Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/920/Lo01mWclPOTaTsCXCqDeHTcwSts.roa
File:                     Lo01mWclPOTaTsCXCqDeHTcwSts.roa (raw, json)
Hash identifier:          R0DGq/Xf4LN+8MUJnvz2zAQ8WcIeV6kLkhjtbq8KDfo=
Subject key identifier:   2E:8D:35:99:67:25:3C:E4:DA:4E:C0:97:0A:A0:DE:1D:37:30:4A:DB
Certificate issuer:       /CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
Certificate serial:       07
Authority key identifier: C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/Lo01mWclPOTaTsCXCqDeHTcwSts.roa
Signing time:             Wed 08 May 2024 07:33:35 +0000
ROA not before:           Wed 08 May 2024 07:33:35 +0000
ROA not after:            Thu 08 May 2025 07:05:01 +0000
asID:                     24279
IP address blocks:        133.226.140.0/22 maxlen: 22

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 02 Dec 2024 22:00:34 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C8930155500B58FF73A8A0882185C66AC6A0D3A0
        Validity
            Not Before: May  8 07:33:35 2024 GMT
            Not After : May  8 07:05:01 2025 GMT
        Subject: CN=2E8D359967253CE4DA4EC0970AA0DE1D37304ADB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:ac:5b:d4:8b:4f:0d:d6:38:2d:af:91:95:92:
                    b1:b4:01:c6:cf:78:94:20:10:80:42:21:87:f4:a0:
                    a1:a8:4d:d1:d5:17:05:d1:05:b8:77:fc:88:f7:b3:
                    ae:87:51:86:68:be:43:eb:e4:bb:06:db:9b:a9:fe:
                    39:9b:4a:38:85:0d:24:ff:47:94:4f:ed:0d:42:7f:
                    2a:58:c8:c5:bd:83:0e:04:d4:0c:b4:b0:17:e4:ce:
                    74:37:df:94:8e:46:31:2c:e1:26:9c:de:0e:91:a9:
                    e8:54:76:ac:de:dc:cd:9d:da:1a:8f:66:85:7f:3e:
                    5f:eb:d5:51:7b:a7:5e:f4:c1:05:70:b7:3c:9b:70:
                    f6:0a:02:4a:a1:d6:13:bd:a1:5d:93:9c:20:56:08:
                    11:fd:23:15:80:9e:5a:2e:53:00:07:66:0d:2d:d6:
                    e3:0a:7b:a3:23:d0:4c:1f:02:ab:f8:2f:12:49:b1:
                    ba:a4:90:ab:e3:8b:b7:25:94:32:b3:fb:51:d0:96:
                    1e:47:2f:1b:bf:9c:31:f0:e3:05:1a:ca:75:13:31:
                    c1:c7:5e:b3:42:d6:02:bf:0f:1d:e8:e5:64:3d:4e:
                    65:7f:30:c0:02:38:c6:08:e6:b6:6a:ea:1f:7e:ad:
                    aa:4e:33:07:5f:b5:24:a5:57:73:d6:9d:db:c8:66:
                    d7:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:8D:35:99:67:25:3C:E4:DA:4E:C0:97:0A:A0:DE:1D:37:30:4A:DB
            X509v3 Authority Key Identifier:
                keyid:C8:93:01:55:50:0B:58:FF:73:A8:A0:88:21:85:C6:6A:C6:A0:D3:A0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/yJMBVVALWP9zqKCIIYXGasag06A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/yJMBVVALWP9zqKCIIYXGasag06A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/920/Lo01mWclPOTaTsCXCqDeHTcwSts.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  133.226.140.0/22

    Signature Algorithm: sha256WithRSAEncryption
         22:e2:b9:2c:3c:b8:f3:4e:de:bb:9b:4a:be:8a:a2:f7:c7:f0:
         dc:be:44:2f:c7:f9:3c:21:fb:f3:00:9d:00:9d:68:b4:01:b8:
         ab:6a:11:31:d0:cc:0f:06:81:4e:cc:3b:bb:96:8b:73:79:39:
         45:25:78:76:c2:3f:bc:98:38:9f:8a:9e:08:c9:1c:68:c1:af:
         9a:57:60:9b:23:b0:62:d5:bd:32:f8:2a:79:64:0b:bc:cd:18:
         a8:b4:89:53:fd:1d:25:bd:0e:08:88:6e:78:b1:61:90:5a:20:
         23:81:d7:fa:5d:27:24:40:33:3f:7d:ea:49:12:c3:a1:1f:87:
         75:79:e5:a1:e3:a2:b5:6b:49:a7:ef:3a:1c:d3:30:be:e4:b3:
         ac:3f:f5:e7:1f:c9:41:ec:5f:ec:55:94:ed:7c:b7:e7:04:91:
         06:17:76:18:f5:13:0b:0c:89:8d:fa:6c:5a:fb:3a:53:0c:f2:
         29:59:69:b6:5f:c7:74:aa:7e:f2:3c:32:38:c3:75:84:0c:2a:
         6a:4d:4b:c8:2b:df:61:c4:2a:80:c3:bc:36:0e:8a:b9:7f:48:
         5e:17:ef:ff:bc:8c:67:e3:1f:97:af:3d:47:da:b6:39:6e:49:
         0d:5f:9d:30:80:e5:ea:00:37:71:95:fe:2e:3d:4c:ab:41:e2:
         4a:14:a4:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 23:54:49 2024 by rpki-client on console-ams.rpki-client.org