Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/597/k5zHYgMDqEcf-dHznxPWEiIpSOM.roa
File:                     k5zHYgMDqEcf-dHznxPWEiIpSOM.roa (raw, json)
Hash identifier:          P3vmRIvK4sylOwqkqwcSqwQvGciIqmH5e7k1Aqc2JhE=
Subject key identifier:   93:9C:C7:62:03:03:A8:47:1F:F9:D1:F3:9F:13:D6:12:22:29:48:E3
Certificate issuer:       /CN=71F76FA07735F685991FC882C885E21EFBB161BC
Certificate serial:       49
Authority key identifier: 71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/k5zHYgMDqEcf-dHznxPWEiIpSOM.roa
Signing time:             Wed 21 Aug 2024 06:02:45 +0000
ROA not before:           Wed 21 Aug 2024 06:02:45 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     20940
IP address blocks:        218.231.251.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 28 Nov 2024 20:13:06 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71F76FA07735F685991FC882C885E21EFBB161BC
        Validity
            Not Before: Aug 21 06:02:45 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=939CC7620303A8471FF9D1F39F13D612222948E3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:21:f5:43:e7:4c:84:ff:ec:e1:6f:ef:46:a3:
                    7c:29:57:87:02:aa:a2:da:b6:46:b7:f6:d9:f0:62:
                    20:3a:e2:c9:8f:34:56:4a:48:7d:60:18:69:c3:e9:
                    0b:1f:c8:45:4b:92:96:89:4f:94:80:61:92:a3:59:
                    d9:a5:e7:72:8c:db:4e:34:32:35:85:73:ef:3a:c5:
                    51:44:95:09:ec:4d:23:82:b8:48:74:22:5d:b4:25:
                    28:2c:02:18:f1:36:11:86:2c:62:19:05:cf:25:75:
                    d9:00:82:98:9e:b1:39:0b:ab:f7:b9:54:46:ba:d0:
                    7d:19:a1:2e:73:fd:0d:1c:a6:21:a4:15:4c:da:2a:
                    a6:be:37:07:71:b5:48:50:8d:66:d4:5c:83:87:45:
                    7e:38:3a:b4:b7:c7:a4:ea:dc:a7:c0:b9:7d:ae:23:
                    c4:a8:09:02:32:c0:67:0a:29:04:f0:bb:a8:87:9e:
                    c8:49:fe:ab:e2:79:7b:af:fe:8d:e1:9a:1c:86:40:
                    05:8f:eb:5b:f7:32:3a:98:c0:5b:5f:51:d9:30:1b:
                    34:79:da:57:5f:4e:3d:a5:b5:92:fa:25:4f:83:c9:
                    a0:b5:33:30:be:30:83:b3:c7:cd:b3:12:81:ce:b5:
                    bf:a1:6f:52:9d:a5:94:06:08:05:86:1f:e5:09:e6:
                    25:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:9C:C7:62:03:03:A8:47:1F:F9:D1:F3:9F:13:D6:12:22:29:48:E3
            X509v3 Authority Key Identifier:
                keyid:71:F7:6F:A0:77:35:F6:85:99:1F:C8:82:C8:85:E2:1E:FB:B1:61:BC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/cfdvoHc19oWZH8iCyIXiHvuxYbw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cfdvoHc19oWZH8iCyIXiHvuxYbw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/597/k5zHYgMDqEcf-dHznxPWEiIpSOM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.231.251.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0f:e9:4e:6d:59:28:86:48:3c:0e:76:9c:2e:66:a9:35:5b:4f:
         55:f1:09:a6:46:50:6d:b7:8b:24:73:f4:c6:e4:dd:5b:59:2d:
         99:89:89:43:b7:74:d9:08:75:3d:bc:f9:fa:8d:56:0a:cb:78:
         88:fd:60:b9:74:6f:8a:53:9d:2b:88:41:d6:66:0f:98:0c:c6:
         bf:fc:3c:15:06:75:2f:6c:3f:50:1a:ac:fa:d9:9d:a3:9f:a2:
         10:ea:b4:d5:06:18:7f:37:94:2b:8a:25:e6:a8:67:5b:48:f7:
         25:9d:67:44:69:ec:68:66:4b:5c:22:19:ca:ca:af:4d:c0:2b:
         5c:fe:a1:de:11:be:d3:1f:ed:83:61:74:7a:e6:f2:0e:fe:b3:
         97:75:1e:01:5e:f7:99:5d:9f:60:6f:8c:12:79:d4:1f:56:8d:
         31:76:ef:3b:8a:ba:02:95:92:89:ce:00:9d:43:3e:c5:87:57:
         b9:f4:b9:9e:10:9d:0d:25:ca:c5:02:1c:69:f1:c2:6d:70:de:
         cc:33:b3:87:6b:f4:6a:be:14:a7:50:51:46:c0:70:a3:d7:6d:
         1b:a6:31:65:d9:e7:f1:16:4b:b2:95:ce:e5:63:4c:f8:a0:8d:
         33:ff:2f:43:5f:86:dd:ec:bf:c8:ac:55:94:c8:f3:38:8c:9e:
         c3:f2:9a:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 01:33:32 2024 by rpki-client on console-ams.rpki-client.org