Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
File:                     k8MmNgqZq37kgmud__Qo4KIOF60.roa (raw, json)
Hash identifier:          FXNNm/2A63MWwTgojZaml9OoUDucb1DLGbxk65A9q/w=
Subject key identifier:   93:C3:26:36:0A:99:AB:7E:E4:82:6B:9D:FF:F4:28:E0:A2:0E:17:AD
Certificate issuer:       /CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
Certificate serial:       2E
Authority key identifier: 18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
Signing time:             Thu 29 Feb 2024 01:34:02 +0000
ROA not before:           Thu 29 Feb 2024 01:34:02 +0000
ROA not after:            Fri 14 Feb 2025 01:30:03 +0000
asID:                     14618
IP address blocks:        202.244.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 09 May 2024 03:13:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=185B557EF3BE81985C5E6CD9624761CAA4F936CE
        Validity
            Not Before: Feb 29 01:34:02 2024 GMT
            Not After : Feb 14 01:30:03 2025 GMT
        Subject: CN=93C326360A99AB7EE4826B9DFFF428E0A20E17AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:7f:bc:00:3f:ae:0c:5d:af:b5:69:c2:f5:
                    93:53:7d:3d:d6:6e:fb:82:92:c8:bd:a6:75:3e:fe:
                    46:7f:b7:b4:b0:ad:f3:de:a6:81:17:6f:26:92:3e:
                    69:2f:26:3f:ae:75:92:60:45:68:d2:1a:cf:6e:10:
                    fc:d5:1b:c3:d0:43:da:1d:ef:81:de:76:16:4a:4e:
                    52:bf:42:5f:55:a9:df:7d:96:88:27:ff:ff:0b:ea:
                    02:91:e3:e2:4b:d7:b9:f5:e4:03:4e:f6:98:77:43:
                    55:5c:b1:78:ab:ab:1c:4a:75:dc:a1:51:a1:c2:29:
                    59:ca:78:6c:3d:44:b7:3e:5d:14:ea:12:fc:2e:c7:
                    fc:db:54:40:35:e4:c0:44:cd:35:27:27:44:9c:29:
                    b6:4d:16:a5:a0:de:d3:1b:62:1c:90:1a:ee:87:ea:
                    15:ee:0c:65:65:40:a5:02:30:28:56:b8:24:96:d3:
                    e5:18:51:1d:b7:5b:27:e9:37:39:cb:08:5e:62:c6:
                    9c:47:ac:b7:b7:b1:12:52:d7:a7:24:21:9a:7d:3c:
                    98:21:1e:91:e0:f3:9d:70:66:76:cc:90:21:e4:dd:
                    ce:28:2c:37:48:39:1d:70:38:1c:34:4b:71:92:e4:
                    9b:1c:72:58:6e:8e:ae:ca:20:9e:20:b4:96:fc:ba:
                    84:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:C3:26:36:0A:99:AB:7E:E4:82:6B:9D:FF:F4:28:E0:A2:0E:17:AD
            X509v3 Authority Key Identifier:
                keyid:18:5B:55:7E:F3:BE:81:98:5C:5E:6C:D9:62:47:61:CA:A4:F9:36:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GFtVfvO-gZhcXmzZYkdhyqT5Ns4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/3818/k8MmNgqZq37kgmud__Qo4KIOF60.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.244.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         bf:59:93:df:f9:b7:3e:b6:9b:a1:89:be:a5:4f:cf:03:5d:97:
         2e:20:33:e9:44:12:36:c0:78:9b:30:74:a9:4d:67:df:d1:8c:
         f2:37:65:0d:f2:50:74:cd:8a:6b:b5:91:b6:0b:fe:f9:1f:bd:
         da:b0:15:b3:c1:a6:5e:64:c5:de:c1:c6:b8:da:3c:88:77:7e:
         34:52:e0:b7:37:5a:94:47:37:b9:0a:f4:e5:ed:da:4e:b0:ce:
         a1:c1:4e:14:53:69:4d:cd:d7:eb:93:56:e7:37:ea:67:cb:33:
         c3:d9:66:50:ed:ab:79:bd:55:8d:0f:0e:55:5f:81:9b:14:1e:
         8d:2d:ce:54:f9:19:36:e8:eb:c7:07:6f:7b:84:2b:65:42:90:
         18:f8:d5:78:b6:8e:48:de:b4:e5:df:34:28:d3:65:83:3b:5d:
         44:4c:99:dd:fa:2d:08:9c:d1:7a:9b:29:54:26:f2:2d:de:bc:
         6c:35:c7:65:28:29:b7:84:25:be:af:8a:5c:3e:d6:23:ab:47:
         0a:a3:a0:ae:bd:55:86:65:02:bf:a6:0d:b7:1f:24:bb:ea:e3:
         a7:6f:17:3d:1f:ef:5f:3c:eb:4c:79:18:73:75:3b:5b:cb:6c:
         e1:e4:bb:b2:c5:38:db:ac:6c:ef:2c:84:51:8c:5e:15:c4:60:
         b5:71:b2:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 2 04:02:13 2024 by rpki-client on console-fra.rpki-client.org