Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FNrEmkWH3INIYm31dlwwv9oU4J0.roa
File:                     FNrEmkWH3INIYm31dlwwv9oU4J0.roa (raw, json)
Hash identifier:          nI/+pzpMSFXPhzjplh6nkTqE4UBrVhtKNysFOFGtPE4=
Subject key identifier:   14:DA:C4:9A:45:87:DC:83:48:62:6D:F5:76:5C:30:BF:DA:14:E0:9D
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       B6
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FNrEmkWH3INIYm31dlwwv9oU4J0.roa
Signing time:             Wed 04 Dec 2024 19:47:08 +0000
ROA not before:           Wed 04 Dec 2024 19:47:08 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     3949
IP address blocks:        203.105.65.192/27 maxlen: 27
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 182 (0xb6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:47:08 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=14DAC49A4587DC8348626DF5765C30BFDA14E09D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:67:02:81:6c:b8:e6:24:4b:69:27:2d:dd:02:
                    fd:cc:5d:ca:56:f8:36:c4:91:38:3b:db:41:a7:42:
                    1d:23:39:89:05:fb:c0:ed:e1:65:54:10:47:a0:68:
                    e9:13:93:55:45:f8:dc:50:10:30:82:e2:83:3e:a2:
                    c6:30:94:70:ee:62:59:e7:be:24:2c:9b:42:a3:c1:
                    e3:cd:65:d0:15:b3:b3:75:8e:f3:5e:af:88:cb:10:
                    74:57:f3:5f:c1:f7:77:02:f2:ff:ee:ae:99:63:8d:
                    5e:1d:f1:3f:08:81:d5:b5:61:70:6b:70:5f:dd:22:
                    81:1b:5c:7b:02:db:b0:4b:8e:78:f3:d7:1b:86:50:
                    76:aa:95:bc:9a:50:9f:3f:16:9a:cb:b6:5c:22:83:
                    d3:5f:60:d4:9d:92:95:67:4d:81:a1:f8:8b:29:be:
                    7b:42:77:0f:f7:53:b9:c2:8d:d5:ab:28:74:89:60:
                    6c:42:98:ac:1c:f6:ae:c8:67:e2:86:b4:ec:f7:12:
                    e8:83:ac:80:cb:c9:e0:35:dc:db:af:7d:31:e1:c0:
                    ab:6f:96:bb:b9:ce:14:9f:85:e3:2d:73:d1:b0:e2:
                    e2:fa:c8:89:9b:4f:02:82:1e:1a:a5:7d:90:0e:c0:
                    72:34:01:52:68:42:ec:d7:8b:15:89:99:e1:45:40:
                    a6:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:DA:C4:9A:45:87:DC:83:48:62:6D:F5:76:5C:30:BF:DA:14:E0:9D
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/FNrEmkWH3INIYm31dlwwv9oU4J0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.105.65.192/27

    Signature Algorithm: sha256WithRSAEncryption
         10:03:68:63:6d:a5:42:66:ee:4c:b5:ba:b6:09:e7:5a:77:ad:
         32:03:b6:5d:6b:b1:ff:45:ac:a3:8b:0e:99:06:6c:ff:68:a4:
         5d:a8:81:8d:3f:d5:ae:b5:10:f5:c5:59:aa:a7:8e:b8:f9:20:
         95:4a:5a:7a:ac:1b:47:3f:a5:1e:28:6b:45:a1:ac:b8:3c:d0:
         71:6e:4f:9d:31:d9:e1:d4:d2:1c:7b:15:06:38:ba:64:cc:c3:
         60:0a:50:f8:bb:a7:f9:d9:6b:99:35:30:b7:d9:20:34:8d:4e:
         92:14:f0:fc:77:54:57:b8:fc:7b:24:b2:4a:6f:90:03:a5:54:
         10:a3:4e:ba:d8:26:51:47:ab:ba:c2:19:89:42:e3:71:df:27:
         bb:f9:fd:ce:1f:b4:d8:d8:83:5c:06:5e:45:16:c7:0e:84:89:
         fc:e7:f8:ee:a4:f6:5b:a8:f1:d3:bd:2b:e3:ec:22:b1:7a:f9:
         64:39:98:85:30:2b:6c:a8:b2:25:91:e3:5c:90:d4:8e:f6:2b:
         ed:1e:81:4a:88:cb:f6:53:76:69:57:b7:f7:dc:a8:7f:7c:a1:
         38:01:79:a6:f9:e4:ea:ae:48:41:07:bc:72:65:8f:ea:56:2b:
         1f:bb:6b:00:6c:9b:07:69:90:5f:af:be:4a:ff:50:2b:85:c8:
         d6:f7:1d:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 19:48:35 2025 by rpki-client