Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/YOgtIyWbM6_dcJVN_xTy1vU9CI8.roa
File:                     YOgtIyWbM6_dcJVN_xTy1vU9CI8.roa (raw, json)
Hash identifier:          5bOkHzg8iE5i64w4dBmgYuGqwALPnaveT3MVEO8+Ac8=
Subject key identifier:   60:E8:2D:23:25:9B:33:AF:DD:70:95:4D:FF:14:F2:D6:F5:3D:08:8F
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       15
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/YOgtIyWbM6_dcJVN_xTy1vU9CI8.roa
Signing time:             Mon 18 Sep 2023 04:18:07 +0000
ROA not before:           Mon 18 Sep 2023 04:18:07 +0000
ROA not after:            Sat 14 Sep 2024 01:30:03 +0000
asID:                     18274
IP address blocks:        116.118.208.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 13 Jun 2024 14:03:45 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 21 (0x15)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Sep 18 04:18:07 2023 GMT
            Not After : Sep 14 01:30:03 2024 GMT
        Subject: CN=60E82D23259B33AFDD70954DFF14F2D6F53D088F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:68:ac:63:20:32:81:4b:9b:56:cc:55:fb:db:
                    51:6e:ca:01:e7:ec:4f:81:9f:3d:29:f8:29:5b:b9:
                    02:c3:27:10:7c:54:98:46:3a:40:52:4c:2c:31:14:
                    64:62:fc:18:4c:8b:03:d2:40:ab:af:01:ff:5d:6c:
                    8a:44:58:02:ba:ba:2d:18:12:e3:a8:58:0c:36:04:
                    1e:4a:34:f9:06:47:3d:04:d3:a7:3e:e5:b5:29:2b:
                    3f:b0:60:32:16:a2:ac:e4:39:16:bf:c7:22:ad:88:
                    f5:6e:e0:41:e2:18:f9:41:08:f1:2a:bb:8c:50:2a:
                    8c:8d:77:d0:9c:17:95:fc:b0:47:8b:12:c7:74:40:
                    59:d4:b9:a6:5c:cd:5a:54:23:3e:41:91:3d:9e:e6:
                    4e:52:28:ba:0f:2d:33:1a:33:47:db:1c:6a:be:a2:
                    28:8d:69:96:af:03:80:b3:2e:61:00:ac:69:51:c5:
                    e9:9f:ec:20:71:57:11:4b:1e:68:66:d4:d5:4b:e7:
                    14:c0:88:c7:2d:ff:90:f4:0f:89:70:46:d2:28:72:
                    ab:9e:e5:df:56:55:d6:80:a2:79:3d:9b:42:b7:db:
                    26:90:c1:ce:cf:72:06:25:8e:88:32:10:58:57:7a:
                    77:d8:35:60:22:e3:88:27:bd:43:25:68:c3:f1:d2:
                    4c:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:E8:2D:23:25:9B:33:AF:DD:70:95:4D:FF:14:F2:D6:F5:3D:08:8F
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/YOgtIyWbM6_dcJVN_xTy1vU9CI8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  116.118.208.0/20

    Signature Algorithm: sha256WithRSAEncryption
         13:d8:f9:e1:be:d5:4b:34:32:03:f4:4f:56:77:24:f2:cb:f2:
         6e:1b:40:a6:1b:a1:87:b1:0f:ec:84:05:40:bc:63:f7:e3:f6:
         e9:2d:56:41:92:5d:c8:70:55:2a:dd:22:34:1a:69:41:5b:8f:
         7b:af:46:df:9c:9f:50:ec:7c:d2:d1:a2:46:29:73:09:d0:84:
         6b:56:e4:8a:d9:ba:03:0c:69:81:33:0a:1c:3e:e2:e1:3d:c7:
         64:d6:64:bd:0e:86:ae:2d:7e:da:49:ce:19:44:d7:96:f2:bb:
         3a:f5:32:e1:33:40:e4:4b:45:cb:de:07:be:5e:50:1f:b0:d9:
         37:88:a0:4f:38:c1:f9:ec:fd:7e:72:ce:81:37:13:b3:a5:aa:
         4e:e9:f6:c0:f4:7e:22:1a:ab:7a:38:7e:c6:77:aa:c8:90:33:
         ce:e9:8c:b3:2c:ed:79:ee:74:af:79:67:b0:d0:54:e9:e2:6c:
         44:76:a7:f8:26:ff:12:c6:57:54:05:c1:cc:92:ba:eb:5f:88:
         6a:9a:54:fe:6d:4e:eb:2c:a6:31:a3:c3:40:e7:81:22:f2:f1:
         74:fa:e1:d8:01:7c:9a:8a:5c:c4:fd:85:e6:0d:74:9d:13:c5:
         86:07:ae:ca:4d:9a:e3:cd:59:96:2f:ca:03:b3:dc:65:ca:ec:
         d7:49:2f:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 15:06:49 2024 by rpki-client on console-ams.rpki-client.org