Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/440/CyN83iT6jLfU5n7an9kqqR-j580.roa
File:                     CyN83iT6jLfU5n7an9kqqR-j580.roa (raw, json)
Hash identifier:          ug5dszR70PO9S2QhMkjyz8vPDKOTTenn50AZxbVdwkk=
Subject key identifier:   0B:23:7C:DE:24:FA:8C:B7:D4:E6:7E:DA:9F:D9:2A:A9:1F:A3:E7:CD
Certificate issuer:       /CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
Certificate serial:       4D
Authority key identifier: E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CyN83iT6jLfU5n7an9kqqR-j580.roa
Signing time:             Mon 01 Jan 2024 01:30:55 +0000
ROA not before:           Mon 01 Jan 2024 01:30:55 +0000
ROA not after:            Sat 14 Dec 2024 01:30:03 +0000
asID:                     17676
IP address blocks:        218.45.208.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:46:48 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E62338DE332C6F4B9E2596EE5DC379A25EFE58CF
        Validity
            Not Before: Jan  1 01:30:55 2024 GMT
            Not After : Dec 14 01:30:03 2024 GMT
        Subject: CN=0B237CDE24FA8CB7D4E67EDA9FD92AA91FA3E7CD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2d:9a:1d:78:66:24:eb:7f:19:75:4b:b1:54:
                    f6:24:cc:64:c9:63:a4:57:eb:ab:7f:54:a3:0e:29:
                    c9:d6:43:f9:9d:ba:7d:69:e3:68:7b:38:1e:4c:e2:
                    d0:b7:cf:de:cd:b6:d2:0f:78:76:78:b1:3e:e7:e9:
                    46:a2:6d:38:c5:5f:92:f4:84:e7:df:c1:f1:e1:59:
                    bb:6a:a1:2b:72:2c:ad:18:ee:c1:80:e8:58:71:ea:
                    b8:7c:7e:d2:31:82:5a:56:e6:59:b8:f7:f7:c4:12:
                    c4:b8:27:ff:37:a4:65:bb:04:b1:4c:29:bd:57:02:
                    f2:cb:c4:11:6f:ec:fa:d9:e7:ae:d4:a6:2f:64:0a:
                    c0:d5:4e:be:67:46:87:91:13:d4:12:8e:65:fd:d9:
                    d5:b0:ca:0e:35:e4:07:8b:dd:e4:44:35:ca:a7:b4:
                    8b:d8:73:b8:49:25:77:e6:0a:57:62:b4:89:73:84:
                    f5:43:62:b9:4d:86:1e:46:cb:79:13:a0:38:5e:31:
                    70:e0:8c:97:ed:87:4d:bf:2c:83:3b:63:b0:dc:7b:
                    fd:fd:cd:ef:8c:2b:f2:1e:4c:4c:b2:39:db:05:94:
                    8e:3e:69:e6:72:ab:22:a2:18:f4:9b:c0:25:6c:cd:
                    8b:d1:1f:2f:3e:88:62:d9:26:9d:89:d7:15:66:85:
                    48:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:23:7C:DE:24:FA:8C:B7:D4:E6:7E:DA:9F:D9:2A:A9:1F:A3:E7:CD
            X509v3 Authority Key Identifier:
                keyid:E6:23:38:DE:33:2C:6F:4B:9E:25:96:EE:5D:C3:79:A2:5E:FE:58:CF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/5iM43jMsb0ueJZbuXcN5ol7-WM8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5iM43jMsb0ueJZbuXcN5ol7-WM8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/440/CyN83iT6jLfU5n7an9kqqR-j580.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.45.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         24:80:2d:f8:78:03:83:e1:32:4e:e5:da:98:4b:74:29:8d:79:
         98:97:7e:59:9a:49:42:58:76:1d:70:43:1d:11:ce:c5:46:9a:
         47:0d:c2:51:6b:fc:e2:6b:f7:c6:36:83:33:17:e2:9f:b9:ce:
         c1:71:cd:db:b8:2d:d8:dc:d3:ba:4b:62:0e:eb:d2:bc:8f:75:
         d1:69:5e:81:4a:24:52:e5:91:a3:1b:34:90:d8:ef:e3:c9:15:
         6b:76:95:58:8b:6b:67:09:37:43:11:d4:07:40:ed:f5:79:ad:
         dc:00:f5:4b:7a:fe:5d:10:44:8e:57:8a:9f:9e:6d:f7:1b:1a:
         a3:e7:56:51:24:01:97:35:9e:f7:f5:2a:fb:4e:ba:74:01:34:
         26:c6:37:b2:53:67:14:4c:c6:3c:ae:ea:bd:b4:d3:f2:a7:fe:
         77:92:e0:42:3e:6c:15:44:c3:61:b4:c9:50:79:bd:af:2f:f2:
         37:9c:dc:09:25:a7:1d:6f:8b:bd:29:e8:a4:58:47:18:0b:d4:
         a9:4a:90:78:a4:9b:de:d2:a3:a7:db:f1:ab:45:91:25:11:a6:
         24:ee:19:d6:60:4a:13:5a:7d:83:44:a6:be:36:a4:f8:32:9c:
         2d:81:b3:f0:47:9c:ca:80:a7:2a:01:16:68:b3:35:94:6f:0c:
         5a:76:3f:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 13:33:22 2024 by rpki-client on console-fra.rpki-client.org