Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/793/ffzIXj1b9qgueNk1gQzrRwz2bQ4.roa
File:                     ffzIXj1b9qgueNk1gQzrRwz2bQ4.roa (raw, json)
Hash identifier:          r8YxgDl2v47fkiWoRd+nTPBS66NS79MZ0RrMiLTBndo=
Subject key identifier:   7D:FC:C8:5E:3D:5B:F6:A8:2E:78:D9:35:81:0C:EB:47:0C:F6:6D:0E
Certificate issuer:       /CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
Certificate serial:       2F
Authority key identifier: 8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/ffzIXj1b9qgueNk1gQzrRwz2bQ4.roa
Signing time:             Sat 31 Aug 2024 01:31:22 +0000
ROA not before:           Sat 31 Aug 2024 01:31:22 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     18274
IP address blocks:        202.208.64.0/20 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 29 Nov 2024 14:41:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 47 (0x2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D8D2658815CA3C4EE5A53F91BA61268E3F4C0E1
        Validity
            Not Before: Aug 31 01:31:22 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=7DFCC85E3D5BF6A82E78D935810CEB470CF66D0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:32:dd:46:58:c5:86:18:62:1e:76:b0:97:61:
                    61:75:71:8d:19:4f:00:3b:e6:7b:ce:40:e1:e4:87:
                    85:c0:71:52:8c:f2:76:09:3f:c1:75:b8:ff:0f:5b:
                    b1:36:89:43:5e:26:3e:e9:fc:41:01:95:b5:c5:a1:
                    2b:42:10:53:ee:16:6b:1a:53:f0:54:68:62:a6:55:
                    48:4a:f7:30:e0:fb:e1:f5:bc:4d:03:2f:49:79:b8:
                    20:6b:de:5c:97:8e:c1:2b:e6:d2:df:73:d4:bc:6f:
                    0e:8c:32:d1:70:c4:dd:65:00:77:ff:c2:d8:c1:86:
                    d3:ad:a1:43:61:2a:9c:21:fd:a6:31:88:4c:f8:20:
                    43:6d:fd:78:6c:ac:0b:a7:60:79:9e:3f:78:ca:19:
                    ab:51:af:a4:37:fe:43:87:ce:1a:47:5f:b8:27:be:
                    04:e9:fa:5c:9b:46:ef:9e:5c:c3:db:f8:97:5a:70:
                    98:2d:60:f8:50:db:a8:9b:3c:02:9e:bf:de:68:ea:
                    61:48:33:20:43:91:12:c9:43:44:fe:28:6e:ed:68:
                    76:c8:9d:cc:71:c8:fc:99:4f:92:ff:57:de:f2:79:
                    2b:a7:9f:cb:62:11:18:d9:99:f0:86:7d:90:ea:47:
                    8e:cc:60:b9:37:61:91:c2:25:a7:90:eb:36:86:9d:
                    2f:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:FC:C8:5E:3D:5B:F6:A8:2E:78:D9:35:81:0C:EB:47:0C:F6:6D:0E
            X509v3 Authority Key Identifier:
                keyid:8D:8D:26:58:81:5C:A3:C4:EE:5A:53:F9:1B:A6:12:68:E3:F4:C0:E1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/jY0mWIFco8TuWlP5G6YSaOP0wOE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jY0mWIFco8TuWlP5G6YSaOP0wOE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/793/ffzIXj1b9qgueNk1gQzrRwz2bQ4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.208.64.0/20

    Signature Algorithm: sha256WithRSAEncryption
         64:03:31:68:c2:71:bc:c9:21:35:8a:70:cb:76:e6:44:63:2f:
         55:a9:42:44:85:3c:b0:aa:cb:0e:47:d8:54:2d:a7:ca:4b:cb:
         36:ce:d2:e3:10:c1:8f:5c:8d:7b:10:ad:4f:e8:3f:cc:4c:b9:
         70:58:4e:37:f9:63:2e:9a:9e:98:0b:91:95:38:c5:48:cf:6e:
         2c:2e:0a:13:bf:e7:09:05:93:99:d9:76:a9:7e:4e:25:c4:25:
         1a:40:2b:cd:38:31:e4:05:8e:c8:ee:bb:03:6e:0d:1e:f1:83:
         b9:51:df:0b:7f:0a:ca:5c:cf:2f:4e:e1:39:ea:f1:02:1d:3e:
         5a:11:82:1e:77:e4:77:7b:3f:06:a7:32:44:52:82:79:b7:8b:
         d4:cc:1a:a7:9a:5e:52:df:38:b3:de:59:3c:9a:04:95:90:3c:
         8c:63:91:86:fb:bb:0c:ab:74:26:ca:8b:19:28:37:bc:aa:92:
         33:ab:fb:d0:88:f0:4a:c3:86:92:fb:88:75:47:84:48:02:14:
         63:8b:bd:5c:10:e8:ce:25:c2:fb:ee:49:20:b4:3b:6b:c7:5e:
         24:91:cb:30:a2:a4:97:8d:86:f4:5d:3a:71:20:ac:77:7a:0d:
         66:76:be:e3:70:a8:90:84:1c:d0:9f:48:29:38:89:d0:11:34:
         0a:2e:45:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Nov 22 15:24:06 2024 by rpki-client on console-fra.rpki-client.org