Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ditXG_NWrRyuSDF6mb_Arrxbt20.roa
File:                     ditXG_NWrRyuSDF6mb_Arrxbt20.roa (raw, json)
Hash identifier:          qeegNelGQRNkLq9VhNx89RbVBw1BXd4jWD59bzUUyPk=
Subject key identifier:   76:2B:57:1B:F3:56:AD:1C:AE:48:31:7A:99:BF:C0:AE:BC:5B:B7:6D
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       57
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ditXG_NWrRyuSDF6mb_Arrxbt20.roa
Signing time:             Wed 03 Jul 2024 16:46:26 +0000
ROA not before:           Wed 03 Jul 2024 16:46:26 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     4913
IP address blocks:        61.200.83.144/28 maxlen: 28
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Jul  3 16:46:26 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=762B571BF356AD1CAE48317A99BFC0AEBC5BB76D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:3d:d9:50:00:cd:27:0f:ff:96:a6:a9:b5:4d:
                    2a:32:83:c8:93:8f:a6:4e:c9:cc:94:62:c1:97:e2:
                    a0:47:35:a4:d1:a9:9f:5e:09:ef:36:3a:e0:f5:45:
                    20:06:8d:77:1d:ed:24:49:37:76:fd:83:32:7e:3a:
                    66:73:3e:44:db:0d:44:c2:30:61:3d:69:39:1a:0a:
                    0e:7e:3d:4b:ce:55:fa:7e:db:fa:f0:e0:b1:ab:c5:
                    99:5c:dd:08:2e:50:4f:6a:06:ad:d4:c9:64:12:e0:
                    48:59:78:ef:b7:ca:ad:b5:ed:de:f8:ab:06:6a:02:
                    24:a4:bf:9d:bf:a8:a6:d7:01:03:6e:00:0c:39:15:
                    88:9d:ab:1c:7b:ed:e4:94:70:53:87:2b:8c:df:bc:
                    2b:bb:5f:83:be:ea:3a:75:13:1e:2e:26:92:1f:9c:
                    4d:3f:39:49:f3:42:a5:58:f1:8e:8d:03:3a:75:aa:
                    99:09:e9:ad:15:ca:c9:48:f1:57:aa:e8:85:ce:4f:
                    5b:0f:7a:35:55:01:9d:e7:6e:c1:0e:37:de:74:f1:
                    b9:8f:63:2e:3c:17:96:7d:4c:eb:a1:55:99:34:98:
                    00:78:6b:5b:35:9f:0b:06:ed:69:45:3f:64:86:7c:
                    5a:40:06:66:72:4b:12:ae:a6:cf:74:55:df:71:87:
                    d5:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:2B:57:1B:F3:56:AD:1C:AE:48:31:7A:99:BF:C0:AE:BC:5B:B7:6D
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/ditXG_NWrRyuSDF6mb_Arrxbt20.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.200.83.144/28

    Signature Algorithm: sha256WithRSAEncryption
         20:51:3b:ff:34:45:6d:cb:8d:e5:1c:3c:23:49:1e:db:a8:be:
         21:e9:3e:09:fc:2e:59:13:cc:3c:5b:cd:0f:a5:72:84:25:4f:
         75:2a:10:4d:91:e0:f0:b6:57:47:83:54:57:bb:98:5c:39:1a:
         d5:fc:1f:eb:c0:d9:6f:64:fc:f0:0f:98:5f:a7:2d:37:60:83:
         95:66:f0:09:b0:07:33:21:3c:3c:39:a3:ce:7c:8f:01:75:b1:
         f6:f6:72:a8:0f:25:43:38:c6:15:ee:47:94:54:f8:c4:3b:1a:
         f2:38:55:d6:07:71:3b:e0:e6:3c:78:ee:a9:51:6e:95:08:d2:
         3e:75:fd:9f:cd:2a:22:aa:b9:63:a3:6f:b5:fc:1d:a0:a5:aa:
         0c:bf:97:47:ea:61:e6:85:1e:ea:fd:5c:70:98:10:43:fb:6b:
         0e:a3:79:bb:a5:fd:53:14:a0:4c:e3:96:00:ce:5a:11:6f:1b:
         c4:92:4f:6f:77:fd:19:5b:45:c0:35:80:6b:66:9a:80:b9:8b:
         0c:85:dc:5a:fd:66:28:b8:a0:18:08:9c:b2:31:87:a6:a6:cd:
         99:84:71:08:bb:f9:90:e6:64:7b:aa:e0:b4:70:27:c4:12:cd:
         58:80:98:9f:8b:b2:63:a6:31:27:0e:2f:3e:fb:94:be:47:53:
         75:60:8f:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 20:45:11 2025 by rpki-client