Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F3wL7YbpV9hlfVIy1ERZAMLGvCQ.roa
File:                     F3wL7YbpV9hlfVIy1ERZAMLGvCQ.roa (raw, json)
Hash identifier:          DAdEWsfspVck1cLyJS7fqJBG5tzcWLTf+C2c1Slyv5Y=
Subject key identifier:   17:7C:0B:ED:86:E9:57:D8:65:7D:52:32:D4:44:59:00:C2:C6:BC:24
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       83
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F3wL7YbpV9hlfVIy1ERZAMLGvCQ.roa
Signing time:             Tue 03 Dec 2024 17:24:25 +0000
ROA not before:           Tue 03 Dec 2024 17:24:25 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2914
IP address blocks:        117.104.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 131 (0x83)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  3 17:24:25 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=177C0BED86E957D8657D5232D4445900C2C6BC24
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:e6:de:66:24:b5:ec:00:d3:17:0a:c4:3f:99:
                    5c:54:65:37:3d:36:eb:ee:37:db:36:95:10:4f:78:
                    e1:df:57:48:46:0e:0e:5b:79:78:7a:dd:d4:7f:5b:
                    ad:6b:e0:fb:1a:5b:1a:91:13:0b:bc:53:36:e2:40:
                    8c:c2:9d:e1:70:63:e4:ac:d2:13:fb:da:15:e6:44:
                    6a:5c:56:94:6b:44:62:75:12:52:04:0e:a0:d1:c3:
                    7c:b9:ee:4f:cf:73:5c:f1:b4:12:6d:5f:21:0a:a3:
                    e0:7d:32:f8:4c:6f:92:53:a3:ae:1b:fd:75:06:1a:
                    84:41:04:7d:7b:ad:61:69:c3:e4:c0:ee:f8:f4:3b:
                    e9:ff:75:ef:df:94:66:f7:8e:48:0f:a9:d8:56:47:
                    e5:bf:ae:bf:fd:b1:16:73:42:c0:f5:ae:ea:56:b9:
                    39:a6:be:97:30:6d:1c:0d:52:76:7a:7d:2e:31:ea:
                    3e:fd:be:b9:1f:19:5a:87:50:e8:b2:cc:55:a4:f3:
                    ef:de:10:42:64:54:87:4f:5c:74:d2:83:ba:a5:11:
                    51:e3:28:39:b6:05:ab:eb:0a:6b:9a:90:0f:a0:52:
                    87:c6:b2:a5:72:ff:01:ba:da:61:35:7c:d1:be:98:
                    14:79:83:c8:86:50:9b:11:d0:3b:39:71:0c:d1:61:
                    42:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:7C:0B:ED:86:E9:57:D8:65:7D:52:32:D4:44:59:00:C2:C6:BC:24
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/F3wL7YbpV9hlfVIy1ERZAMLGvCQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  117.104.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         73:26:14:ba:48:b2:f9:01:81:98:c4:fc:85:10:7d:8c:0c:6d:
         98:01:05:85:07:9a:4f:55:83:96:3f:7b:dc:73:b2:c4:50:f5:
         8d:c4:84:64:8e:69:dd:e8:7a:76:1a:3a:da:b9:70:fb:79:ea:
         ae:0c:26:19:a0:53:97:36:de:5f:b3:d6:d7:c8:7d:5e:78:f0:
         16:4a:13:ed:b0:86:a8:b0:d6:d3:12:ab:d8:ef:19:93:91:74:
         99:aa:ff:43:91:9e:90:f1:b0:e0:dc:d1:c8:b7:7b:91:59:9a:
         e1:1d:65:26:a6:74:d3:7d:65:c1:f7:6b:14:3c:52:61:21:b8:
         09:d5:6e:5a:39:ac:fe:ac:95:2e:f4:e6:e2:2d:9c:80:22:1d:
         7f:86:b7:f6:98:72:35:5a:3b:8c:7a:c4:ec:a2:d8:c7:98:cc:
         b0:da:7c:a7:86:c2:b8:93:8f:69:55:ca:bc:7b:ce:73:71:12:
         16:02:d1:dc:58:0d:72:be:a6:6a:aa:4b:5c:52:a6:fc:34:bc:
         c8:1b:b2:0a:fb:e1:6a:fa:00:18:44:7e:f3:d7:2e:01:d5:6c:
         99:e2:82:41:20:48:61:7f:33:60:82:0b:03:e3:bb:46:be:6b:
         9e:e6:77:96:34:22:53:71:cc:98:53:44:db:e7:6e:5e:45:18:
         da:ce:eb:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:25:49 2025 by rpki-client