Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/990/mu30qF4H7DocyqsmpGKtY356sew.roa
File:                     mu30qF4H7DocyqsmpGKtY356sew.roa (raw, json)
Hash identifier:          Wy+lC/fTafIWrVxtibUbGNQJiIIxyjbgw2WKkq3Y//o=
Subject key identifier:   9A:ED:F4:A8:5E:07:EC:3A:1C:CA:AB:26:A4:62:AD:63:7E:7A:B1:EC
Certificate issuer:       /CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
Certificate serial:       2D
Authority key identifier: 42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/mu30qF4H7DocyqsmpGKtY356sew.roa
Signing time:             Sat 01 Jun 2024 06:45:17 +0000
ROA not before:           Sat 01 Jun 2024 06:45:17 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     131965
IP address blocks:        202.210.8.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sun 23 Jun 2024 14:09:23 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 45 (0x2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42E32457C16BA874216A8F5DBB0D335BD148CB31
        Validity
            Not Before: Jun  1 06:45:17 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=9AEDF4A85E07EC3A1CCAAB26A462AD637E7AB1EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:78:a3:b2:03:e2:77:c5:63:c8:9d:f6:ed:9b:
                    8d:8a:a8:8a:07:c6:a6:46:8b:81:49:9d:bb:bb:65:
                    b3:3d:f0:79:2a:1b:be:e4:49:44:1b:da:77:53:e0:
                    e0:52:76:b4:d6:ca:1a:ba:3c:03:f5:3b:df:68:c8:
                    63:96:22:4f:8b:04:fb:83:66:8c:36:df:b5:49:a1:
                    70:8d:54:6d:10:64:ea:eb:34:eb:42:41:29:2f:ec:
                    77:8f:8a:48:05:13:7e:83:94:77:73:5e:f4:1f:89:
                    e2:a7:68:19:b2:e5:25:96:f0:f0:68:03:10:fe:0e:
                    73:50:ef:77:92:4c:9e:c4:9e:7a:07:20:30:b3:45:
                    95:49:13:ea:4c:55:d8:15:24:3a:65:0d:86:6e:94:
                    50:b7:6e:7b:a0:a8:dc:16:76:ac:01:0a:c8:1f:71:
                    33:73:75:47:9a:df:6e:2a:2d:16:94:c3:05:0b:1e:
                    e3:76:20:8f:fd:71:3a:2c:96:97:fc:07:87:43:a0:
                    28:18:0e:d8:f4:96:cb:a7:50:17:ee:d2:b9:52:aa:
                    2c:0f:9c:43:b7:c0:02:93:12:5c:24:29:e4:35:46:
                    9d:46:4c:5b:1f:94:d8:e8:7a:a4:b9:26:a7:26:75:
                    bf:e2:d5:e9:09:9c:9c:27:bf:9e:73:58:ba:ca:00:
                    31:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:ED:F4:A8:5E:07:EC:3A:1C:CA:AB:26:A4:62:AD:63:7E:7A:B1:EC
            X509v3 Authority Key Identifier:
                keyid:42:E3:24:57:C1:6B:A8:74:21:6A:8F:5D:BB:0D:33:5B:D1:48:CB:31

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/QuMkV8FrqHQhao9duw0zW9FIyzE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QuMkV8FrqHQhao9duw0zW9FIyzE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/990/mu30qF4H7DocyqsmpGKtY356sew.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.210.8.0/24

    Signature Algorithm: sha256WithRSAEncryption
         53:82:89:a0:a6:d4:e3:0c:df:8a:f9:94:52:ff:8e:5d:d8:0b:
         fe:82:8b:63:45:a9:3e:4b:a8:98:e2:d6:ab:2d:4e:3a:14:d8:
         74:70:c9:00:c7:68:ca:73:51:3f:54:13:84:d9:9f:7f:60:28:
         72:7d:36:0f:cd:2d:02:e0:4a:a9:a5:52:3b:99:1f:18:8b:a7:
         8d:3b:72:ae:12:33:b8:20:31:65:ad:d4:d4:9e:9b:8c:1a:85:
         7f:83:88:73:c7:0c:48:90:69:00:b0:67:f1:27:de:95:19:81:
         d7:42:3a:56:45:e8:61:c6:f6:11:c5:fd:8d:1f:f5:70:fd:9a:
         b2:00:29:3d:25:62:9f:8d:ba:53:1d:d6:7d:24:d1:53:48:c6:
         ae:b9:65:6b:8c:2a:60:ac:02:e0:7c:76:bf:67:04:1d:4a:7d:
         26:31:3c:fa:b0:f2:9d:04:eb:e8:51:30:b0:27:c0:79:fd:0d:
         d3:6b:cb:7e:d1:52:b5:61:f1:00:db:13:f7:47:3b:a8:61:16:
         1e:bb:85:e5:e6:ff:b6:69:52:d0:6b:8d:1e:4e:39:b2:57:69:
         92:b1:a4:31:96:74:85:94:e0:6c:ab:92:d5:3b:a0:69:08:e4:
         9a:48:c7:1a:b8:0b:24:47:da:c1:27:50:1e:f4:b4:30:7f:93:
         c5:88:08:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 17 11:39:18 2024 by rpki-client on console-fra.rpki-client.org