Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fRdKqVJmTl0LDKjaJPITsik1Zck.roa
File:                     fRdKqVJmTl0LDKjaJPITsik1Zck.roa (raw, json)
Hash identifier:          0HYKxldwv3Y7BLEQzJPHP7rK6VGG8TrizuBr4xmtAcY=
Subject key identifier:   7D:17:4A:A9:52:66:4E:5D:0B:0C:A8:DA:24:F2:13:B2:29:35:65:C9
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       93
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fRdKqVJmTl0LDKjaJPITsik1Zck.roa
Signing time:             Wed 04 Dec 2024 19:10:57 +0000
ROA not before:           Wed 04 Dec 2024 19:10:57 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     133900
IP address blocks:        124.40.50.0/25 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 147 (0x93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  4 19:10:57 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=7D174AA952664E5D0B0CA8DA24F213B2293565C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e9:e6:a8:7b:e7:24:d5:ad:69:f9:6b:72:1c:
                    cf:e5:0c:d0:79:4d:24:c9:b9:ad:1a:af:3c:fe:ab:
                    f7:e8:73:a5:f3:7c:1f:b9:92:40:ce:51:67:64:a5:
                    56:75:30:92:8f:31:4b:30:f0:42:ab:75:ba:44:c9:
                    30:c3:cf:ff:9a:90:09:b0:38:e3:9b:17:2c:06:a2:
                    cf:cd:d5:3a:52:c3:d4:46:6d:fa:e1:4a:b2:a5:9a:
                    cc:d2:29:d3:5b:06:e8:7e:94:d2:08:e5:d5:68:f7:
                    c2:da:39:41:df:8b:ea:48:69:71:c0:ff:26:37:7c:
                    00:bc:65:46:19:bf:1d:fb:5a:6b:fc:99:23:ba:4f:
                    5a:4e:4c:f1:bc:7a:3d:54:bd:05:f3:17:12:24:09:
                    25:9c:56:cc:b8:7a:8b:d6:05:40:df:c0:e8:b2:d8:
                    04:d2:8a:91:eb:b7:ca:b2:04:62:a3:cd:2a:8d:aa:
                    64:1e:c1:d4:6b:b3:ab:82:53:9b:5a:cd:af:fc:77:
                    56:4e:53:4f:48:78:6a:d9:78:05:54:fd:18:27:6b:
                    70:0c:23:c8:ba:e7:6d:36:e3:88:5a:81:dc:81:8c:
                    e3:c1:f3:13:f1:1e:29:51:11:2b:09:5e:04:9e:2c:
                    dc:61:5f:70:75:7f:16:a3:7f:89:23:ed:dd:d5:45:
                    59:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:17:4A:A9:52:66:4E:5D:0B:0C:A8:DA:24:F2:13:B2:29:35:65:C9
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/fRdKqVJmTl0LDKjaJPITsik1Zck.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.40.50.0/25

    Signature Algorithm: sha256WithRSAEncryption
         82:6f:e9:a8:04:5b:7c:a1:5b:c2:3f:b6:51:a2:b3:dc:d9:17:
         d4:b9:d4:e9:bc:23:60:37:3f:c5:f5:28:85:2f:66:56:8e:cc:
         2c:5a:6e:5d:45:86:69:2a:cb:cd:f6:2d:a8:e9:33:cb:ab:e8:
         39:cd:6f:85:63:ae:f4:1a:9d:c7:e3:e7:46:95:5a:48:3d:4b:
         3f:07:94:d2:22:d2:ff:49:de:27:31:1f:74:64:f1:47:83:b4:
         66:de:70:bc:68:46:4f:e9:d3:ed:13:01:0a:7d:3a:6a:70:38:
         0d:85:dc:33:4e:d0:79:0d:24:32:10:ee:36:48:4c:ad:0e:56:
         ff:16:96:72:e2:51:70:73:81:8a:11:69:53:e0:12:de:32:56:
         6f:b1:5e:5c:55:98:d5:80:be:ad:79:df:0c:ef:69:dd:84:fa:
         9e:2c:43:31:92:4f:16:25:c0:62:7c:30:98:e4:06:69:0c:82:
         88:88:c5:28:83:e4:28:ba:1e:ed:66:83:ab:42:a6:b5:29:ea:
         a7:09:4d:cb:93:9f:5d:f5:44:dc:7b:7e:32:97:bc:ca:53:e4:
         06:75:87:b9:04:80:c2:1c:4e:3a:00:81:71:5f:5d:b2:1a:c5:
         2c:f6:4b:ea:70:23:69:8d:76:b2:ce:7d:50:ea:f4:b9:ac:9a:
         ee:96:04:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:38:00 2025 by rpki-client