Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20031/iKm5pvEG4ldoMjnwvvjYj-ctDys.roa
File:                     iKm5pvEG4ldoMjnwvvjYj-ctDys.roa (raw, json)
Hash identifier:          /Rd/KT5Nd5Znbjc9OxbcllSzZ4s7r+ksMJA8AYoXtMM=
Subject key identifier:   88:A9:B9:A6:F1:06:E2:57:68:32:39:F0:BE:F8:D8:8F:E7:2D:0F:2B
Certificate issuer:       /CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
Certificate serial:       30
Authority key identifier: 76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/iKm5pvEG4ldoMjnwvvjYj-ctDys.roa
Signing time:             Thu 31 Oct 2024 01:31:22 +0000
ROA not before:           Thu 31 Oct 2024 01:31:22 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7511
IP address blocks:        203.145.96.0/20 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 48 (0x30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7642A07D9AC9D227EA42F79E6D131CB1A920EDCE
        Validity
            Not Before: Oct 31 01:31:22 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=88A9B9A6F106E257683239F0BEF8D88FE72D0F2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:c3:64:95:10:9b:f9:f5:be:18:6e:32:d6:39:
                    42:db:46:3d:58:4b:2c:19:ef:1d:76:ae:32:ad:be:
                    ec:06:dc:90:b1:ad:94:b4:79:8c:62:d8:e7:56:6a:
                    9a:02:a7:3f:b4:31:c5:cf:66:a8:2f:c2:5d:e2:00:
                    6b:46:07:b7:91:4a:5f:b8:48:8b:dc:8f:04:fd:97:
                    b2:17:c6:07:13:d6:8d:9c:73:86:a5:3d:0b:ed:87:
                    79:45:ef:90:7c:e1:9d:88:40:59:f9:9d:0a:99:7d:
                    95:35:f6:48:75:e7:f8:e2:40:5d:fc:ba:ba:1c:99:
                    a5:04:e8:59:7c:d0:b1:83:32:b5:9c:6d:76:0d:1a:
                    a1:0f:fd:51:2b:8c:bb:1b:0e:32:37:33:66:b7:8f:
                    7f:34:0b:87:c2:e2:97:f0:7c:05:fb:80:4e:37:a1:
                    98:01:89:4c:13:96:3a:0d:19:ea:b4:25:b1:6c:8a:
                    65:0e:63:1e:b5:83:c7:50:fa:02:cc:f3:37:b3:24:
                    ae:4f:b9:ec:4c:e5:7c:2e:e9:e5:c9:c9:4e:2f:35:
                    6c:ab:7b:77:7f:45:bf:9a:65:66:f2:12:67:26:b9:
                    86:da:29:0a:d0:63:9f:25:37:26:e8:bb:6a:20:f8:
                    1b:2e:ec:f3:13:e5:bc:cb:7b:59:e1:66:3f:ce:11:
                    c0:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A9:B9:A6:F1:06:E2:57:68:32:39:F0:BE:F8:D8:8F:E7:2D:0F:2B
            X509v3 Authority Key Identifier:
                keyid:76:42:A0:7D:9A:C9:D2:27:EA:42:F7:9E:6D:13:1C:B1:A9:20:ED:CE

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/dkKgfZrJ0ifqQveebRMcsakg7c4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/dkKgfZrJ0ifqQveebRMcsakg7c4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20031/iKm5pvEG4ldoMjnwvvjYj-ctDys.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.145.96.0/20

    Signature Algorithm: sha256WithRSAEncryption
         85:d7:39:66:56:77:f4:26:5c:e0:15:d6:96:af:4d:77:60:99:
         f3:af:9d:6c:a3:66:1a:24:ac:6d:f8:64:f0:9a:a1:09:b0:80:
         bb:9e:37:04:be:81:11:eb:3d:06:b8:b0:06:c7:f1:ab:a5:24:
         a5:36:6c:7e:2c:b2:89:d0:b2:61:4c:85:04:24:27:49:46:36:
         91:5e:85:fe:e8:7a:33:94:f5:e3:77:94:3f:8a:ff:62:a2:3c:
         8f:a7:45:1c:c4:38:2e:44:dc:d7:71:25:45:fe:ad:0c:47:aa:
         bf:05:06:b6:f9:76:a2:d0:73:9b:b2:64:40:70:fa:5b:21:0f:
         2c:11:4f:fc:e0:09:62:03:9b:e5:38:ed:63:34:da:c0:57:f7:
         31:a9:2e:e3:84:0c:e7:ca:e3:d5:68:36:3e:69:ba:53:51:36:
         a4:2a:71:ca:9f:8e:af:23:41:de:7e:9f:3b:87:94:f7:b9:b7:
         0e:6c:37:ab:d3:14:e6:7d:2c:bc:06:f7:ae:3a:40:02:23:44:
         4c:84:b4:e5:fb:be:52:5b:ab:92:fb:47:c4:a1:8f:8a:36:94:
         1b:bf:44:ba:95:74:26:dd:5b:f7:4f:08:ae:b4:31:20:7e:31:
         c3:23:15:09:98:22:91:a1:44:61:7f:53:49:07:9b:01:9d:1b:
         64:4c:b5:79
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:22:59 2025 by rpki-client