Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6aMDKnCSWCn0mfQyxbeUznNy_Oo.roa
File:                     6aMDKnCSWCn0mfQyxbeUznNy_Oo.roa (raw, json)
Hash identifier:          z41SQW5VoN9gljTKRPuhqS1z55c3D9ggGzUo8rPMzE0=
Subject key identifier:   E9:A3:03:2A:70:92:58:29:F4:99:F4:32:C5:B7:94:CE:73:72:FC:EA
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       C1
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6aMDKnCSWCn0mfQyxbeUznNy_Oo.roa
Signing time:             Thu 05 Dec 2024 16:51:17 +0000
ROA not before:           Thu 05 Dec 2024 16:51:17 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2914
IP address blocks:        210.175.160.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 193 (0xc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  5 16:51:17 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E9A3032A70925829F499F432C5B794CE7372FCEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:c3:aa:9b:b9:97:ea:b6:a1:25:3e:31:05:4e:
                    bf:22:af:62:33:f1:21:f5:cf:44:d0:c6:c4:f6:50:
                    46:82:40:46:25:53:f8:64:4f:64:10:c7:8c:53:b6:
                    cc:7f:7e:92:b2:fb:f3:11:5a:24:18:b9:c7:8e:30:
                    8b:21:ee:0a:10:ff:76:d1:84:a1:0f:ca:c9:96:54:
                    d1:bd:f7:d9:02:80:ab:45:a4:84:f5:95:6a:df:ba:
                    3c:84:5d:25:89:5b:da:ab:e0:ab:80:d0:68:e5:47:
                    79:ff:e3:03:be:14:aa:38:8c:55:9f:64:70:d5:ad:
                    1e:51:03:a9:fc:e6:25:6e:ea:20:c1:af:20:4e:44:
                    6f:56:79:df:0c:65:70:c5:76:d4:b4:0f:74:ea:bd:
                    df:de:8c:76:f0:35:64:b5:f2:c9:77:66:bd:87:76:
                    db:33:79:e5:6b:2d:55:4f:5d:0b:1d:a9:08:a7:6b:
                    e5:3f:62:a3:6e:45:46:40:da:4a:32:9a:44:df:d5:
                    85:ad:f3:c1:2f:01:e7:d1:80:1c:00:7d:67:00:d7:
                    b8:cd:5d:6f:a3:9e:9f:1c:d9:42:17:bd:74:ea:5c:
                    40:fc:df:8b:01:8d:6f:e0:a9:bb:66:c9:8c:c4:f9:
                    e1:67:11:ee:88:6e:bd:7e:4a:32:2c:c5:67:19:80:
                    61:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:A3:03:2A:70:92:58:29:F4:99:F4:32:C5:B7:94:CE:73:72:FC:EA
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/6aMDKnCSWCn0mfQyxbeUznNy_Oo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.175.160.0/19

    Signature Algorithm: sha256WithRSAEncryption
         4b:c3:1c:5c:e6:0d:19:6c:6a:49:30:74:cc:0d:1a:04:e2:b6:
         85:da:af:c7:ae:7a:42:aa:44:13:48:23:15:21:1a:95:fe:d7:
         58:a9:61:20:d8:8d:0e:6c:cd:da:82:ee:11:8d:73:bf:de:10:
         14:ae:13:99:f3:40:77:5a:30:6f:5f:11:d1:22:a7:1b:e9:a4:
         49:da:62:7b:af:99:2d:ac:00:8f:aa:22:78:4c:14:ab:fb:fb:
         d4:2a:fc:ef:33:06:b1:76:8d:76:5c:a2:8c:76:71:ea:85:e1:
         0c:ed:5f:f2:5f:77:a0:82:f7:1a:13:08:81:f7:b0:ab:94:31:
         fb:e4:1c:2d:1b:53:ae:83:03:52:cc:82:19:33:41:3e:00:2b:
         4e:ca:23:ed:81:11:3c:63:20:4f:39:98:17:e7:3c:88:a5:f0:
         cf:fb:30:1e:bd:9d:b0:be:0d:c2:3e:37:79:3f:99:db:26:b1:
         2e:c5:2a:39:cb:8e:f1:04:7e:66:8b:bf:6a:d6:19:00:dc:88:
         ed:46:0d:f4:e4:f7:08:42:dd:09:a7:0f:85:35:97:ea:86:97:
         ca:b6:9f:c5:5c:a2:d0:05:ab:3a:6f:b2:2a:b1:98:9f:41:de:
         52:1c:6a:38:80:9e:7d:d2:4c:b6:a2:c0:bc:19:b1:e1:af:ce:
         e2:47:26:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 20:06:56 2025 by rpki-client