Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/602/PDb-QzLPm4MSGEFuCS2kCfeZ5zo.roa
File:                     PDb-QzLPm4MSGEFuCS2kCfeZ5zo.roa (raw, json)
Hash identifier:          /2QoSp8n3ZzEKhrFcjFwASk81R8j4FWPn6BOL1M6Txc=
Subject key identifier:   3C:36:FE:43:32:CF:9B:83:12:18:41:6E:09:2D:A4:09:F7:99:E7:3A
Certificate issuer:       /CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
Certificate serial:       63
Authority key identifier: 4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/PDb-QzLPm4MSGEFuCS2kCfeZ5zo.roa
Signing time:             Fri 31 May 2024 01:28:13 +0000
ROA not before:           Fri 31 May 2024 01:28:13 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     17675
IP address blocks:        218.40.144.0/20 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 99 (0x63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4EFF1AB6EADA273BA066DB0F77B79D6A0D901542
        Validity
            Not Before: May 31 01:28:13 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=3C36FE4332CF9B831218416E092DA409F799E73A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:09:d7:d9:43:5f:b3:bf:ab:da:3e:5f:06:2a:
                    0a:34:4a:8a:47:f0:0a:12:fb:aa:5d:ba:1b:c2:e7:
                    b5:e3:bf:f3:9b:71:c8:f7:6c:2b:41:6e:0c:53:b4:
                    a2:d1:e3:f2:fc:83:77:cc:07:81:6a:94:c1:71:d5:
                    41:82:13:f9:0b:1b:13:89:0d:1b:60:17:42:55:38:
                    bd:bc:bc:60:fb:c0:55:12:e0:85:f1:a2:d8:76:60:
                    72:5d:f5:3d:e9:8a:81:5e:d0:d0:cc:ad:68:5b:c6:
                    2a:c9:9c:24:47:89:3f:8b:41:61:a1:77:63:d7:e9:
                    07:8b:03:20:b0:2b:6c:4b:41:dc:59:44:92:d7:09:
                    f7:39:c2:71:a0:2c:48:d1:47:f3:bc:ed:fc:96:b9:
                    e8:f1:15:5f:e4:fe:11:7b:a4:3e:60:4f:80:45:41:
                    78:cf:de:fa:67:59:56:b4:b8:e6:a6:f1:c0:eb:2a:
                    ce:02:42:90:47:ae:ce:f5:1e:31:f5:e5:15:db:4f:
                    7b:f3:6f:f8:13:52:b9:5d:4e:9a:f4:db:76:52:56:
                    82:df:17:3c:7a:2c:81:c5:89:ea:bc:67:41:b2:e0:
                    e0:f9:21:12:0c:30:bf:f3:33:55:f5:ce:b1:da:92:
                    48:85:d1:be:21:fe:23:47:9f:c3:1e:84:49:fb:ee:
                    ac:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:36:FE:43:32:CF:9B:83:12:18:41:6E:09:2D:A4:09:F7:99:E7:3A
            X509v3 Authority Key Identifier:
                keyid:4E:FF:1A:B6:EA:DA:27:3B:A0:66:DB:0F:77:B7:9D:6A:0D:90:15:42

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/Tv8aturaJzugZtsPd7edag2QFUI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Tv8aturaJzugZtsPd7edag2QFUI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/602/PDb-QzLPm4MSGEFuCS2kCfeZ5zo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.40.144.0/20

    Signature Algorithm: sha256WithRSAEncryption
         8e:3f:c4:80:1b:26:76:3d:99:df:8f:78:3c:47:5f:fb:4e:53:
         03:59:b4:20:ce:cf:bd:cc:29:d6:73:b2:29:da:e7:a9:e8:60:
         60:c4:a9:81:93:f6:93:21:2e:cc:0a:f7:b0:2a:84:ff:a5:39:
         3b:7e:e7:00:2e:82:0e:5c:41:5d:81:c2:be:e7:84:9a:80:73:
         de:57:98:06:af:93:4d:b9:98:3a:75:0b:6c:53:a2:4d:9c:8c:
         fd:a2:82:db:82:82:8b:64:6d:af:ff:c8:2e:2b:60:9b:11:fc:
         1e:57:09:5a:e6:c5:d8:7a:5b:ea:79:c9:d2:38:62:e1:ae:09:
         bf:9a:f4:12:9d:48:e1:e0:fd:6e:30:bb:44:ad:53:5e:31:61:
         b2:8f:ce:92:36:4c:68:8f:d9:9f:d8:60:6d:0b:69:1d:37:14:
         8c:1a:8b:f6:32:7e:9d:ec:b3:df:e5:e1:8b:ac:3b:fd:e5:47:
         7c:16:de:88:c1:b1:e4:c7:17:c5:6f:50:31:92:57:52:8f:60:
         a5:c9:77:c6:e1:1d:12:9e:6d:00:41:9f:0a:4e:2c:a3:88:2b:
         3b:2d:13:7d:de:5c:a2:ea:c9:03:11:88:e7:8d:f6:d8:22:06:
         3f:cf:cd:f7:a2:99:ba:47:a5:a2:d7:87:ee:1b:85:aa:3c:d2:
         4f:50:52:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org