Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/1639/9LzZ6itj0-XE7xid-GvA2cN24jY.roa
File:                     9LzZ6itj0-XE7xid-GvA2cN24jY.roa (raw, json)
Hash identifier:          hmAJNcO+Y9kpkfI2EclwSmKm3FKDveuciI0Oyebf+cs=
Subject key identifier:   F4:BC:D9:EA:2B:63:D3:E5:C4:EF:18:9D:F8:6B:C0:D9:C3:76:E2:36
Certificate issuer:       /CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
Certificate serial:       75
Authority key identifier: 24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/9LzZ6itj0-XE7xid-GvA2cN24jY.roa
Signing time:             Fri 31 Jan 2025 01:30:37 +0000
ROA not before:           Fri 31 Jan 2025 01:30:37 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     131078
IP address blocks:        202.255.47.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 117 (0x75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24505A86B00DCD05BA360BCA66ADFF602BD95AA8
        Validity
            Not Before: Jan 31 01:30:37 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=F4BCD9EA2B63D3E5C4EF189DF86BC0D9C376E236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:49:eb:88:b5:b4:0e:3e:c3:44:58:5d:8e:
                    c3:8e:75:89:a9:c3:81:2e:39:c1:53:18:47:65:9f:
                    d9:33:6a:0a:fe:c6:d4:cb:e4:25:f5:b8:21:10:0f:
                    86:e2:66:17:d4:f4:42:82:85:cb:ea:03:fc:44:4c:
                    8d:09:94:b4:7c:28:6f:fe:5d:09:5a:d7:fe:1e:f2:
                    42:7e:39:f4:37:4a:8b:78:9f:93:b3:e4:95:4e:5c:
                    b3:fb:c6:57:9a:2e:bf:1b:e0:00:fb:13:86:5c:95:
                    93:fa:3b:a9:23:5c:d9:a8:3b:4b:e7:5a:04:2e:09:
                    b5:9b:bc:dc:c0:43:46:d1:1c:d1:be:ad:65:91:1b:
                    38:58:4a:b8:c1:5e:27:00:5d:3b:b3:9f:b3:8f:1d:
                    fd:0e:ef:d0:5b:a4:3e:81:ea:b9:31:e9:c2:0d:70:
                    8c:c6:53:23:e3:99:29:3f:8d:71:cc:d2:71:93:53:
                    15:14:39:7d:02:2d:0b:73:3b:7d:ac:89:99:28:07:
                    9d:e4:ae:01:d2:04:f8:3b:2b:2d:16:2a:e6:8f:fb:
                    99:c8:b1:33:e0:b0:74:dc:6f:ad:e3:d4:de:a7:67:
                    d3:4e:93:a6:b1:74:c7:59:96:e2:d8:56:ba:f6:0e:
                    74:77:76:4b:9f:9a:1c:9b:31:98:93:e8:7d:f4:6f:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:BC:D9:EA:2B:63:D3:E5:C4:EF:18:9D:F8:6B:C0:D9:C3:76:E2:36
            X509v3 Authority Key Identifier:
                keyid:24:50:5A:86:B0:0D:CD:05:BA:36:0B:CA:66:AD:FF:60:2B:D9:5A:A8

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/JFBahrANzQW6NgvKZq3_YCvZWqg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JFBahrANzQW6NgvKZq3_YCvZWqg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1639/9LzZ6itj0-XE7xid-GvA2cN24jY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.255.47.0/24

    Signature Algorithm: sha256WithRSAEncryption
         96:73:5f:cf:3c:9f:1a:b0:ab:59:e4:a1:0e:0b:a3:ec:02:0c:
         9e:a7:f2:11:d1:f8:02:70:4a:e5:ce:87:3b:d1:fa:4b:43:94:
         ed:bf:86:fe:7c:d7:52:3b:5e:72:32:52:27:2d:f7:99:77:1a:
         07:7e:93:07:d1:48:19:6e:95:34:15:7c:3c:fc:df:2c:a3:6e:
         9b:29:99:36:f9:0e:5c:ea:5e:c7:63:2a:63:51:f8:98:98:3c:
         d7:45:47:5a:90:2f:4a:ac:4c:6b:14:6a:28:f1:6f:ff:e0:57:
         68:71:32:4a:30:95:22:93:ff:df:c8:14:e6:26:c2:5d:07:2e:
         be:3a:32:e9:b1:4d:cb:13:5e:49:ce:36:fe:0e:b4:7d:dd:c7:
         84:f8:5b:ed:89:48:11:dc:0d:14:08:88:1c:bc:fc:00:08:b5:
         34:1b:05:1d:56:7b:3c:42:a0:ce:6c:bb:6e:95:2b:51:4c:cf:
         b4:4a:bb:8f:72:29:26:7e:d2:79:51:cd:4b:39:9b:a7:58:d4:
         d3:ce:a7:3a:c8:49:e0:02:ce:d4:ec:aa:05:84:9a:ba:84:70:
         2d:0c:b1:11:ad:99:50:a7:05:75:81:a1:64:b9:c5:8c:3e:8b:
         7f:2e:e7:f2:fc:c1:f4:db:38:d7:db:e3:33:62:21:31:7d:e1:
         07:6d:f7:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:54:49 2025 by rpki-client