Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vKXgxXRcOJDoCkhji14xNY6OZzE.roa
File:                     vKXgxXRcOJDoCkhji14xNY6OZzE.roa (raw, json)
Hash identifier:          h1Tecu7CxF7MqlcSkrjDAUXd8cS+fw+GMxAoKZfWmRo=
Subject key identifier:   BC:A5:E0:C5:74:5C:38:90:E8:0A:48:63:8B:5E:31:35:8E:8E:67:31
Certificate issuer:       /CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
Certificate serial:       C2
Authority key identifier: 8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vKXgxXRcOJDoCkhji14xNY6OZzE.roa
Signing time:             Thu 05 Dec 2024 16:51:17 +0000
ROA not before:           Thu 05 Dec 2024 16:51:17 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2914
IP address blocks:        211.130.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 194 (0xc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D46DDF88A46E4EC2D9A9BAB5FF1305FD057F138
        Validity
            Not Before: Dec  5 16:51:17 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=BCA5E0C5745C3890E80A48638B5E31358E8E6731
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:7b:2c:84:94:01:38:02:e2:83:af:34:52:ef:
                    5a:17:58:80:6b:ca:71:78:a9:c7:85:2d:ed:bd:ad:
                    fd:a4:c0:12:01:91:cc:30:fc:e2:1d:72:5e:df:09:
                    78:70:e7:72:20:6e:46:a4:e5:8f:19:9f:86:ab:59:
                    3e:b5:b5:cf:af:cc:fe:60:5f:19:d6:47:1b:87:a0:
                    e3:46:b7:f2:fd:68:e1:fc:0b:fc:1b:62:50:30:9d:
                    32:42:a5:63:f2:91:89:5a:b2:e2:87:80:18:ea:f3:
                    7c:71:2b:ff:93:22:9f:34:f2:e4:a7:38:40:9a:8e:
                    3f:72:c4:15:b6:82:ba:c8:bb:15:8f:4b:ce:d2:b6:
                    b0:b8:3b:e7:63:8b:79:b0:97:94:5d:b4:6c:b0:c4:
                    a0:c6:25:bf:82:d4:09:2f:15:9d:47:d0:8d:fd:e3:
                    bf:da:42:a4:a1:56:87:a0:94:6e:f2:8e:59:46:cf:
                    86:71:15:e0:6a:96:81:05:8d:01:97:90:d8:f1:10:
                    23:78:28:13:21:bf:02:95:a3:19:a4:e8:fc:7d:41:
                    50:2e:a2:6e:d1:3c:95:17:c5:7e:9a:a1:09:26:2a:
                    2a:f1:7a:de:1d:fe:c5:4e:ba:26:f4:81:ee:0c:80:
                    18:89:10:41:79:d2:a7:d0:83:aa:f9:bb:6d:f2:3c:
                    36:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:A5:E0:C5:74:5C:38:90:E8:0A:48:63:8B:5E:31:35:8E:8E:67:31
            X509v3 Authority Key Identifier:
                keyid:8D:46:DD:F8:8A:46:E4:EC:2D:9A:9B:AB:5F:F1:30:5F:D0:57:F1:38

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/jUbd-IpG5OwtmpurX_EwX9BX8Tg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jUbd-IpG5OwtmpurX_EwX9BX8Tg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20128/vKXgxXRcOJDoCkhji14xNY6OZzE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.130.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         05:cb:4f:07:9b:15:95:7c:48:13:92:04:47:b7:32:f7:b0:01:
         1d:61:e7:5e:3c:5c:79:c3:f4:f0:1c:11:db:0d:a8:b0:90:e7:
         0c:d0:73:79:70:94:7b:f4:18:89:68:af:c8:87:26:78:96:05:
         6c:ef:b6:b5:32:4a:e1:2c:8d:d8:45:93:3a:db:89:df:fd:6c:
         7e:2b:c2:a9:c7:d1:3b:6f:35:62:b3:b3:81:ea:dc:ed:4e:b8:
         be:3f:cd:c4:e0:b6:72:05:80:61:33:73:bf:ea:11:b5:c2:a4:
         83:38:86:eb:7f:cc:fa:55:ba:19:0c:be:00:94:57:2e:c1:2b:
         86:88:8f:f9:f1:42:7e:77:f2:4e:5d:b1:4e:66:9a:28:d3:74:
         e0:a5:5e:19:64:33:48:e2:56:ba:4f:b4:dd:61:a0:39:19:d7:
         de:cc:7d:64:fa:7a:84:d3:57:ae:5e:d6:52:42:ee:13:a3:f2:
         4d:bd:1f:c5:97:26:2f:28:d8:a6:b2:ed:8e:01:c4:c8:d3:e8:
         d6:ca:30:e2:be:f0:e5:b8:f3:f7:92:33:41:84:f3:ca:df:49:
         25:25:9d:95:75:73:42:cc:f3:6d:58:c2:8d:99:79:06:cb:a7:
         2a:06:c3:71:09:7e:c4:5f:9b:de:3b:33:60:24:4a:78:ea:44:
         98:71:5a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:25 2025 by rpki-client