Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/fpd99P_z0QdZxI5BkVXx9FfZY0I.roa
File:                     fpd99P_z0QdZxI5BkVXx9FfZY0I.roa (raw, json)
Hash identifier:          eOx23mmyJn1nYmA3htFXde64GCZvMTBra9MiowbXds8=
Subject key identifier:   7E:97:7D:F4:FF:F3:D1:07:59:C4:8E:41:91:55:F1:F4:57:D9:63:42
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       5E
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/fpd99P_z0QdZxI5BkVXx9FfZY0I.roa
Signing time:             Sat 31 Aug 2024 01:30:32 +0000
ROA not before:           Sat 31 Aug 2024 01:30:32 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18144
IP address blocks:        221.12.192.0/18 maxlen: 18

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 12:58:42 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 94 (0x5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug 31 01:30:32 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7E977DF4FFF3D10759C48E419155F1F457D96342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:6d:43:1f:d8:01:fc:f3:8d:85:2b:a4:d2:6c:
                    f1:f3:96:bb:80:67:59:d2:9e:b2:f4:2e:ec:28:77:
                    ce:35:08:43:48:cb:55:44:a8:6e:2f:b1:93:25:ce:
                    43:0a:02:ef:86:c8:22:52:1a:ed:10:c5:73:e1:19:
                    2a:b2:ae:bb:19:3b:52:04:a4:f0:8a:fa:54:d7:c2:
                    47:4e:05:90:60:b0:fa:a3:f5:f5:ad:1f:b8:4e:fd:
                    6e:22:87:4e:7c:40:da:95:e9:41:b2:38:c3:5e:33:
                    6a:2f:df:59:45:75:48:87:55:1f:cf:8c:8f:85:3b:
                    f1:3b:ea:62:ab:8f:70:6d:d6:2c:ff:7f:f7:ff:f1:
                    a5:3e:ab:7c:54:18:c3:d0:2a:ac:d8:5a:b5:0c:28:
                    f2:52:d8:15:0e:9a:42:f3:9a:d5:a3:e6:1c:2e:28:
                    8c:c1:98:b2:f5:1a:02:a3:02:7d:e2:b3:12:e9:8e:
                    96:50:ae:81:4e:d5:c5:c9:1e:42:c9:f7:fe:c9:c0:
                    30:60:33:84:20:56:15:3b:57:fe:14:f9:ee:3c:84:
                    76:95:dc:32:af:41:2d:ee:e0:b7:ff:ea:99:1c:1d:
                    37:94:ef:5a:e8:cf:e4:b2:28:ee:2c:35:af:85:4a:
                    b2:14:90:d5:45:f1:17:37:10:99:0c:1d:80:c0:fa:
                    fa:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:97:7D:F4:FF:F3:D1:07:59:C4:8E:41:91:55:F1:F4:57:D9:63:42
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/fpd99P_z0QdZxI5BkVXx9FfZY0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  221.12.192.0/18

    Signature Algorithm: sha256WithRSAEncryption
         8c:d2:e2:bb:5c:ea:cd:57:b2:36:28:52:85:d9:bc:27:48:e2:
         fe:77:19:01:00:1d:70:63:87:7b:d9:38:e7:19:a0:33:65:8d:
         4e:6e:e4:cf:db:17:e7:ce:7e:61:37:75:b4:db:67:be:1a:6e:
         3a:8c:8d:2b:ad:1c:11:5b:52:cf:a7:4a:49:5f:20:44:b7:36:
         18:e4:52:71:49:b7:25:a3:a6:c2:02:3e:b8:c6:c2:28:af:14:
         c1:a5:25:57:26:f5:95:9a:7f:78:4d:38:f9:5c:bb:cc:81:ff:
         8b:3c:46:53:04:5a:92:34:eb:91:6b:e8:19:32:95:d9:b8:6c:
         c1:ea:7e:cd:2f:b4:4d:4a:be:60:63:9f:6f:af:94:36:4e:99:
         b2:c6:42:a6:dd:f6:7f:46:99:a3:f2:46:f2:67:4e:82:b8:31:
         8f:db:b0:53:b9:c9:0d:b3:6d:1b:de:a1:f5:0c:c6:14:4d:45:
         70:89:e5:2b:ae:49:15:e8:be:ad:46:00:a9:a6:a6:0e:5d:67:
         d6:02:1f:00:4b:6f:8e:de:1a:2d:c3:fd:a4:a7:69:8f:61:b6:
         bc:06:1c:3f:c6:3c:a1:73:5e:ef:73:4c:5e:44:1e:78:07:86:
         c9:b7:68:6d:7e:f7:f1:1f:8b:9b:c8:bf:87:f3:17:da:82:87:
         03:dd:a7:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 14:21:31 2024 by rpki-client on console-ams.rpki-client.org