Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12207/5NtwJDKw7aN72kMkAGdME-Bkdyk.roa
File:                     5NtwJDKw7aN72kMkAGdME-Bkdyk.roa (raw, json)
Hash identifier:          aih7U5A2ZYFvePC46lOc+jI2bSCubcVA4ehSKk8NqCc=
Subject key identifier:   E4:DB:70:24:32:B0:ED:A3:7B:DA:43:24:00:67:4C:13:E0:64:77:29
Certificate issuer:       /CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
Certificate serial:       53
Authority key identifier: 19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/5NtwJDKw7aN72kMkAGdME-Bkdyk.roa
Signing time:             Fri 31 Jan 2025 01:30:43 +0000
ROA not before:           Fri 31 Jan 2025 01:30:43 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     55392
IP address blocks:        130.62.0.0/16 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=19B4FDAE962F4960588B1D2BE6A1ED42F137098E
        Validity
            Not Before: Jan 31 01:30:43 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=E4DB702432B0EDA37BDA432400674C13E0647729
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:f0:ef:8c:d4:94:91:7f:ce:50:d5:d6:a3:07:
                    d3:78:54:67:f5:7e:14:b7:15:33:83:9e:d6:a8:2e:
                    b2:8a:a3:60:7c:23:52:62:c8:f1:bc:54:10:a7:d6:
                    ef:1c:57:d9:2d:65:b2:fc:20:93:68:41:f3:bb:4d:
                    23:31:b4:47:09:f6:e5:82:66:29:21:52:b9:9d:9d:
                    7c:99:40:9b:ba:a3:54:ee:07:c3:75:d1:36:bd:5d:
                    4f:d2:06:94:96:70:a6:f6:42:64:9a:34:37:cc:e4:
                    95:ab:01:20:4a:ae:e8:b5:df:99:5b:e0:7f:9a:93:
                    9c:69:41:1e:d4:82:cc:5e:4a:3b:38:3e:9f:a7:cc:
                    23:28:98:7c:51:2f:af:a4:61:27:10:02:65:8e:b1:
                    97:f8:74:f6:e5:a8:a7:34:d7:60:32:fa:56:cd:f6:
                    1c:11:7c:02:f6:98:ae:ea:18:38:0d:8a:4a:c7:1e:
                    d0:02:7a:49:c4:c2:dd:d4:2a:1b:42:07:d9:1b:2b:
                    c2:90:28:0b:69:93:7e:88:20:8c:4f:08:7d:fd:64:
                    c7:3a:e5:2a:01:03:d6:8d:d0:ee:18:43:36:8b:67:
                    cf:e1:3b:5c:52:82:cd:6c:e8:98:e8:76:3d:de:5c:
                    89:00:c2:71:01:f5:cf:b6:cb:16:50:b6:55:9f:69:
                    ca:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:DB:70:24:32:B0:ED:A3:7B:DA:43:24:00:67:4C:13:E0:64:77:29
            X509v3 Authority Key Identifier:
                keyid:19:B4:FD:AE:96:2F:49:60:58:8B:1D:2B:E6:A1:ED:42:F1:37:09:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/GbT9rpYvSWBYix0r5qHtQvE3CY4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GbT9rpYvSWBYix0r5qHtQvE3CY4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12207/5NtwJDKw7aN72kMkAGdME-Bkdyk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  130.62.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         20:05:f8:53:0b:3f:0f:94:bc:be:7d:2c:82:22:c8:82:74:94:
