Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/484/4kEs6vWluo2N1wpJ78Lh5mxGjHc.roa
File:                     4kEs6vWluo2N1wpJ78Lh5mxGjHc.roa (raw, json)
Hash identifier:          YCryPSf/HNPIuCsFTtk9tZYe0Uil1GRVQG5Xj1pIm6I=
Subject key identifier:   E2:41:2C:EA:F5:A5:BA:8D:8D:D7:0A:49:EF:C2:E1:E6:6C:46:8C:77
Certificate issuer:       /CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
Certificate serial:       09
Authority key identifier: C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4kEs6vWluo2N1wpJ78Lh5mxGjHc.roa
Signing time:             Mon 21 Oct 2024 02:03:07 +0000
ROA not before:           Mon 21 Oct 2024 02:03:07 +0000
ROA not after:            Tue 21 Oct 2025 01:23:02 +0000
asID:                     9354
IP address blocks:        202.157.224.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 15:22:36 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9 (0x9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0986C0F2DB2D4FE707672C227937BEAA9F5D78A
        Validity
            Not Before: Oct 21 02:03:07 2024 GMT
            Not After : Oct 21 01:23:02 2025 GMT
        Subject: CN=E2412CEAF5A5BA8D8DD70A49EFC2E1E66C468C77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:4a:1d:36:af:77:86:09:8b:fd:4b:4f:5f:7c:
                    ac:31:4b:b9:68:34:7a:d2:94:e2:bb:09:1e:68:39:
                    b9:71:c4:67:5a:5e:2d:33:55:3d:d8:1a:84:a6:50:
                    c7:e6:ff:c3:7d:09:59:3b:e4:21:30:15:16:03:b6:
                    fe:55:45:06:9d:b2:21:06:27:5a:c6:b1:a9:67:4a:
                    ef:9f:59:ec:17:53:9f:20:eb:1b:b2:3c:10:e6:b5:
                    c3:47:9f:dd:94:c9:e6:5c:31:3c:a6:82:96:cf:73:
                    a9:d5:57:92:80:e1:63:e4:66:1e:0a:32:77:e9:4a:
                    41:0e:09:10:92:27:3b:48:c4:88:f4:49:89:7c:27:
                    f5:51:4c:c2:74:0a:82:86:f4:7b:60:8a:60:e0:2b:
                    d2:b8:99:5a:f3:1a:e6:98:53:f2:38:47:4b:95:1b:
                    6a:f8:f3:8a:32:6f:56:78:2a:2c:95:2b:df:15:89:
                    77:6b:76:d1:fe:d7:08:2d:df:a9:34:fb:48:8d:93:
                    d8:1b:ab:e2:94:03:12:d5:73:7d:25:a8:e5:a3:0e:
                    0d:ca:91:62:39:f3:56:19:e4:0d:9f:87:65:60:07:
                    26:6f:e8:97:41:57:0a:39:12:63:ac:27:d1:a2:26:
                    bb:de:b6:bf:d1:6c:e3:e2:2b:6a:2b:ae:4f:82:01:
                    8a:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:41:2C:EA:F5:A5:BA:8D:8D:D7:0A:49:EF:C2:E1:E6:6C:46:8C:77
            X509v3 Authority Key Identifier:
                keyid:C0:98:6C:0F:2D:B2:D4:FE:70:76:72:C2:27:93:7B:EA:A9:F5:D7:8A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/wJhsDy2y1P5wdnLCJ5N76qn114o.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/wJhsDy2y1P5wdnLCJ5N76qn114o.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/484/4kEs6vWluo2N1wpJ78Lh5mxGjHc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.157.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         3b:65:9e:77:1c:21:47:7c:3b:94:68:8c:eb:d3:ba:8e:f7:32:
         1c:fd:8d:b0:da:ae:5b:a6:df:09:84:56:9b:ff:3b:e0:e1:44:
         2b:3f:a5:4a:13:33:78:7d:5a:db:94:f3:e3:e4:8a:27:14:76:
         56:eb:06:c9:f3:84:94:2d:d5:4f:97:19:1a:92:56:63:e3:0d:
         0c:e7:df:d3:83:f7:4a:4f:27:df:e5:1c:76:5d:8b:30:5f:8b:
         56:09:76:25:fa:8a:ad:9d:8b:ba:98:72:60:da:82:84:64:82:
         04:b9:08:05:e2:25:83:a1:0d:6d:49:39:f6:84:03:41:d9:78:
         3b:9c:4d:d9:6f:86:2d:d0:18:48:70:94:80:df:9b:0c:df:16:
         34:c2:45:c2:ea:06:72:48:5a:17:cf:83:57:42:ac:1c:1e:c5:
         37:0d:da:3f:72:67:fa:d8:60:08:a5:80:45:01:e8:72:09:c5:
         c8:65:2f:cc:7c:d7:a4:2b:ef:76:24:49:ae:a9:fb:87:a3:3d:
         c6:c1:74:22:26:68:88:06:5d:4c:4d:9e:42:44:44:9c:c4:2c:
         e5:1f:a0:6e:f7:8a:66:05:20:cb:f7:bb:28:f4:60:c6:8b:14:
         f5:5f:f0:39:c8:fa:7e:ec:9b:f6:da:f2:43:93:d5:b8:81:be:
         eb:87:c4:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 16:45:45 2024 by rpki-client on console-ams.rpki-client.org