Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/zS62bbtX49yZS90X7wkNhDLTMic.roa
File:                     zS62bbtX49yZS90X7wkNhDLTMic.roa (raw, json)
Hash identifier:          VBQpmpZtvvgBKQ76DTlmjZJ0TNvii31N50GbcMvwwDQ=
Subject key identifier:   CD:2E:B6:6D:BB:57:E3:DC:99:4B:DD:17:EF:09:0D:84:32:D3:32:27
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       17
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/zS62bbtX49yZS90X7wkNhDLTMic.roa
Signing time:             Wed 31 Jul 2024 01:32:37 +0000
ROA not before:           Wed 31 Jul 2024 01:32:37 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23791
IP address blocks:        118.102.40.0/21 maxlen: 21

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 23 (0x17)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul 31 01:32:37 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=CD2EB66DBB57E3DC994BDD17EF090D8432D33227
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:d3:e0:55:a0:8c:b8:e0:89:9a:4a:25:b2:fa:
                    a0:f3:fe:42:28:6a:87:06:91:2b:42:b8:8e:94:ed:
                    54:1a:eb:06:57:52:eb:12:3c:1a:2c:0c:c8:d0:b4:
                    f7:96:a9:53:ea:50:69:44:e4:a2:5f:36:36:36:42:
                    0d:2f:25:36:61:59:0b:a9:ab:0f:97:b1:4d:b6:fa:
                    d9:09:e2:32:f7:4e:64:29:89:11:b2:62:bd:67:1c:
                    dd:a8:5c:30:d3:eb:ae:84:85:b9:d4:99:51:f6:57:
                    fd:05:28:f1:ab:48:ce:3e:59:13:69:ed:9c:cf:4e:
                    ea:73:71:f4:72:bc:bb:35:6f:4f:37:f0:f9:a6:73:
                    48:8a:93:29:a0:c2:10:f8:ef:8c:14:68:0a:38:ba:
                    74:b1:f3:bc:b5:53:67:46:5f:4e:e2:1a:00:1d:ed:
                    08:d4:5b:0c:e8:e4:d2:40:8e:c9:48:dd:01:26:9d:
                    cd:be:7f:53:5f:ab:72:2b:1b:54:50:d1:04:76:6f:
                    c7:49:56:1e:de:b6:56:56:26:10:78:8b:b1:cd:7b:
                    3e:2c:37:e8:4c:56:b5:ef:4f:74:37:10:aa:4d:b9:
                    36:9f:8d:8f:7e:8a:28:c5:38:38:fc:bf:fb:b7:82:
                    86:9b:8f:38:78:1b:1e:3d:b3:6f:da:19:d3:f1:1b:
                    64:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:2E:B6:6D:BB:57:E3:DC:99:4B:DD:17:EF:09:0D:84:32:D3:32:27
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/zS62bbtX49yZS90X7wkNhDLTMic.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.102.40.0/21

    Signature Algorithm: sha256WithRSAEncryption
         66:2f:19:2d:c2:60:f8:a9:f0:5b:a6:fa:36:29:d6:1d:41:7e:
         5c:8a:28:95:86:4a:d4:37:44:31:73:ca:96:96:bf:3a:7d:f3:
         3d:ea:89:f6:49:02:89:05:8c:eb:34:0d:12:50:d0:1d:ec:06:
         d7:85:2a:18:b0:17:70:5e:97:98:5a:c8:be:c0:73:de:79:2a:
         ee:d9:57:33:bf:16:b5:6f:79:d3:ad:70:50:db:ee:36:ac:8e:
         5a:a6:b9:fd:7f:7e:6d:92:ab:6e:ac:db:b2:8e:78:bb:ef:4f:
         cf:49:01:69:9d:8b:88:8e:26:df:2d:85:02:e2:9f:ec:1c:cc:
         d3:f5:25:9a:ee:a3:e6:f2:33:9a:cf:3a:5c:36:63:d2:b0:11:
         b4:22:02:ac:a7:bb:db:3a:ea:8b:67:27:f0:86:3b:23:d8:27:
         d8:97:e4:d2:b4:70:2d:4d:24:cc:37:0e:f2:20:73:e4:ea:64:
         e7:c7:f3:12:ca:a8:f2:fd:f0:99:a4:dd:f9:9d:86:08:2f:40:
         be:01:83:5a:2b:18:45:c9:fd:34:24:4e:00:27:56:62:6b:ff:
         4e:44:48:e2:e7:8f:1d:8b:a1:d2:83:b6:b9:9d:d6:ef:c7:92:
         3d:85:66:cd:2d:5e:c6:9a:f6:ff:1d:d8:f6:18:91:54:96:50:
         9a:97:8b:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:48 2024 by rpki-client on console-ams.rpki-client.org