Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/829Z3OEnmMJmNoC0LViCgXbxrbY.roa
File:                     829Z3OEnmMJmNoC0LViCgXbxrbY.roa (raw, json)
Hash identifier:          kCrtxxmwLkd5obhWY2JxLKmTITql5VUPS+FhOt8wQW8=
Subject key identifier:   F3:6F:59:DC:E1:27:98:C2:66:36:80:B4:2D:58:82:81:76:F1:AD:B6
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       69
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/829Z3OEnmMJmNoC0LViCgXbxrbY.roa
Signing time:             Wed 31 Jul 2024 01:28:07 +0000
ROA not before:           Wed 31 Jul 2024 01:28:07 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     24295
IP address blocks:        203.169.14.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 105 (0x69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: Jul 31 01:28:07 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=F36F59DCE12798C2663680B42D58828176F1ADB6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:8e:c5:d6:b0:a3:14:0b:6e:5a:ab:9d:eb:18:
                    3f:bf:ea:6c:53:b2:0b:76:7a:76:23:b6:fc:b7:b3:
                    db:db:bb:96:dd:a9:5d:c5:7d:44:18:ee:e6:e4:e0:
                    54:8a:53:f6:2b:e5:89:45:85:58:a1:2b:28:7b:69:
                    ad:f0:eb:e8:5b:27:f0:ae:ea:0f:fd:52:44:55:0c:
                    c6:dc:25:c2:97:e6:3b:06:b0:78:ed:19:e4:22:f5:
                    0d:f5:4f:9f:a3:61:8e:71:77:45:a7:74:fd:29:a0:
                    f9:e8:31:af:b7:65:90:62:95:fd:b1:6b:c7:2a:96:
                    ce:c6:7c:3c:9c:40:bf:21:48:9a:e6:ed:38:b1:fe:
                    e1:0e:e7:ec:7e:09:6f:f9:82:a5:a8:07:59:3a:87:
                    e0:4a:0a:80:c9:ec:b1:77:59:31:ae:c3:70:24:6f:
                    76:09:b5:36:f7:e2:30:01:b7:d7:0e:ee:be:46:93:
                    d4:f3:5c:98:1e:f2:3c:ca:10:54:49:01:25:51:62:
                    a5:60:28:a4:e2:53:60:34:33:8a:f2:58:5b:0d:57:
                    ff:3e:09:65:0f:18:0e:2e:f4:94:64:65:ac:5c:1e:
                    0b:20:24:54:4b:9b:c0:e4:77:ef:5c:a6:72:70:2a:
                    3a:5c:dc:f8:6c:52:50:a3:a9:6b:06:8f:af:66:d7:
                    3e:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:6F:59:DC:E1:27:98:C2:66:36:80:B4:2D:58:82:81:76:F1:AD:B6
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/829Z3OEnmMJmNoC0LViCgXbxrbY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.169.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5d:86:c0:1a:7b:91:c6:2b:f4:fa:4b:9a:24:28:5f:6d:2e:39:
         fa:33:4b:9e:92:2a:cb:9d:30:88:61:51:cd:15:4b:81:cc:aa:
         b1:f8:35:85:eb:86:fe:49:45:6a:93:0e:e5:d2:d5:61:38:3c:
         2b:8c:08:b0:2a:c6:b7:fd:77:83:b6:90:0b:32:ed:d9:c9:4a:
         71:93:64:59:10:0a:9e:46:e0:5b:e5:87:d5:74:81:4a:71:23:
         a7:d1:2a:29:ec:1f:91:a5:c9:9d:30:90:4d:78:53:05:4f:30:
         9c:8b:64:2e:b4:1d:7a:3d:de:d0:ad:10:5b:7e:83:1e:ae:c8:
         45:d2:77:33:dd:3e:8e:eb:b9:61:17:97:22:e2:e5:9d:29:ef:
         ff:b1:51:70:0d:34:54:ca:06:9e:b6:24:d0:70:19:6c:3b:df:
         c8:49:99:64:49:44:cd:bc:05:12:88:e6:91:c3:d7:5a:1a:ed:
         50:26:73:e8:8c:a3:8c:fc:0a:20:d2:85:0d:e0:e1:08:ec:ce:
         4c:1d:5a:7c:18:5d:5c:b4:99:03:f9:73:ac:b4:33:8c:97:66:
         83:e3:86:d4:d9:76:21:8e:1a:e6:3e:b6:93:02:ce:0e:90:87:
         3d:30:b4:ff:70:a9:a5:23:92:70:51:5c:3e:4c:58:bb:24:69:
         06:70:3a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org