Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/454/3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa
File:                     3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa (raw, json)
Hash identifier:          OD4NIu2qFuWo5/wAK8bQt6g6neTaeBhVR03Z9TGkDLk=
Subject key identifier:   DE:33:30:0F:58:EA:C9:88:47:2A:D0:05:A6:E0:E4:7C:97:08:45:CE
Certificate issuer:       /CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
Certificate serial:       50
Authority key identifier: AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa
Signing time:             Sat 31 Aug 2024 01:31:34 +0000
ROA not before:           Sat 31 Aug 2024 01:31:34 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10000
IP address blocks:        202.169.64.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD4741F0349FBC15A708E28A2CE307906CAC5DE0
        Validity
            Not Before: Aug 31 01:31:34 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=DE33300F58EAC988472AD005A6E0E47C970845CE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:3a:a5:8b:99:47:0e:d1:38:b4:a6:be:59:b2:
                    83:af:03:70:a9:c5:78:cb:f6:92:f6:b9:31:b8:c0:
                    22:5d:fe:5d:6c:63:b2:5d:bb:c2:ae:ca:99:f2:93:
                    e8:27:b9:b3:10:e3:97:47:57:b2:65:6a:b7:44:8c:
                    13:22:06:fd:27:ab:6a:8e:2d:8f:d1:60:26:40:bb:
                    b7:9e:d8:50:fc:28:48:bb:5d:b3:7f:14:7b:db:81:
                    3d:5c:f3:cb:ba:71:e7:f2:cb:ba:5f:d6:77:5a:4b:
                    14:e0:e7:fe:ac:d0:fb:68:71:a1:46:d3:2d:ad:bf:
                    74:5e:a2:2b:51:11:b2:8f:e6:a1:6f:bd:90:4f:56:
                    7b:d9:ff:4f:7c:9b:98:bb:70:66:2d:c0:f9:69:e4:
                    7a:da:52:34:15:f3:f9:af:5c:9a:7f:74:0e:cd:6f:
                    84:91:8a:71:5f:98:84:6e:a1:ca:0d:21:6b:21:43:
                    c2:94:87:59:51:79:ed:a0:b9:31:3c:15:10:60:66:
                    5f:60:06:39:e5:7f:f4:6d:a6:e4:26:c1:18:d4:67:
                    ea:f1:12:f5:07:f9:a2:f2:2b:af:32:dc:3b:b9:1e:
                    bc:b0:d2:8a:f3:87:d9:5e:f1:2e:7a:b8:ac:bf:9f:
                    71:be:dd:d0:30:69:d9:c3:d0:dc:c0:89:34:b2:30:
                    63:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:33:30:0F:58:EA:C9:88:47:2A:D0:05:A6:E0:E4:7C:97:08:45:CE
            X509v3 Authority Key Identifier:
                keyid:AD:47:41:F0:34:9F:BC:15:A7:08:E2:8A:2C:E3:07:90:6C:AC:5D:E0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/rUdB8DSfvBWnCOKKLOMHkGysXeA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/rUdB8DSfvBWnCOKKLOMHkGysXeA.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/454/3jMwD1jqyYhHKtAFpuDkfJcIRc4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.169.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         60:f7:71:d8:be:bb:b6:c0:d7:7e:44:c7:4e:ad:05:a6:d3:60:
         e6:31:36:ff:61:80:cb:be:ad:35:27:6b:90:62:78:94:69:94:
         28:8a:2a:25:ff:0e:9e:9d:66:2b:75:09:c3:70:31:cf:3e:50:
         2f:d7:55:a1:0d:41:c4:c8:a8:51:c4:04:ca:5e:99:22:b0:08:
         04:09:a7:7d:c1:7c:b3:eb:28:8a:d9:29:b3:4f:48:ca:4c:66:
         6c:7e:e7:5c:98:e2:06:ed:8a:7d:0e:24:81:74:a4:8c:3b:93:
         0a:f8:bf:ad:dd:9b:57:a2:28:4f:e7:40:f6:03:c0:a7:b9:9b:
         c6:e7:7f:7a:da:07:42:d0:a0:d1:76:12:ba:86:56:58:16:7f:
         4d:34:90:09:4b:06:92:e0:bd:b1:7e:f3:3a:19:47:aa:be:25:
         95:0b:1d:42:ec:b5:01:c5:e2:e1:b5:ae:dd:22:38:25:1a:c1:
         a4:56:eb:90:69:82:c4:1e:61:b7:a9:dd:6d:d3:63:8e:76:ad:
         32:8b:aa:1c:81:42:5c:57:bf:f8:cf:17:63:65:f9:3b:0c:63:
         96:d6:9a:7c:2d:91:e3:8a:6b:88:53:e1:21:8f:3f:6e:30:67:
         8b:8c:a8:7d:99:58:09:f1:6a:be:e5:1f:63:2c:e0:4b:48:65:
         86:61:ec:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:14 2024 by rpki-client on console-fra.rpki-client.org