Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/8mwKQiqCD2aXoJunjpGmiU17EpA.roa
File:                     8mwKQiqCD2aXoJunjpGmiU17EpA.roa (raw, json)
Hash identifier:          CSwaQs2LidvAm2hovappKSEI2hw1yaZKIlANNLU0UpA=
Subject key identifier:   F2:6C:0A:42:2A:82:0F:66:97:A0:9B:A7:8E:91:A6:89:4D:7B:12:90
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       010A
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8mwKQiqCD2aXoJunjpGmiU17EpA.roa
Signing time:             Tue 03 Sep 2024 01:02:07 +0000
ROA not before:           Tue 03 Sep 2024 01:02:07 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9607
IP address blocks:        218.231.252.0/22 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 266 (0x10a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Sep  3 01:02:07 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F26C0A422A820F6697A09BA78E91A6894D7B1290
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:c1:c2:8d:f5:2b:d1:a5:fb:f4:69:6e:f0:36:
                    ae:30:18:49:4e:62:3d:04:fa:f8:d8:38:26:bd:85:
                    17:28:6f:22:7b:32:6b:c5:a9:76:91:7a:fb:83:80:
                    cf:e8:19:2b:bf:ff:7c:a1:0b:53:7e:49:c5:9e:1a:
                    06:93:f8:dc:a3:b8:35:bd:83:30:2c:a1:9e:6c:e8:
                    ce:10:10:b8:ed:9a:c9:01:38:3e:61:a0:92:45:b4:
                    e4:32:31:ae:f2:1f:6e:77:81:15:08:71:02:3f:14:
                    af:3c:05:3a:0d:56:ea:bb:d1:c7:c6:b5:6f:db:ee:
                    bc:c3:06:c6:55:7a:cb:69:f8:fc:f5:94:bc:1d:a2:
                    39:a8:bc:df:e2:3a:2b:d1:db:93:71:1d:f6:b2:48:
                    bf:6e:81:eb:e3:20:fd:fc:2a:e6:14:13:b2:fe:8c:
                    88:42:2c:59:4c:be:ec:bd:40:ad:e5:54:b6:9f:f8:
                    27:55:89:5a:ad:37:d1:cc:f3:e3:f3:69:e3:44:2a:
                    c8:17:a0:d5:14:6d:fb:bd:74:31:97:6e:b5:0b:46:
                    df:69:9c:86:8b:fb:62:c6:35:36:a9:9a:dc:a5:64:
                    7a:39:b9:3f:b9:4e:cd:e3:5a:25:2c:b1:71:d8:69:
                    72:69:31:2f:b9:21:b3:8a:24:27:43:ff:b2:83:5d:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:6C:0A:42:2A:82:0F:66:97:A0:9B:A7:8E:91:A6:89:4D:7B:12:90
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/8mwKQiqCD2aXoJunjpGmiU17EpA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.252.0/22

    Signature Algorithm: sha256WithRSAEncryption
         17:01:5e:d8:7a:ad:dd:f2:98:94:92:73:3f:e7:1b:5b:93:35:
         8e:08:96:fa:0c:3d:27:66:a8:ba:48:86:96:fa:88:32:5a:c6:
         eb:79:3f:eb:61:c0:cb:ba:5e:d4:f5:62:67:1c:05:ff:9d:8a:
         85:b8:4c:b7:1c:e9:b8:27:90:3c:3e:40:c5:64:68:fb:87:e5:
         39:ef:5f:31:b6:ef:a5:db:e5:bc:fc:e3:4b:56:f8:bd:a4:dc:
         20:70:c3:54:c1:de:87:6f:2b:66:f4:bf:46:80:4b:94:ad:5a:
         c1:a7:5b:00:1c:c6:d9:36:30:5a:ea:58:b1:71:23:e9:5b:2f:
         60:9f:97:89:00:38:ad:69:92:e0:e4:cd:49:a2:09:4b:e8:25:
         8b:41:21:82:f7:6d:49:50:65:3b:6b:77:1b:a0:99:e2:26:81:
         9b:41:62:31:78:e2:e1:32:41:22:1f:49:40:c7:b3:f9:b3:11:
         12:46:1d:1e:6b:b3:b0:b5:97:e0:9a:2c:60:ae:e5:a5:e0:d2:
         48:b4:5b:d8:d2:88:8a:dc:90:a0:e5:5c:5a:70:e3:8d:a1:55:
         b4:22:76:ac:80:d3:b2:56:d5:98:f2:be:60:9f:52:d7:14:0c:
         c8:bc:f0:52:61:e9:32:a9:be:55:40:5e:3b:97:96:d4:4f:df:
         2b:ef:37:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:43 2024 by rpki-client on console-ams.rpki-client.org