Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/33/cwAAmeI_JOmYlLTC2pDSfodTCl0.roa
File:                     cwAAmeI_JOmYlLTC2pDSfodTCl0.roa (raw, json)
Hash identifier:          7e54G7UYXzqhZJq16ZGxpiC8uZVg3i3uBnQTnc9NvEM=
Subject key identifier:   73:00:00:99:E2:3F:24:E9:98:94:B4:C2:DA:90:D2:7E:87:53:0A:5D
Certificate issuer:       /CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
Certificate serial:       07
Authority key identifier: CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/cwAAmeI_JOmYlLTC2pDSfodTCl0.roa
Signing time:             Wed 17 Apr 2024 06:17:58 +0000
ROA not before:           Wed 17 Apr 2024 06:17:58 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     17955
IP address blocks:        202.247.192.0/18 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CE05E71ADDEC0F8E361BB55AB103F53D3856C60A
        Validity
            Not Before: Apr 17 06:17:58 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=73000099E23F24E99894B4C2DA90D27E87530A5D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:b4:1f:6c:89:22:71:86:ec:30:10:1d:0a:bd:
                    c6:f7:80:4c:cc:6c:56:c8:63:99:87:bc:6e:de:08:
                    27:4d:eb:60:8d:5a:16:fb:2f:38:de:fa:fc:9d:49:
                    8b:0b:a3:1a:a3:19:58:44:84:19:61:22:46:ad:73:
                    7c:20:7a:2e:42:5d:96:88:8d:a8:8c:77:e9:78:22:
                    ad:64:7d:13:d2:9d:b4:5c:d1:41:f3:df:55:39:c0:
                    bb:aa:c7:46:26:43:f4:51:3b:23:6b:63:45:66:56:
                    fd:d6:93:3b:57:16:af:3d:7e:48:e2:07:00:76:0c:
                    e3:c1:a1:ae:84:90:32:f7:43:65:e7:0d:b2:50:1d:
                    8c:78:49:02:99:07:62:0a:37:e3:d8:07:d4:a2:6f:
                    0a:e7:12:9c:71:48:c3:30:38:ca:6c:4c:a5:00:cf:
                    bd:f4:bb:21:46:74:b2:6e:53:58:30:11:c9:36:60:
                    5d:4b:94:79:37:8e:52:cb:9e:3f:52:e8:56:26:76:
                    e7:c1:4d:bc:de:65:4c:7f:89:14:5b:5d:7f:8d:ef:
                    88:25:f8:09:6d:ab:a2:9f:8c:3f:69:4f:6c:60:13:
                    ef:41:e0:c8:32:5d:b9:eb:c9:c0:18:a5:42:30:2d:
                    cd:f4:a5:6e:e8:11:87:a2:90:67:9c:3a:ca:09:e2:
                    49:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:00:00:99:E2:3F:24:E9:98:94:B4:C2:DA:90:D2:7E:87:53:0A:5D
            X509v3 Authority Key Identifier:
                keyid:CE:05:E7:1A:DD:EC:0F:8E:36:1B:B5:5A:B1:03:F5:3D:38:56:C6:0A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/zgXnGt3sD442G7VasQP1PThWxgo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/zgXnGt3sD442G7VasQP1PThWxgo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/33/cwAAmeI_JOmYlLTC2pDSfodTCl0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.247.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         79:94:c8:8c:2d:fd:0f:5e:fe:72:ce:5c:78:f5:6a:cc:d9:b6:
         bf:6e:d8:f2:d5:33:08:a0:b1:40:d1:22:21:b9:ae:92:70:55:
         b1:f7:99:37:22:b5:4a:1c:f1:78:35:8b:50:22:3d:08:aa:f5:
         e6:08:b1:9b:34:56:64:e7:81:87:62:37:28:8a:c4:4f:5c:0c:
         8a:cf:b3:1d:34:f5:a3:12:25:3c:86:47:0e:e0:f9:a1:05:38:
         a1:d0:74:2e:15:32:f6:6d:ec:08:67:f1:e2:ab:ce:39:e1:12:
         08:c9:7c:f1:50:4e:03:c8:bb:0e:28:3d:72:6a:5c:c3:4a:7e:
         22:00:ab:96:9b:96:60:0f:a7:94:88:21:b5:a1:67:fa:97:e7:
         61:ca:0e:dc:fe:66:df:cc:58:1c:6d:0f:37:d9:cb:92:35:7d:
         3d:7a:50:41:88:3e:cf:54:b2:f6:ec:a1:7b:b2:cf:fb:b6:99:
         22:aa:4c:cd:6d:6a:43:d8:e2:c4:bd:cf:38:d6:6d:4e:19:24:
         17:79:6d:76:99:ad:b8:ac:b5:3d:29:95:2b:3e:82:19:ce:59:
         38:af:85:24:83:9a:aa:57:7c:cd:79:7a:d6:1d:22:e7:71:56:
         fa:88:1f:e5:50:13:89:6c:79:0d:d1:7f:06:33:6c:cc:91:50:
         f6:3e:a0:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org