Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/8c4MaMo_qlPF6Fhm6Wcias1i58k.roa
File:                     8c4MaMo_qlPF6Fhm6Wcias1i58k.roa (raw, json)
Hash identifier:          I2ooGXX4AylXUFARgI73GNQtA5QZ4QpECJpq7FERBJc=
Subject key identifier:   F1:CE:0C:68:CA:3F:AA:53:C5:E8:58:66:E9:67:22:6A:CD:62:E7:C9
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       16
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/8c4MaMo_qlPF6Fhm6Wcias1i58k.roa
Signing time:             Sat 31 Aug 2024 01:32:18 +0000
ROA not before:           Sat 31 Aug 2024 01:32:18 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4695
IP address blocks:        210.141.160.0/20 maxlen: 20

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Aug 31 01:32:18 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=F1CE0C68CA3FAA53C5E85866E967226ACD62E7C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:c7:7a:92:2e:b8:6f:12:15:84:38:ef:f7:55:
                    7f:e4:01:7b:2e:32:58:80:25:39:f9:2e:75:b2:4b:
                    18:6b:d8:51:41:09:53:3a:f3:7e:4f:47:f0:65:86:
                    5f:15:dc:75:3c:9a:cd:99:0e:8e:82:49:fe:2d:44:
                    90:59:bf:f9:d6:9e:c3:9d:49:4a:e1:ed:81:de:c9:
                    c4:89:ae:29:62:07:c7:60:f3:3a:a9:0f:68:3e:35:
                    d5:56:46:63:d6:37:83:3e:73:07:6c:22:b7:39:df:
                    29:84:92:c5:6f:26:09:0d:3b:36:c1:a1:3c:e3:5a:
                    26:32:99:59:92:60:73:84:07:32:99:86:8d:1e:30:
                    d3:4d:98:32:0b:cb:c5:0b:bb:31:fa:4f:98:1a:28:
                    66:2c:76:fc:c1:52:57:bc:9f:9d:02:c3:0a:3f:39:
                    06:38:40:37:9c:4a:c0:63:0e:59:c6:f0:46:5f:2b:
                    37:0c:d6:17:32:a7:9b:ad:49:8d:da:33:63:90:3e:
                    9b:14:94:c4:08:36:a4:62:99:65:92:94:07:86:91:
                    c4:29:d0:39:c1:85:1e:34:04:f4:9c:00:b4:34:6c:
                    d4:51:eb:3a:ec:9c:00:74:9c:c7:bd:d4:fc:03:c8:
                    47:4b:96:32:de:a0:16:02:ae:d3:ac:88:fd:87:1e:
                    81:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:CE:0C:68:CA:3F:AA:53:C5:E8:58:66:E9:67:22:6A:CD:62:E7:C9
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/8c4MaMo_qlPF6Fhm6Wcias1i58k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.160.0/20

    Signature Algorithm: sha256WithRSAEncryption
         61:01:03:13:41:ba:75:99:76:7b:f9:05:42:a9:59:40:81:b6:
         02:56:51:c5:ba:b8:a5:89:3e:c5:3d:43:1f:df:45:44:04:34:
         e6:1d:d2:2c:cd:4a:a7:f8:01:d0:02:e4:be:bb:e7:73:4b:0b:
         38:c3:23:2f:1b:0e:15:10:b3:ab:85:5a:7d:fd:6a:44:93:83:
         58:c4:2a:37:2b:a9:c8:c2:73:1a:fc:50:ed:28:19:80:47:07:
         da:f7:f3:a6:61:6a:9b:41:c7:e8:be:f8:7c:a2:5a:80:a2:35:
         9b:59:5c:4e:54:2e:43:2f:cc:2c:de:76:5b:93:16:2f:06:26:
         b6:8d:00:13:cb:e1:ff:98:68:33:07:b9:b3:91:fe:33:7b:e4:
         81:20:c7:fa:8a:65:31:f0:d0:1c:1a:84:3d:2a:d1:4f:26:ff:
         06:91:1a:33:ca:3a:4c:12:4f:b6:15:0d:a1:df:29:1a:01:eb:
         9d:35:b3:ce:15:e5:e9:30:82:ac:45:ec:fb:17:3d:43:c7:a6:
         77:05:91:b7:a5:ea:96:62:37:fe:dd:06:89:a7:f7:0e:3b:5b:
         9d:1f:81:43:0c:f8:8d:09:cf:9e:47:76:f4:31:55:14:e4:27:
         8c:1d:1e:b0:b9:27:a7:99:56:24:3f:62:16:02:74:a8:41:10:
         d8:6e:cd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:59:15 2024 by rpki-client on console-fra.rpki-client.org