Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/783/owduPRBzgVQI1X8A7ALdVovhGco.roa
File:                     owduPRBzgVQI1X8A7ALdVovhGco.roa (raw, json)
Hash identifier:          yf69BTO2cEdWA57CcUtRUy3aYxuFOCLSjIIkDQKR/D0=
Subject key identifier:   A3:07:6E:3D:10:73:81:54:08:D5:7F:00:EC:02:DD:56:8B:E1:19:CA
Certificate issuer:       /CN=CB8300B20659BB951060F60B1F4BC6091AF27639
Certificate serial:       4C
Authority key identifier: CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/owduPRBzgVQI1X8A7ALdVovhGco.roa
Signing time:             Sat 31 Aug 2024 01:30:25 +0000
ROA not before:           Sat 31 Aug 2024 01:30:25 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18144
IP address blocks:        36.52.136.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 76 (0x4c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB8300B20659BB951060F60B1F4BC6091AF27639
        Validity
            Not Before: Aug 31 01:30:25 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=A3076E3D1073815408D57F00EC02DD568BE119CA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:1c:f8:10:cf:f1:42:29:1c:4b:da:d2:da:
                    49:a9:a5:2d:28:83:b6:95:58:0a:8f:7c:72:90:15:
                    de:80:5b:00:d3:b1:a6:10:f7:cc:98:51:4b:55:35:
                    ca:4b:18:65:52:ed:20:90:1c:7e:e8:86:a2:c4:3a:
                    4d:3e:ad:eb:16:fd:10:41:d3:7c:8e:2c:f0:18:9c:
                    b9:04:2b:4d:08:52:51:4a:11:a3:bc:f6:aa:bb:03:
                    bb:c0:90:b7:65:5a:31:35:02:b5:a7:f0:1d:71:72:
                    4c:d9:7b:63:ba:05:c9:26:b2:18:74:86:5b:7d:0b:
                    a8:0c:d9:e0:37:97:49:e4:92:5b:4f:98:8c:9b:28:
                    22:4c:05:0e:79:7a:14:77:87:8e:84:6d:51:cd:f5:
                    2f:6b:e3:97:44:fb:4d:01:2c:fe:57:77:80:9a:30:
                    be:d9:34:56:bd:7c:d7:7e:cb:26:4f:77:f3:76:29:
                    a6:26:87:0e:98:88:5b:94:bc:b2:86:2d:3c:ef:96:
                    12:99:40:c3:26:81:27:f2:f5:91:14:7e:35:06:ad:
                    46:ee:39:63:bc:c8:b0:19:94:24:b4:e4:d4:de:19:
                    ee:07:07:5c:89:f2:42:86:59:0e:9c:94:e3:67:7d:
                    7a:b0:65:f0:db:59:96:21:8c:54:e6:a0:b4:3f:08:
                    91:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:07:6E:3D:10:73:81:54:08:D5:7F:00:EC:02:DD:56:8B:E1:19:CA
            X509v3 Authority Key Identifier:
                keyid:CB:83:00:B2:06:59:BB:95:10:60:F6:0B:1F:4B:C6:09:1A:F2:76:39

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/y4MAsgZZu5UQYPYLH0vGCRrydjk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/y4MAsgZZu5UQYPYLH0vGCRrydjk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/783/owduPRBzgVQI1X8A7ALdVovhGco.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.52.136.0/21

    Signature Algorithm: sha256WithRSAEncryption
         57:65:78:fe:a2:7a:88:4a:9d:16:13:95:ea:35:b4:34:ce:f1:
         ee:a0:c0:9d:9b:a3:9d:82:96:74:67:0b:10:98:a8:a8:aa:d7:
         02:34:f3:67:fe:8b:8b:ee:f1:36:1a:6d:d0:e1:fa:f2:01:c0:
         4d:dc:18:e7:d3:2e:e5:91:bf:af:e0:99:24:2f:29:89:a9:1f:
         ad:17:ba:70:bc:d3:2c:ff:0b:a2:54:bf:71:07:e4:58:8d:67:
         83:fc:d6:dc:2f:4e:d7:e4:a9:00:45:49:17:e9:95:35:75:1c:
         77:91:40:fd:1d:3b:8f:7b:cc:fd:1e:59:fa:bb:0a:46:ff:29:
         eb:be:ff:f3:7b:d3:97:bc:f0:2c:6c:8d:37:8d:10:d9:d1:68:
         a3:dd:2f:5a:87:18:66:50:15:05:ac:18:cb:39:2d:fb:ec:13:
         83:0d:be:c8:35:f9:b5:cf:9b:84:09:3e:66:63:ef:ce:f8:35:
         a7:85:d1:c7:ca:a0:17:a8:f0:84:8a:d5:4e:6d:c5:48:a6:5b:
         5b:d2:9c:9c:63:18:6f:09:f8:07:02:fc:43:8e:ea:42:c2:7b:
         82:c9:6d:eb:1e:9e:1d:48:4a:53:b3:e9:b0:0f:6f:ff:a1:b7:
         a9:01:a9:a6:ab:62:06:e5:04:9a:2c:ae:77:7e:17:fc:9f:c0:
         ab:30:60:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org