks:        150.99.0.0/16 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=14ECDE331DB3ED1459D9E478D730170F4C70E9B7
        Validity
            Not Before: Sep 27 00:03:51 2024 GMT
            Not After : Sep 26 07:28:48 2025 GMT
        Subject: CN=FC3334D822DA34D1BE49DAA3B7E6A536DDAD9CF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:bc:ed:ec:ea:ae:7f:54:ff:84:68:38:54:
                    d1:08:48:47:3f:04:f9:6e:00:85:37:67:2d:aa:82:
                    13:3b:4d:b5:7c:ed:0b:6a:b1:ac:14:b1:e9:ca:93:
                    62:ec:8c:e5:0e:5b:7e:45:6d:c4:40:9a:cf:75:0c:
                    a5:6f:05:73:e7:52:f5:ce:05:10:42:d6:e7:5d:9c:
                    85:16:21:f7:0a:0e:26:0f:46:71:61:e6:47:5c:5d:
                    dd:fc:47:62:2b:84:8b:2b:ff:49:97:da:e6:42:7c:
                    ae:bf:f5:58:22:e0:a0:0c:3c:0d:1d:9e:ab:ee:65:
                    6a:88:c7:10:04:e2:cc:34:ce:4e:a1:94:1d:2b:01:
                    22:3d:37:6b:c8:50:57:34:74:5c:14:19:42:ad:36:
                    36:26:19:70:26:0f:af:0a:a6:95:a5:c9:ad:4d:e2:
                    8c:e4:e3:7b:89:14:0b:41:c6:81:1e:92:25:00:91:
                    f0:31:b6:17:ce:95:b2:f6:fe:e2:99:56:57:0e:7e:
                    33:54:ff:a7:52:1d:d8:1e:63:d2:c9:8e:52:b7:55:
                    7c:68:1d:b6:f9:d1:31:7d:63:fa:7e:16:ec:2e:85:
                    ed:84:f4:f6:c0:72:73:43:d6:a8:cc:de:ed:dd:0b:
                    e3:90:ef:3c:1d:ac:71:c4:2f:49:24:fa:c4:df:b7:
                    d8:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:33:34:D8:22:DA:34:D1:BE:49:DA:A3:B7:E6:A5:36:DD:AD:9C:F1
            X509v3 Authority Key Identifier:
                keyid:14:EC:DE:33:1D:B3:ED:14:59:D9:E4:78:D7:30:17:0F:4C:70:E9:B7

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/FOzeMx2z7RRZ2eR41zAXD0xw6bc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FOzeMx2z7RRZ2eR41zAXD0xw6bc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/_DM02CLaNNG-Sdqjt-alNt2tnPE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.99.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         99:5a:78:b3:7f:8e:45:f8:fc:56:8f:f3:4b:a5:d8:ea:e4:01:
         0a:40:59:a0:00:18:f4:45:e6:d2:be:83:23:9f:c7:c0:54:79:
         6f:b7:6c:f8:68:67:dc:ef:4c:22:b4:3d:45:67:48:84:51:6c:
         c2:07:30:29:22:55:06:80:a2:1d:7a:fa:9a:e2:43:52:4b:af:
         cf:11:58:5d:35:45:69:16:a0:80:3b:a6:89:06:ee:01:08:20:
         51:88:14:5c:c4:11:e8:4f:98:b3:04:fd:05:f7:c5:b8:30:3d:
         a9:78:46:e3:f8:5a:06:23:35:b0:ce:fb:06:95:e6:11:33:e7:
         84:2a:5b:b4:80:f1:00:bf:10:1e:0b:f6:9e:ce:dd:ae:f2:54:
         12:2b:ba:63:10:73:02:7a:ff:d9:76:52:85:66:67:39:bc:c7:
         a7:2d:57:2a:48:ff:2c:e9:da:a3:86:ca:fc:80:18:1d:9f:fe:
         0b:b5:01:95:96:71:22:e7:49:a8:21:c9:8a:60:a0:f7:be:3b:
         ae:07:50:83:d2:e5:9c:d5:96:92:0c:3b:79:f0:b8:c2:b3:40:
         a6:ba:42:4b:44:a6:fe:2e:a0:81:85:52:79:73:71:77:7a:71:
         ac:f7:81:cf:52:b6:01:28:74:2d:46:c3:6a:fb:91:cc:14:01:
         ed:80:0a:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:11 2024 by rpki-client on console-fra.rpki-client.org