Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/8Me5y-3mXAuuTRRZnExJXEchP4Q.roa
File:                     8Me5y-3mXAuuTRRZnExJXEchP4Q.roa (raw, json)
Hash identifier:          elk9520QKPH1tIVDnC+njUPirHRK3OyetaOEUIayF7w=
Subject key identifier:   F0:C7:B9:CB:ED:E6:5C:0B:AE:4D:14:59:9C:4C:49:5C:47:21:3F:84
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       16
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/8Me5y-3mXAuuTRRZnExJXEchP4Q.roa
Signing time:             Mon 18 Sep 2023 04:18:08 +0000
ROA not before:           Mon 18 Sep 2023 04:18:08 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18274
IP address blocks:        202.173.96.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Sep 18 04:18:08 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=F0C7B9CBEDE65C0BAE4D14599C4C495C47213F84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:48:a7:1c:92:9d:b3:84:2e:c3:89:3c:e0:a7:
                    3e:b8:b4:34:7c:ea:7c:59:28:bf:3a:39:5b:94:b0:
                    5b:25:78:83:64:18:66:ce:ca:1d:a2:53:cb:36:06:
                    21:55:29:74:27:57:1c:1e:0e:3a:d5:53:f6:79:7d:
                    0c:23:d5:fa:66:2a:24:85:91:60:fb:76:da:a4:3d:
                    d4:c7:79:14:45:17:7a:ce:de:85:b6:bb:d1:a5:a2:
                    2f:f1:c6:71:04:69:cd:c9:5b:1b:19:a1:ef:78:d2:
                    e4:55:a2:fe:cc:c0:37:c0:eb:bf:f7:dd:2c:47:12:
                    38:37:e7:56:5f:64:9c:06:25:e5:14:51:ee:54:43:
                    fb:b7:eb:be:a9:c0:5f:8e:ab:8c:51:93:16:79:fb:
                    07:5b:a0:8f:29:62:dd:b4:e1:cf:d9:da:a5:7a:9a:
                    49:a9:10:b3:9f:23:9b:5c:2a:69:d8:76:01:57:f0:
                    0d:1b:f1:1c:7d:de:d4:80:fa:da:15:ef:d5:47:1f:
                    2b:8c:d0:a6:a6:21:37:2d:c9:ab:79:a5:86:df:b2:
                    39:10:64:dd:b7:b9:7c:2d:a2:17:52:eb:7c:39:73:
                    9d:36:1c:07:2b:b5:ad:a9:58:35:00:f2:78:dc:85:
                    14:de:68:3c:c4:55:91:db:23:33:92:a5:71:3f:27:
                    1c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:C7:B9:CB:ED:E6:5C:0B:AE:4D:14:59:9C:4C:49:5C:47:21:3F:84
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/8Me5y-3mXAuuTRRZnExJXEchP4Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.173.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         17:ef:7a:7f:73:8b:3b:92:73:37:96:92:b9:3a:89:70:34:35:
         3b:71:89:4a:1b:60:18:5a:93:27:15:2a:4d:79:5d:af:56:c8:
         cb:de:38:7e:02:7d:cd:9b:8a:86:4f:e7:af:de:26:ec:f6:91:
         5e:85:15:4b:f8:de:9f:02:2a:39:f4:cb:48:99:60:6a:98:dc:
         c2:d1:e2:13:84:48:dd:0f:64:8e:d5:75:6d:62:63:f1:2f:fd:
         4f:0f:3e:7a:9d:0e:ac:e2:ca:01:55:2f:6b:97:ff:2a:68:4a:
         f2:f5:8b:0d:65:2e:ec:50:53:78:3e:5e:55:34:88:c8:80:07:
         0c:15:f5:d0:f2:a1:e0:a9:95:ab:6e:cb:22:2f:57:b9:80:57:
         a6:fc:ad:a2:98:1b:2f:b9:34:66:97:98:96:92:a2:ce:87:54:
         93:6f:7e:67:1a:66:35:17:af:f4:57:ae:01:26:0e:b3:b8:0c:
         29:49:c1:d8:9a:e8:9f:9d:07:3d:69:5d:50:8d:5a:e5:ef:5c:
         0a:bf:fa:78:9d:3d:97:5b:32:db:af:5b:8e:c4:b0:d8:be:da:
         8d:72:6d:90:a5:c4:9f:bf:67:cc:e0:e1:fa:11:b6:0e:0e:a1:
         4f:56:78:45:78:6b:40:aa:8b:18:7d:9b:03:42:97:ba:05:78:
         39:44:15:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 14:56:24 2024 by rpki-client on console-fra.rpki-client.org