Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/isOKZegsllWGUYEzoTpn1cI4J50.roa
File:                     isOKZegsllWGUYEzoTpn1cI4J50.roa (raw, json)
Hash identifier:          m5s1OUP7SZovbjoducF5DuMoR21WMnCsthJeBN0A8OY=
Subject key identifier:   8A:C3:8A:65:E8:2C:96:55:86:51:81:33:A1:3A:67:D5:C2:38:27:9D
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       52
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/isOKZegsllWGUYEzoTpn1cI4J50.roa
Signing time:             Sat 31 Aug 2024 01:31:49 +0000
ROA not before:           Sat 31 Aug 2024 01:31:49 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        183.181.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:49 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=8AC38A65E82C965586518133A13A67D5C238279D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:71:e1:35:4a:e2:c0:aa:5b:b9:d9:ec:96:e8:
                    01:e5:ef:fd:26:a1:a3:d1:39:b2:0d:b4:8c:24:7d:
                    69:d6:c4:7a:9e:ac:78:2c:46:20:83:5f:16:fb:ac:
                    c3:2a:5c:7c:72:cd:b2:72:91:fd:e0:5e:a6:89:04:
                    6e:af:a4:26:f6:c9:1c:dc:71:fc:57:3a:2f:23:e2:
                    f1:03:2e:43:c3:3a:d0:b2:72:bf:ee:59:d0:13:8d:
                    bf:b4:a6:5d:3c:2a:03:34:4d:45:69:ac:75:88:6a:
                    d1:09:ff:c0:2c:08:f3:7b:e2:ec:e9:8a:08:d0:c1:
                    28:4f:2d:69:b7:03:d7:2e:e1:cc:96:8d:5e:7b:a1:
                    40:ca:8d:46:35:e1:3a:88:0c:fe:f1:7f:66:eb:55:
                    15:11:ff:22:f0:23:bb:c6:e0:d8:be:56:3f:42:ab:
                    1b:b4:ed:91:db:9b:c7:44:47:80:ae:13:30:e4:cd:
                    2c:85:8f:c1:46:09:8e:97:64:17:24:3c:96:69:ca:
                    f8:8a:20:21:ec:c9:90:87:b4:7c:54:91:f3:e2:4d:
                    81:55:82:f5:2c:f8:aa:ba:0d:fa:46:97:ad:b4:a7:
                    08:16:28:a3:46:b5:38:16:7c:0c:75:04:01:e7:e5:
                    9e:c4:6c:38:d0:fb:55:04:f1:5e:a9:a9:16:73:11:
                    15:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C3:8A:65:E8:2C:96:55:86:51:81:33:A1:3A:67:D5:C2:38:27:9D
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/isOKZegsllWGUYEzoTpn1cI4J50.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  183.181.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         10:0e:be:6a:12:99:28:d5:0e:1f:2f:9c:a3:0f:7d:fd:fa:97:
         c9:81:cd:b8:92:10:99:8d:68:4a:43:b5:11:e2:d3:c6:a7:f0:
         4d:3a:0d:2e:85:74:8a:ae:86:a3:8e:64:ee:af:62:b0:24:41:
         55:5d:54:37:66:2d:08:e7:9d:c1:cf:f2:60:38:b5:eb:72:4d:
         0c:22:a8:45:80:58:c9:83:97:59:0f:2d:54:dc:49:28:43:d5:
         84:a1:a2:5e:82:64:73:27:e5:30:4b:d4:bf:a7:1b:75:96:f0:
         d8:ff:9a:a3:5c:84:fb:f1:7c:28:ee:93:0a:4f:ee:dd:bc:d8:
         3b:73:5a:7f:17:f2:a0:7c:2b:08:15:c1:84:cf:d8:34:7f:85:
         15:06:83:80:50:48:20:3b:e2:ee:e6:3f:59:4e:fd:4d:d8:42:
         b5:c0:28:cc:d9:98:6b:1d:d4:7c:74:fa:76:ce:e8:5a:59:f1:
         8f:ba:65:ae:f9:46:3b:72:4c:5d:45:b4:1c:f5:fb:f6:4c:41:
         64:e3:ea:88:e0:b9:82:f6:45:10:a1:93:70:e9:68:93:e9:bc:
         4f:e0:54:72:f5:59:ad:99:be:50:c4:86:d8:2e:5c:6f:66:95:
         d4:94:ed:9c:b7:ac:a5:14:0f:e6:94:fb:e4:a7:78:f0:88:48:
         de:c7:72:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org