Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/939/LltGihgUrTlDvsHtcEOmJBq3fZQ.roa
File:                     LltGihgUrTlDvsHtcEOmJBq3fZQ.roa (raw, json)
Hash identifier:          kdS9dwEjP/l6NS84xWsXTODRw+Cjisv+hc2+0NnO70U=
Subject key identifier:   2E:5B:46:8A:18:14:AD:39:43:BE:C1:ED:70:43:A6:24:1A:B7:7D:94
Certificate issuer:       /CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
Certificate serial:       A8
Authority key identifier: 7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/LltGihgUrTlDvsHtcEOmJBq3fZQ.roa
Signing time:             Fri 31 May 2024 01:31:49 +0000
ROA not before:           Fri 31 May 2024 01:31:49 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     2518
IP address blocks:        118.108.0.0/14 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 03 Jul 2024 07:52:12 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 168 (0xa8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7C60295C85FF37E2DCF75AF014D44AD3BF8C33A4
        Validity
            Not Before: May 31 01:31:49 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=2E5B468A1814AD3943BEC1ED7043A6241AB77D94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:cd:72:59:40:28:ca:41:18:e1:86:2c:87:b3:
                    92:50:13:d2:7c:22:5b:48:8b:03:b4:1f:11:d4:28:
                    52:ae:fb:dc:de:0d:7e:10:14:e3:97:38:2b:52:ac:
                    95:12:9c:de:82:78:c7:98:f0:1a:7d:ef:42:37:af:
                    70:90:59:5b:e5:19:fa:40:31:29:fd:4a:a9:54:6c:
                    a2:bc:8b:20:6a:f9:5f:a1:06:a2:91:4d:a9:f5:8c:
                    0d:bb:a2:11:75:39:fe:c4:8a:ad:14:de:4a:f2:b4:
                    86:d0:46:da:fd:4a:97:1d:b8:de:87:65:55:96:62:
                    be:54:c9:fd:1b:e3:05:20:bb:01:c8:6d:1a:04:d8:
                    93:75:4c:a0:38:2f:66:b5:08:1a:2c:7b:b2:14:fb:
                    e6:9d:ae:76:38:3c:a2:72:14:86:a4:b8:3f:8a:ce:
                    b3:b9:44:44:e7:eb:83:67:fd:57:a5:a8:0e:a9:5c:
                    c8:ab:48:54:79:84:0b:6e:ec:e9:6e:7c:a3:66:37:
                    76:97:f5:56:d5:6f:00:43:2d:cf:56:37:0e:29:0d:
                    bb:93:fc:3d:9a:f9:f3:5c:f8:af:0c:4f:f4:b8:a6:
                    cc:48:4a:58:8c:7b:b9:8e:b4:2c:53:af:8f:21:9a:
                    70:90:e3:7c:b3:26:26:44:54:5c:af:e4:16:35:fa:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:5B:46:8A:18:14:AD:39:43:BE:C1:ED:70:43:A6:24:1A:B7:7D:94
            X509v3 Authority Key Identifier:
                keyid:7C:60:29:5C:85:FF:37:E2:DC:F7:5A:F0:14:D4:4A:D3:BF:8C:33:A4

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/fGApXIX_N-Lc91rwFNRK07-MM6Q.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/fGApXIX_N-Lc91rwFNRK07-MM6Q.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/939/LltGihgUrTlDvsHtcEOmJBq3fZQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.108.0.0/14

    Signature Algorithm: sha256WithRSAEncryption
         13:c3:af:84:ab:d5:13:9f:3f:ec:67:ba:85:5b:71:76:42:e6:
         cd:67:eb:eb:34:01:07:3c:46:85:f8:9e:c2:0d:15:e5:8a:30:
         07:77:a3:23:96:bc:b4:d3:9d:cc:dc:72:1d:b8:3d:bb:6e:ae:
         92:14:7e:0e:c0:0d:47:91:80:9d:c5:6f:26:65:5a:05:ec:3a:
         3d:55:77:2e:bc:5f:3d:38:37:76:90:33:d8:10:e8:91:79:99:
         b0:7e:71:b7:9d:14:8d:a1:fd:5b:68:c2:28:45:4e:e4:8b:dc:
         48:00:89:33:de:30:c0:0b:7a:13:37:b2:53:e5:4c:e4:2a:be:
         1e:04:26:5c:e3:a8:03:bc:58:7c:35:bc:5d:00:3a:64:eb:df:
         d0:38:95:8b:20:66:02:c5:28:55:91:67:7f:00:b4:a8:b1:3c:
         9d:2e:6b:3b:d3:dc:bd:48:6f:b1:a3:6c:ef:24:4c:95:27:8f:
         23:71:8c:c9:d5:d8:8e:09:91:13:a6:6c:f3:83:99:68:65:75:
         af:e8:fd:1b:e9:f9:9f:56:08:52:96:52:08:d5:5b:ef:df:fa:
         17:d5:07:de:dc:74:e6:6f:59:aa:90:2a:61:38:c1:e1:b4:b7:
         08:ce:da:53:00:b3:9b:a9:02:26:74:ad:f9:2d:c2:08:22:87:
         e7:36:fc:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 26 09:28:49 2024 by rpki-client on console-fra.rpki-client.org