Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/311/McjNynOcVTA1NC_L_mUjK8PEwqE.roa
File:                     McjNynOcVTA1NC_L_mUjK8PEwqE.roa (raw, json)
Hash identifier:          DJ+1YEGNZf6ZsRZuQMqRhfg9BxXcca9ZBFnuiJMEr/A=
Subject key identifier:   31:C8:CD:CA:73:9C:55:30:35:34:2F:CB:FE:65:23:2B:C3:C4:C2:A1
Certificate issuer:       /CN=A642E787390B6CE6CEE685B443F93AB3639F116C
Certificate serial:       08
Authority key identifier: A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/McjNynOcVTA1NC_L_mUjK8PEwqE.roa
Signing time:             Thu 26 Sep 2024 21:13:38 +0000
ROA not before:           Thu 26 Sep 2024 21:13:38 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9354
IP address blocks:        221.118.128.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A642E787390B6CE6CEE685B443F93AB3639F116C
        Validity
            Not Before: Sep 26 21:13:38 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=31C8CDCA739C553035342FCBFE65232BC3C4C2A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:37:4f:8d:69:59:23:09:23:98:12:77:ef:2f:
                    79:8c:5c:29:e8:3b:cd:28:85:87:08:65:e1:ba:61:
                    c2:1b:10:7e:49:b1:13:b7:db:40:d3:51:ff:24:93:
                    1f:43:8d:7e:28:55:e9:e1:08:c2:f9:85:25:ac:ab:
                    cd:85:5c:a5:0b:8e:4a:e3:42:2c:0c:9d:42:41:76:
                    ff:47:23:ac:fe:c2:88:84:cd:4b:6d:33:2f:36:87:
                    37:28:ae:43:fd:62:13:19:18:8d:a2:92:1a:ad:e9:
                    75:2e:ee:01:2a:be:34:6f:78:9b:0d:a8:db:02:36:
                    4c:0e:1a:dc:ad:37:cd:83:9b:bf:fd:f4:a8:0c:81:
                    04:19:b0:40:4c:d5:05:02:1b:ab:e6:72:34:f1:3a:
                    a8:30:90:70:39:b5:64:ea:b8:87:1b:2b:81:e5:db:
                    8f:8e:f1:bf:d9:a5:09:55:f6:33:60:b6:fb:c3:36:
                    a6:11:fa:8c:76:b8:8f:bc:66:05:af:76:08:b5:85:
                    89:38:38:e0:da:01:42:18:e0:0d:13:5a:9e:14:46:
                    46:a2:28:d9:51:7f:94:aa:b3:0e:ca:f3:ee:3c:0c:
                    32:ba:e3:71:0f:c9:e0:97:b8:78:b0:b2:e2:69:4b:
                    8e:be:2c:3f:95:5f:58:b7:cd:ad:97:8f:df:e9:b2:
                    3a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:C8:CD:CA:73:9C:55:30:35:34:2F:CB:FE:65:23:2B:C3:C4:C2:A1
            X509v3 Authority Key Identifier:
                keyid:A6:42:E7:87:39:0B:6C:E6:CE:E6:85:B4:43:F9:3A:B3:63:9F:11:6C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/pkLnhzkLbObO5oW0Q_k6s2OfEWw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/pkLnhzkLbObO5oW0Q_k6s2OfEWw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/311/McjNynOcVTA1NC_L_mUjK8PEwqE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.118.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         ac:4c:7e:b1:74:c6:45:06:a6:21:6f:ef:dd:ac:67:82:2e:53:
         0d:66:31:1b:60:a9:12:dc:2d:cc:41:de:71:df:f4:97:25:53:
         30:04:06:df:f8:21:61:e2:0e:3f:0c:aa:2d:27:98:e9:7b:11:
         0b:95:53:28:a2:cf:6c:7b:a9:24:64:f8:e7:ae:65:70:19:4a:
         b0:d9:7c:f1:df:36:cf:98:8d:bc:ff:f3:eb:b1:1e:7b:0d:2c:
         45:3d:9c:70:12:de:47:6f:39:14:06:9f:14:91:51:95:ba:9a:
         92:c3:01:62:08:7a:95:1f:0a:1d:45:48:70:ab:a7:49:cb:94:
         2a:18:90:ff:46:a7:07:78:be:be:8c:ed:18:41:71:cf:e2:bb:
         05:07:4c:f6:93:a8:05:62:1a:e4:87:e2:46:79:bd:95:8f:82:
         db:8e:81:0f:ee:1e:df:8a:2d:bc:62:98:88:69:e7:a6:c2:37:
         14:74:23:f4:86:dd:a4:93:fa:54:dc:6f:ba:c3:a1:37:87:35:
         c4:e6:22:cc:25:e2:1f:90:26:fe:20:57:10:31:49:ab:11:6b:
         fc:90:90:08:44:4e:40:0b:0d:d7:f9:20:f7:f8:28:7f:fa:f2:
         5e:aa:e2:4a:12:e1:4e:e4:7b:83:dd:1d:55:da:1d:0a:23:7b:
         c5:9b:74:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:12 2024 by rpki-client on console-fra.rpki-client.org