Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/b8No-GvfacOaHiygUbFCb1gHSLk.roa
File:                     b8No-GvfacOaHiygUbFCb1gHSLk.roa (raw, json)
Hash identifier:          5wOHVIEZ07YpgOWR6qZg3GDnlsd5tBHPv9VjMcKbbaM=
Subject key identifier:   6F:C3:68:F8:6B:DF:69:C3:9A:1E:2C:A0:51:B1:42:6F:58:07:48:B9
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       DE
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/b8No-GvfacOaHiygUbFCb1gHSLk.roa
Signing time:             Sun 01 Oct 2023 01:28:53 +0000
ROA not before:           Sun 01 Oct 2023 01:28:53 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     10021
IP address blocks:        202.7.105.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 07 Jun 2024 01:09:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 222 (0xde)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Oct  1 01:28:53 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=6FC368F86BDF69C39A1E2CA051B1426F580748B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:20:82:c4:06:a5:7d:46:a1:c1:01:dc:7b:f0:
                    70:c9:05:29:98:52:5e:8c:0b:dd:6d:ef:7e:31:75:
                    a2:16:e0:48:68:fa:16:5c:25:a0:44:3f:e0:6f:20:
                    b8:d6:f9:68:94:52:27:5e:e6:51:eb:f1:6c:86:9c:
                    35:53:94:b6:c4:73:a3:98:c8:c2:b4:82:31:7b:d3:
                    0f:f7:e9:54:1e:97:c9:67:67:77:de:f2:1d:bd:e2:
                    ed:f7:5a:03:1a:1a:d5:31:24:8d:f4:a2:8a:85:32:
                    2e:3a:31:2c:b5:be:51:a8:c0:f4:89:d3:6a:92:ec:
                    de:0f:67:47:a2:55:c0:ef:f7:9a:5b:bc:f7:62:1c:
                    c4:fc:fc:f0:0e:e4:4b:07:5a:24:3f:92:66:cf:6a:
                    1b:e3:8d:7a:51:fc:72:e8:a5:13:40:ec:39:ac:23:
                    18:5f:4a:31:d2:81:30:74:4e:50:b0:bf:22:f2:00:
                    03:f9:d1:1b:55:03:e7:73:0b:62:ae:3b:ca:fd:88:
                    b8:4f:4c:e4:d2:ae:8c:45:22:a7:81:67:8e:5a:0e:
                    ff:e5:30:4e:9f:a8:d7:49:96:53:02:e3:79:e9:4d:
                    30:a6:59:15:c5:63:80:5b:f6:7a:4f:2a:3f:55:f3:
                    21:1e:b8:b1:72:b1:94:1b:83:65:b4:b1:84:10:13:
                    83:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:C3:68:F8:6B:DF:69:C3:9A:1E:2C:A0:51:B1:42:6F:58:07:48:B9
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/b8No-GvfacOaHiygUbFCb1gHSLk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5f:5f:36:f8:23:83:79:ed:03:93:1f:ea:3c:43:97:7d:a4:f0:
         f1:6e:f8:b3:7c:63:96:7d:52:d4:32:07:f8:41:ca:90:45:ec:
         49:a1:12:39:1a:65:e6:b7:e3:2d:65:9f:86:d1:d6:12:24:96:
         40:8d:01:b4:9d:3f:0e:b2:83:66:f8:da:e7:97:fc:4a:c7:cd:
         9a:b8:31:d3:0c:b8:7d:7e:2b:4e:06:d2:01:2b:5c:5d:f2:af:
         13:52:91:42:ca:51:e2:c0:1b:90:4a:e5:ac:13:cc:c7:ab:ed:
         0e:bc:52:6c:b0:36:5c:75:ba:ca:ac:7d:e3:cf:32:12:30:17:
         8e:ba:84:9d:90:ed:ed:06:54:68:98:2a:c8:8c:f7:35:d6:4e:
         c8:3f:2d:e6:77:65:8b:a3:7f:5c:c5:33:ed:cf:ce:ae:16:25:
         2c:db:31:a7:3d:25:cd:9a:c0:24:4f:41:3c:11:39:2d:37:82:
         1c:5e:35:05:76:36:df:b4:4c:27:fe:59:6d:06:93:c2:ff:03:
         e6:0c:d3:6f:cd:32:c4:69:b8:a1:a2:66:ff:f4:f4:ec:12:ef:
         ef:ea:2a:d5:2b:db:14:41:e1:06:27:57:3e:7b:fb:fc:55:69:
         db:a1:be:53:2e:22:ca:3e:d0:0f:73:44:46:86:0c:f4:d2:f7:
         32:eb:cc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri May 31 02:50:30 2024 by rpki-client on console-fra.rpki-client.org