Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/YPjAHwWTqdnbxT3rKWQztgjizI4.roa
File:                     YPjAHwWTqdnbxT3rKWQztgjizI4.roa (raw, json)
Hash identifier:          dLelYQ0hVqymWSfyLKQScTpZv68NmiejdsY3arKagzA=
Subject key identifier:   60:F8:C0:1F:05:93:A9:D9:DB:C5:3D:EB:29:64:33:B6:08:E2:CC:8E
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       2C
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/YPjAHwWTqdnbxT3rKWQztgjizI4.roa
Signing time:             Sat 31 Aug 2024 01:31:21 +0000
ROA not before:           Sat 31 Aug 2024 01:31:21 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18274
IP address blocks:        210.236.112.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Aug 31 01:31:21 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=60F8C01F0593A9D9DBC53DEB296433B608E2CC8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:8f:22:be:6d:7f:08:02:10:0e:be:90:36:26:
                    b5:9e:42:aa:20:c4:22:00:85:73:05:93:60:67:0c:
                    84:d3:0b:bd:80:c6:09:3b:36:0f:fb:ee:37:fd:4e:
                    2e:7c:46:e1:09:84:fd:9f:4e:ab:94:75:29:7c:36:
                    41:b1:a3:33:72:15:c1:4b:d2:5d:9a:f5:73:6e:42:
                    35:0e:13:3d:d7:7a:52:ca:06:08:b7:c3:3b:5e:65:
                    bb:22:c7:e4:8a:d2:f0:06:23:1e:80:b9:c9:bc:af:
                    62:53:3a:e3:82:a2:ff:05:55:46:95:92:68:03:d3:
                    0e:1c:57:1a:80:3c:56:76:c0:4c:66:13:73:4a:d1:
                    87:a3:b9:a9:48:0a:3e:07:bd:73:cc:3c:25:62:fb:
                    6b:c3:66:22:2a:c6:ff:43:f5:90:ba:89:ec:1f:af:
                    95:ff:84:7c:13:7c:c0:2e:00:86:5e:ac:2b:fe:0f:
                    71:b2:80:d6:ea:21:cd:90:5f:31:5e:75:6a:ae:77:
                    56:e0:d6:a8:5f:cf:e5:92:c0:e2:c3:ec:7c:7a:69:
                    d4:3e:8a:f1:b5:d8:20:0b:63:d0:dd:13:31:d5:8b:
                    c7:de:73:be:58:76:1d:0a:e4:56:48:99:eb:07:1b:
                    a5:a2:a8:30:6f:63:4e:42:ef:23:07:1d:d3:fb:f5:
                    75:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:F8:C0:1F:05:93:A9:D9:DB:C5:3D:EB:29:64:33:B6:08:E2:CC:8E
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/YPjAHwWTqdnbxT3rKWQztgjizI4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.236.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         a7:98:00:3a:73:7a:21:6b:c1:75:b6:0e:43:de:98:3c:3b:d5:
         5e:68:fc:d2:f1:52:46:14:bb:b6:cc:9b:de:e8:45:e2:d5:03:
         f7:20:cb:3c:10:b2:9e:ca:66:dc:7f:8d:e6:d0:52:73:ca:39:
         ed:55:58:8d:80:32:f4:f7:7f:69:e7:64:e2:0e:68:06:87:a0:
         f8:38:7a:b4:c4:13:4f:2d:59:20:91:be:65:ee:31:ef:19:88:
         7e:8a:8a:7c:54:77:88:a3:e0:4f:55:55:b3:1d:4b:69:1e:94:
         52:4a:3e:4c:a4:c9:93:0a:9b:53:7e:59:bc:da:48:12:c5:69:
         86:10:8c:07:c1:6c:53:7a:e2:fb:48:57:b3:fa:4c:6e:69:88:
         7f:2c:f1:d0:d2:6f:1d:be:3d:c5:13:7b:96:c0:bd:b9:4b:6c:
         7e:a5:44:5c:2a:40:1b:d5:a9:7a:70:d1:f9:1f:1f:1c:ad:2f:
         46:59:60:57:8e:58:72:0b:d6:e0:9f:69:5e:74:8a:22:6c:63:
         4d:9e:1e:fa:19:e9:1d:04:ee:0d:6e:80:2a:b9:bd:34:a2:aa:
         95:e3:5f:49:1c:28:79:55:32:b6:ab:a5:c5:76:90:a7:85:7e:
         d9:6f:e5:64:41:33:90:89:bf:ed:d1:60:20:68:31:f8:8b:df:
         56:7a:41:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org