         01:d4:86:0a:05:d6:05:6d:54:e3:23:9d:fc:0a:22:23:51:4e:
         c8:c0:7f:ba:7b:50:ef:b2:26:e5:cf:5a:25:ce:fc:b7:59:a3:
         85:54:d2:dc:5f:75:df:9f:83:6d:81:68:a7:ff:88:e1:c9:be:
         50:71:0e:7b:dc:86:ec:5c:bc:5b:2d:fb:51:52:05:30:96:53:
         75:bb:67:8e:7b:e3:cf:3d:45:8e:a0:d9:1a:14:2a:99:0d:3b:
         79:ca:9c:dd:f1:2c:5b:b5:69:ef:37:60:77:6e:87:eb:6a:26:
         d2:1f:48:99:d2:0b:e2:17:f1:36:cd:94:fb:ca:63:6d:e5:ee:
         4e:7b:1a:c8:77:94:fa:d8:bb:26:10:32:e4:e2:bb:d8:0e:d2:
         6d:6a:c6:1f:cd:04:00:7d:22:97:c6:5a:da:39:16:d5:9b:8b:
         bb:a1:d0:c3:68:8e:71:09:a1:a6:6e:bd:fd:05:67:b6:27:fd:
         77:31:1b:d9:15:a5:82:fa:9c:a0:88:14:ed:4c:f2:0b:b6:a5:
         2e:1b:a8:1f:e9:a9:95:98:b6:a8:bc:33:b1:81:e4:d4:81:30:
         99:94:2e:ba:4c:45:30:72:30:37:77:46:64:25:77:f5:10:d3:
         cd:93:04:8e
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgIBUzANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygxOUI0
RkRBRTk2MkY0OTYwNTg4QjFEMkJFNkExRUQ0MkYxMzcwOThFMB4XDTI1MDEzMTAx
MzA0M1oXDTI2MDExNTAxMzAwM1owMzExMC8GA1UEAxMoRTREQjcwMjQzMkIwRURB
MzdCREE0MzI0MDA2NzRDMTNFMDY0NzcyOTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAJ/w74zUlJF/zlDV1qMH03hUZ/V+FLcVM4Oe1qgusoqjYHwjUmLI
8bxUEKfW7xxX2S1lsvwgk2hB87tNIzG0Rwn25YJmKSFSuZ2dfJlAm7qjVO4Hw3XR
Nr1dT9IGlJZwpvZCZJo0N8zklasBIEqu6LXfmVvgf5qTnGlBHtSCzF5KOzg+n6fM
IyiYfFEvr6RhJxACZY6xl/h09uWopzTXYDL6Vs32HBF8AvaYruoYOA2KSsce0AJ6
ScTC3dQqG0IH2RsrwpAoC2mTfoggjE8Iff1kxzrlKgED1o3Q7hhDNotnz+E7XFKC
zWzomOh2Pd5ciQDCcQH1z7bLFlC2VZ9pym8CAwEAAaOCAicwggIjMB0GA1UdDgQW
BBTk23AkMrDto3vaQyQAZ0wT4GR3KTAfBgNVHSMEGDAWgBQZtP2uli9JYFiLHSvm
oe1C8TcJjjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGgGA1UdHwRhMF8wXaBb
oFmGV3JzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMTIyMDcvR2JUOXJwWXZTV0JZaXgwcjVxSHRRdkUzQ1k0LmNybDBtBggr
BgEFBQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5
Lm5pYy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvR2JUOXJwWXZTV0JZaXgwcjVxSHRR
dkUzQ1k0LmNlcjAOBgNVHQ8BAf8EBAMCB4Awgb0GCCsGAQUFBwELBIGwMIGtMGMG
CCsGAQUFBzALhldyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAv
QTkxQTczODEwMDAwLzEyMjA3LzVOdHdKREt3N2FONzJrTWtBR2RNRS1Ca2R5ay5y
b2EwRgYIKwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5q
cC9ycmRwL2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsE
AgABMAUDAwCCPjANBgkqhkiG9w0BAQsFAAOCAQEAIAX4Uws/D5S8vn0sgiLIgnSU
AdSGCgXWBW1U4yOd/AoiI1FOyMB/untQ77Im5c9aJc78t1mjhVTS3F9135+DbYFo
p/+I4cm+UHEOe9yG7Fy8Wy37UVIFMJZTdbtnjnvjzz1FjqDZGhQqmQ07ecqc3fEs
W7Vp7zdgd26H62om0h9ImdIL4hfxNs2U+8pjbeXuTnsayHeU+ti7JhAy5OK72A7S
bWrGH80EAH0il8Za2jkW1ZuLu6HQw2iOcQmhpm69/QVntif9dzEb2RWlgvqcoIgU
7UzyC7alLhuoH+mplZi2qLwzsYHk1IEwmZQuukxFMHIwN3dGZCV39RDTzZMEjg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:27:33 2025 by rpki-client