Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQ3hG_YS0-Uie0bbSQVUIku0WOQ.roa
File:                     pQ3hG_YS0-Uie0bbSQVUIku0WOQ.roa (raw, json)
Hash identifier:          ECNSBBdclBnoHFhe6K3+yGOV+NskVf8wekZPAqEMt5Q=
Subject key identifier:   A5:0D:E1:1B:F6:12:D3:E5:22:7B:46:DB:49:05:54:22:4B:B4:58:E4
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       020F
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQ3hG_YS0-Uie0bbSQVUIku0WOQ.roa
Signing time:             Mon 30 Sep 2024 01:30:03 +0000
ROA not before:           Mon 30 Sep 2024 01:30:03 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     9371
IP address blocks:        219.109.160.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 527 (0x20f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:03 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=A50DE11BF612D3E5227B46DB490554224BB458E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:80:90:21:91:d2:72:66:56:22:a4:33:02:
                    45:e6:ea:76:1e:a9:15:29:b1:8c:96:a1:a2:95:ff:
                    fe:5f:cc:05:95:61:47:af:36:3f:06:ec:29:ce:f5:
                    9a:6a:3b:cd:c9:ae:a8:c5:c0:76:08:ec:91:77:69:
                    80:03:5b:fe:66:7f:77:da:fa:34:4e:a2:e0:58:f2:
                    18:23:27:06:22:56:1b:2f:84:16:16:11:bb:1e:6b:
                    80:1b:8f:8b:2d:77:3d:1b:4a:d3:fd:7f:9b:99:8a:
                    ab:38:50:f2:04:be:01:6d:f5:f4:99:4b:f0:7f:ea:
                    7e:43:95:5b:38:91:5e:91:c5:33:a1:61:ce:d3:52:
                    90:f1:ac:35:b7:d3:ee:c9:0e:de:95:76:a5:18:18:
                    6f:bb:3f:38:9f:51:f6:b4:2e:35:af:1f:8e:8b:4e:
                    e8:dd:e8:57:4f:a0:fb:18:b1:f1:ad:77:32:3d:65:
                    de:7a:d2:3d:21:74:45:ce:0f:d5:9c:f5:10:be:16:
                    60:f1:93:d7:04:05:7c:d2:5b:c6:d4:0a:b7:2c:26:
                    99:95:5e:26:6c:84:5a:eb:1c:ee:6e:d4:b3:57:35:
                    59:61:b1:5a:b3:97:d0:d2:2c:88:87:05:e4:c0:bb:
                    f6:70:44:34:40:82:b7:a9:59:9c:b3:f8:c1:8d:47:
                    de:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:0D:E1:1B:F6:12:D3:E5:22:7B:46:DB:49:05:54:22:4B:B4:58:E4
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/pQ3hG_YS0-Uie0bbSQVUIku0WOQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.109.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         d5:e5:88:55:e1:5e:2a:86:73:87:55:8a:3f:1f:2e:13:e1:c7:
         2d:16:9b:c4:4a:8c:39:fa:e6:15:04:3a:e7:4e:92:3c:dd:e7:
         de:cc:98:8a:ad:06:97:71:a2:35:0d:81:5c:ac:d4:8a:5d:c0:
         46:38:80:37:3b:76:10:7b:fe:c9:e7:35:8c:2d:c2:57:8a:0b:
         7a:81:e9:23:33:8a:a8:36:dc:23:21:7c:04:93:21:19:c8:fc:
         cd:ff:85:5e:63:a2:5a:8c:c2:b6:d8:db:6d:3f:1f:4c:a7:43:
         04:b4:18:91:2f:01:f5:32:7a:28:11:74:5a:47:55:52:09:ac:
         c6:85:0b:28:9e:38:7b:db:f0:ca:53:20:f7:a1:95:3a:44:c9:
         8b:06:ee:fd:b1:fe:17:ec:61:87:24:c3:69:bf:d6:d1:9b:ed:
         49:2a:21:58:88:ef:6c:8a:bd:c4:02:c6:e7:a7:f9:68:ca:20:
         98:5b:c8:26:0f:1e:4f:0c:34:e6:33:4a:20:79:1a:a2:45:78:
         ef:6c:ca:67:c4:79:a5:6d:e1:fa:89:22:3b:61:0d:4e:16:1d:
         75:82:9a:25:8f:de:79:9d:73:e6:54:c3:2a:65:14:f8:30:5c:
         71:96:d7:ed:5a:35:a0:0c:ec:15:6a:5e:71:ea:8d:0a:50:50:
         08:73:24:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:30:31 2025 by rpki-client