Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/446/4Drirl2rkd48io_dFr7EKc7BRo4.roa
File:                     4Drirl2rkd48io_dFr7EKc7BRo4.roa (raw, json)
Hash identifier:          pikcR5cyLi3AB2M9OOn8/hvI4wqr7DDD+WyRViNfGzI=
Subject key identifier:   E0:3A:E2:AE:5D:AB:91:DE:3C:8A:8F:DD:16:BE:C4:29:CE:C1:46:8E
Certificate issuer:       /CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
Certificate serial:       1E
Authority key identifier: 93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/4Drirl2rkd48io_dFr7EKc7BRo4.roa
Signing time:             Wed 31 Jul 2024 01:32:30 +0000
ROA not before:           Wed 31 Jul 2024 01:32:30 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9997
IP address blocks:        218.226.0.0/16 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93E00C1B18C6955EA04130329544B1F09BFCBFCA
        Validity
            Not Before: Jul 31 01:32:30 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=E03AE2AE5DAB91DE3C8A8FDD16BEC429CEC1468E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:60:ad:80:60:43:77:56:dd:0b:73:f6:b8:0f:
                    be:65:36:03:e6:28:cd:8d:97:e1:9c:0a:f5:41:e9:
                    d0:14:87:00:6b:9e:be:c8:d2:8a:cc:18:dc:d0:12:
                    38:e4:d9:f6:13:7e:30:77:c6:64:a0:0c:2a:ca:ca:
                    b7:44:e2:08:59:26:4b:6f:09:96:19:af:bb:37:ca:
                    f2:f2:fc:28:8d:3a:f8:56:62:e2:8d:87:29:5d:98:
                    68:db:b9:17:73:4b:7b:90:58:b5:8a:48:4e:8e:be:
                    dd:2c:ef:75:4a:23:dd:5d:3f:d2:fc:f2:fb:ee:62:
                    f8:54:b6:77:39:f1:2d:ff:23:c3:6d:2d:49:a8:b0:
                    e0:b6:da:4a:f6:ec:7d:e3:89:b8:88:31:75:e5:4d:
                    55:66:09:c1:6e:16:58:92:ed:dc:28:79:7d:7d:ca:
                    e6:e6:8a:2c:89:c7:c0:41:7f:2f:06:6f:88:10:de:
                    d4:b7:0f:84:f0:52:a0:0e:04:72:17:c7:2e:e6:ff:
                    1c:9d:80:76:c4:2e:a3:b1:8b:46:f6:c3:bc:f0:65:
                    f3:a3:2c:73:c4:f6:9c:7e:8b:69:38:dc:ec:49:7c:
                    5b:69:b1:87:89:40:79:36:cb:7c:3e:3e:da:a7:6f:
                    65:07:21:7e:b1:d4:ac:20:d6:6d:15:2a:03:6c:e3:
                    0d:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:3A:E2:AE:5D:AB:91:DE:3C:8A:8F:DD:16:BE:C4:29:CE:C1:46:8E
            X509v3 Authority Key Identifier:
                keyid:93:E0:0C:1B:18:C6:95:5E:A0:41:30:32:95:44:B1:F0:9B:FC:BF:CA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/k-AMGxjGlV6gQTAylUSx8Jv8v8o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/k-AMGxjGlV6gQTAylUSx8Jv8v8o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/446/4Drirl2rkd48io_dFr7EKc7BRo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.226.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5f:40:4f:36:32:b5:1c:fe:2e:0d:77:d3:5c:97:ff:67:44:61:
         d0:75:0c:a0:b8:f2:a8:43:d4:8c:8b:68:97:fa:50:35:5e:38:
         78:34:be:2e:57:3e:26:20:2c:6d:dd:c1:ec:bd:7c:11:52:70:
         6a:cd:88:66:07:46:7b:b0:11:0b:d2:40:fb:e7:e2:a8:34:cc:
         f4:e1:35:3e:2e:8f:2c:b9:9d:3a:ab:0f:8c:b4:b3:40:6c:06:
         36:6f:fc:87:dd:cb:d0:23:cf:ba:c0:c5:b5:04:1b:42:d9:b9:
         87:f2:4b:5f:11:49:0a:66:7e:0d:34:a3:fb:37:e0:43:2a:37:
         95:de:80:94:86:7b:3c:2b:37:7f:fb:21:d5:c3:a8:41:f1:2f:
         35:be:3b:bb:aa:44:40:3c:49:a2:72:38:b1:04:fc:5b:4c:00:
         ee:bb:d3:20:d6:79:68:58:15:33:6e:f0:cd:1c:3f:b8:c1:e1:
         f7:f3:25:3c:4f:91:1b:3a:a6:9a:a7:26:0d:07:77:19:69:35:
         7f:cb:79:e1:88:05:51:6b:6a:02:09:e9:69:59:68:b2:12:fc:
         54:8a:3c:a7:a9:ec:a5:d9:7f:38:fb:d1:ff:ba:4d:79:f1:e1:
         dd:f1:6d:48:e7:46:4c:23:c6:73:84:de:32:ea:9c:99:1e:19:
         79:e7:73:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org