Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/5263/5FAJDU51BxAdL_IVFmedvqzNAO8.roa
File:                     5FAJDU51BxAdL_IVFmedvqzNAO8.roa (raw, json)
Hash identifier:          cuMt+oio7BXCPQoleEV+577+rqQ7p76XgeTDN2LSOfU=
Subject key identifier:   E4:50:09:0D:4E:75:07:10:1D:2F:F2:15:16:67:9D:BE:AC:CD:00:EF
Certificate issuer:       /CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
Certificate serial:       02
Authority key identifier: 3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/5FAJDU51BxAdL_IVFmedvqzNAO8.roa
Signing time:             Fri 12 Apr 2024 06:59:54 +0000
ROA not before:           Fri 12 Apr 2024 06:59:54 +0000
ROA not after:            Sat 12 Apr 2025 06:51:58 +0000
asID:                     24229
IP address blocks:        218.100.15.0/24 maxlen: 25

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 06 Jun 2024 02:39:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C8E0CC97F583641E6C2EF077EBC1668C4EE6999
        Validity
            Not Before: Apr 12 06:59:54 2024 GMT
            Not After : Apr 12 06:51:58 2025 GMT
        Subject: CN=E450090D4E7507101D2FF21516679DBEACCD00EF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:8a:e8:84:26:2d:5f:30:c3:c2:03:e7:67:f5:
                    9e:a8:25:de:3a:34:40:8a:f8:b7:70:cf:37:17:31:
                    08:cd:c3:d9:65:1b:56:cf:d3:c1:04:81:37:ae:50:
                    5f:71:10:1e:16:83:06:22:46:fa:57:f9:7d:f8:77:
                    bf:0c:81:fc:e7:9d:0c:04:c6:fe:dc:8e:d2:ae:b1:
                    a6:f9:06:7a:d5:ed:da:0e:08:5e:07:3e:5c:b2:f8:
                    db:77:a0:4d:77:cb:16:ca:df:2c:59:57:16:86:0b:
                    79:b1:62:63:45:c9:48:9b:8e:1a:68:3f:85:ee:79:
                    07:24:87:e5:b9:02:80:ae:5d:d5:45:e7:bf:84:95:
                    d6:dd:e8:fa:59:da:ab:6e:28:98:16:bd:66:55:18:
                    15:d1:c4:d0:14:59:6b:2a:8e:6c:7a:df:07:f6:7e:
                    ad:a9:ce:0e:47:9a:e6:fc:ef:5a:25:b3:32:22:b1:
                    77:06:e4:13:12:c6:93:38:68:43:27:3d:70:11:95:
                    18:e3:cf:00:fc:64:a0:43:25:2d:f0:7a:05:99:d3:
                    a0:79:b8:e6:8a:ba:27:d6:5d:2f:8d:a1:cc:1f:25:
                    2f:f4:23:26:40:ed:eb:3e:25:62:f5:fe:83:3a:04:
                    88:99:64:c4:ea:86:cf:6c:f4:d8:4e:e7:e2:92:72:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:50:09:0D:4E:75:07:10:1D:2F:F2:15:16:67:9D:BE:AC:CD:00:EF
            X509v3 Authority Key Identifier:
                keyid:3C:8E:0C:C9:7F:58:36:41:E6:C2:EF:07:7E:BC:16:68:C4:EE:69:99

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/PI4MyX9YNkHmwu8HfrwWaMTuaZk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/PI4MyX9YNkHmwu8HfrwWaMTuaZk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/5263/5FAJDU51BxAdL_IVFmedvqzNAO8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.100.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         14:60:ee:c9:78:c6:d3:e1:79:d0:2a:f0:fd:b0:ad:52:62:27:
         7f:76:f9:95:d5:77:cd:3d:7c:25:c8:21:a9:87:ef:67:5d:76:
         31:51:42:01:bd:5c:49:86:c4:c2:63:f2:a8:95:e3:a0:68:73:
         a9:90:86:de:76:35:06:ad:1e:2b:b1:15:b3:b7:cb:58:21:32:
         98:f6:eb:12:ec:38:46:2d:56:f5:72:98:28:f2:d0:65:a4:f2:
         91:4d:e2:d1:c8:2c:aa:d1:0e:6c:b7:12:6b:07:16:89:c5:fc:
         8b:d4:51:3b:87:3b:cf:5c:f8:72:75:d3:5a:ab:a9:78:39:79:
         75:87:f8:06:d9:bf:75:6b:2a:b3:d7:02:48:ba:57:7f:21:b9:
         3d:4b:04:b6:a7:e6:cb:db:0d:9b:1b:44:5b:00:3f:79:6a:5b:
         12:d6:a1:dc:15:b4:03:40:7b:9e:a9:2f:aa:16:70:76:0c:c8:
         3c:30:6c:2e:ee:7a:ba:34:68:01:f4:af:91:06:d0:b7:a4:d4:
         c6:d7:bc:5c:bb:50:96:0f:af:26:89:e2:08:d7:e9:30:33:b9:
         48:37:27:1b:59:b0:84:27:cd:f7:56:16:b6:53:d3:1e:ee:d4:
         8a:c7:30:55:36:c2:c2:d2:00:12:8e:50:6a:39:f8:bd:25:25:
         d8:ec:94:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 30 03:38:47 2024 by rpki-client on console-ams.rpki-client.org