Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/249/FeOOMDR3zu6d0gMG0A4XqwudkFs.roa
File:                     FeOOMDR3zu6d0gMG0A4XqwudkFs.roa (raw, json)
Hash identifier:          YspmgO5Tpi1TZ5fYET5phjx8/5j+V65oLQ/MjV8sM/E=
Subject key identifier:   15:E3:8E:30:34:77:CE:EE:9D:D2:03:06:D0:0E:17:AB:0B:9D:90:5B
Certificate issuer:       /CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
Certificate serial:       1F
Authority key identifier: 27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/FeOOMDR3zu6d0gMG0A4XqwudkFs.roa
Signing time:             Wed 28 Feb 2024 05:03:55 +0000
ROA not before:           Wed 28 Feb 2024 05:03:55 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     7679
IP address blocks:        210.252.0.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 16 Jun 2024 13:46:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 31 (0x1f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=275D9782B13E99128CD34F22C09FE8E7B5CBA70B
        Validity
            Not Before: Feb 28 05:03:55 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=15E38E303477CEEE9DD20306D00E17AB0B9D905B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ac:36:97:35:03:e1:68:a3:b7:31:71:5e:92:
                    d7:2f:7b:09:a9:3b:99:99:d4:70:f4:4c:5e:33:13:
                    f9:93:f1:02:2b:f8:7b:8f:27:0e:08:2a:f5:4d:b4:
                    4f:4d:59:e8:30:58:14:9d:46:9a:50:67:2c:9d:55:
                    d4:57:af:5f:44:f0:dc:08:90:c9:04:1f:20:87:4b:
                    af:60:7e:8c:eb:a7:91:39:36:e1:82:87:d4:67:67:
                    4d:ea:b6:67:74:fd:b0:6e:49:dc:c9:60:c8:9e:8b:
                    ec:52:b2:9f:da:53:8b:43:43:e1:52:e0:64:1f:ac:
                    f6:3f:fe:51:ae:cc:18:79:b2:70:68:fd:9b:cb:9e:
                    9c:7b:b9:b5:2b:eb:d3:fb:b5:12:db:25:55:01:32:
                    cd:28:0c:6d:f6:f0:54:e1:3b:26:d2:dd:f5:29:78:
                    0e:e5:f2:1a:9d:30:0b:f5:5f:a2:f5:3e:9d:67:31:
                    bc:6b:9b:0f:34:a8:23:89:c5:9a:3f:f1:37:78:a6:
                    bf:e1:4c:72:de:38:36:f6:ae:5d:4a:98:21:bb:b2:
                    0c:30:4d:8e:fb:17:6b:7f:c9:59:da:9c:ce:de:4a:
                    f0:ad:c9:2b:04:bd:ee:15:ef:e5:97:3d:bc:a7:d3:
                    14:6e:74:49:7b:c0:e0:10:3e:4c:15:75:fe:01:92:
                    92:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:E3:8E:30:34:77:CE:EE:9D:D2:03:06:D0:0E:17:AB:0B:9D:90:5B
            X509v3 Authority Key Identifier:
                keyid:27:5D:97:82:B1:3E:99:12:8C:D3:4F:22:C0:9F:E8:E7:B5:CB:A7:0B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/J12XgrE-mRKM008iwJ_o57XLpws.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/J12XgrE-mRKM008iwJ_o57XLpws.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/249/FeOOMDR3zu6d0gMG0A4XqwudkFs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.252.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         9d:fc:75:fc:d2:b8:3f:98:2f:43:b3:31:8f:79:d1:f2:01:2b:
         6c:9e:33:9e:9f:39:9a:16:c5:4f:a7:2f:04:db:44:e8:18:53:
         94:e8:1a:f6:3e:39:c2:e7:19:36:39:f8:a7:30:d7:58:29:65:
         63:94:2b:37:f7:89:6d:19:63:83:f2:d7:6a:e2:bc:af:69:60:
         a7:b9:6c:da:d4:26:06:c4:81:a2:d6:4c:c7:fb:cc:45:84:ed:
         11:55:ae:98:14:ac:d5:b1:31:c0:2c:a5:2d:07:b9:d1:a5:03:
         88:d6:63:0b:b7:84:e7:e3:f4:3a:9e:59:8d:e0:11:17:ad:40:
         1a:be:96:f6:ec:5a:bd:d0:01:fe:8e:c3:bc:2e:0e:0a:ca:97:
         c2:8f:c7:35:3d:cb:55:3d:ab:49:ad:b8:ae:50:66:be:a2:e7:
         c8:bb:b3:5a:5e:d1:40:6e:f3:cf:56:68:bf:0c:39:0b:f7:f4:
         f9:93:29:86:9d:27:0f:df:5e:df:e2:76:0f:39:eb:93:9a:46:
         05:1e:7a:70:49:5f:6d:a3:2b:e5:9f:a6:1d:96:75:e4:80:e9:
         2c:54:91:a5:39:07:7e:87:9a:c5:f9:6a:7a:dc:0b:fa:06:96:
         64:51:44:45:68:3f:31:e4:aa:7b:7d:12:ee:1e:3e:94:27:29:
         ae:c6:a9:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 13 17:53:22 2024 by rpki-client on console-ams.rpki-client.org