Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/vM_ycJtgR17jE4jRpCW5_U5R9yY.roa
File:                     vM_ycJtgR17jE4jRpCW5_U5R9yY.roa (raw, json)
Hash identifier:          BzargkW9BtEwAf1ruJIxLndsEvvdDVsKU5YYobKx3d8=
Subject key identifier:   BC:CF:F2:70:9B:60:47:5E:E3:13:88:D1:A4:25:B9:FD:4E:51:F7:26
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0114
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/vM_ycJtgR17jE4jRpCW5_U5R9yY.roa
Signing time:             Sat 31 Aug 2024 01:29:25 +0000
ROA not before:           Sat 31 Aug 2024 01:29:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        202.7.105.0/24 maxlen: 32

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 276 (0x114)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug 31 01:29:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=BCCFF2709B60475EE31388D1A425B9FD4E51F726
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:3f:bd:69:43:68:13:47:30:ac:f5:cd:9a:07:
                    35:be:41:47:8c:0d:15:8d:f8:0e:16:4a:d9:3f:5c:
                    ba:a6:7e:fa:ff:0f:9f:b4:50:4e:86:ba:4b:9c:c0:
                    a5:fd:fa:aa:a2:ea:93:31:d3:ac:e5:88:6d:0a:f3:
                    f7:18:15:ba:5a:c3:99:b2:53:3b:f7:8a:04:55:4d:
                    ba:21:68:a0:e3:e2:e2:57:21:69:bc:d6:e2:54:e0:
                    00:6c:a0:d2:2f:59:8c:43:88:c8:8f:5a:56:cb:c2:
                    7d:37:9a:16:ac:4a:cf:1b:0a:17:a1:b6:49:86:41:
                    e2:ed:03:17:1f:01:26:69:8e:7d:44:1e:93:b3:72:
                    10:3d:3d:a2:eb:23:d1:f5:81:15:d6:ce:26:49:35:
                    e5:cb:92:bf:0b:16:e3:4a:f6:39:a8:c3:47:91:66:
                    b7:61:fe:d1:e0:78:db:19:1e:90:04:76:86:ff:43:
                    e4:3d:1c:b3:88:63:b0:90:ff:37:a9:e4:b2:4e:88:
                    e9:a7:20:77:29:83:9c:9c:8b:e2:d0:35:14:be:af:
                    94:4e:1c:37:ea:6b:f8:67:f2:55:db:84:d1:bc:ab:
                    28:a9:e0:3a:d9:d3:bb:2b:41:a9:b5:99:f1:fd:33:
                    a8:be:ff:cb:0f:65:48:15:4c:3a:26:d5:60:68:db:
                    9f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CF:F2:70:9B:60:47:5E:E3:13:88:D1:A4:25:B9:FD:4E:51:F7:26
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/vM_ycJtgR17jE4jRpCW5_U5R9yY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.7.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         29:a6:2e:03:b9:a7:a1:af:ef:da:20:0e:b2:f9:c8:8a:93:25:
         d7:7c:5a:bd:82:65:bd:ae:79:8e:bd:60:eb:1f:85:b9:40:b0:
         3b:8c:96:4b:35:1f:34:38:bb:ae:a5:3d:b7:aa:28:c4:f2:07:
         ee:e7:bf:6f:54:00:1e:2d:55:df:0e:6d:f8:a7:1c:a9:2e:2c:
         60:be:58:30:60:43:5c:f0:4c:a8:eb:a0:cc:87:2b:2a:86:60:
         e3:31:cc:4e:6c:f2:73:a7:0d:36:20:f3:73:87:4d:38:9b:e2:
         25:ea:21:57:b6:e4:0d:a9:46:82:78:68:6f:2b:4a:84:33:18:
         10:b6:9e:6a:4b:87:9e:ff:09:35:c3:b5:f4:d3:a2:47:54:fb:
         61:ab:2e:e1:6e:cb:a9:ee:44:d3:78:47:4d:57:a8:ba:56:09:
         c9:ab:d4:da:a3:57:99:f3:f4:ae:9b:1a:5e:01:bc:fb:a7:76:
         5e:3a:10:e3:a4:1b:52:fa:39:7e:6e:47:18:eb:48:27:c0:b8:
         3c:60:93:27:dd:40:e7:d0:26:7e:a3:82:d7:aa:2d:38:13:cd:
         3b:4d:68:21:3f:31:f3:33:2f:9e:66:56:ef:11:27:f5:0a:4c:
         a5:cf:3e:9f:4d:4a:df:fd:28:1d:bc:e1:df:2e:e0:2c:ab:42:
         37:2e:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org