Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/207/LIpbHVh3AAce5MtBwWxauFIUUHg.roa
File:                     LIpbHVh3AAce5MtBwWxauFIUUHg.roa (raw, json)
Hash identifier:          9pJwE3n2S1rUigH4Sxnv7rZ9owf/a2vlEQelCTm/JWY=
Subject key identifier:   2C:8A:5B:1D:58:77:00:07:1E:E4:CB:41:C1:6C:5A:B8:52:14:50:78
Certificate issuer:       /CN=67018B4DFE54BD644E000641A234B471DB20B892
Certificate serial:       97
Authority key identifier: 67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LIpbHVh3AAce5MtBwWxauFIUUHg.roa
Signing time:             Thu 31 Oct 2024 01:29:37 +0000
ROA not before:           Thu 31 Oct 2024 01:29:37 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     131976
IP address blocks:        113.192.20.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 151 (0x97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67018B4DFE54BD644E000641A234B471DB20B892
        Validity
            Not Before: Oct 31 01:29:37 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=2C8A5B1D587700071EE4CB41C16C5AB852145078
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:7d:e9:ee:ac:b4:44:65:e2:48:14:7b:81:9c:
                    2c:99:29:c2:5e:13:7e:9b:ef:33:1e:42:11:79:00:
                    73:1c:f1:33:dd:bf:77:94:8a:7c:39:d8:cc:f3:fe:
                    ad:fd:ee:87:96:ec:43:ea:71:7e:97:4b:93:f8:08:
                    b9:5b:a9:4e:12:87:8e:37:fa:bf:d7:99:6a:b3:d8:
                    f2:56:bc:d5:90:85:35:f3:04:91:b6:ca:16:32:ad:
                    aa:8f:4c:c0:fe:4d:df:a8:ea:c2:c4:18:79:8d:65:
                    06:ed:56:e2:ca:90:61:2a:8f:62:dc:bd:da:7a:84:
                    7a:03:0f:eb:78:66:39:80:54:21:d6:5c:9f:08:36:
                    91:ce:c8:4b:2c:26:70:5a:67:10:d4:2a:22:18:01:
                    bf:13:75:86:d7:e9:b8:70:28:a5:89:74:88:84:ff:
                    d8:6a:c4:92:40:7f:5f:92:87:90:c9:cd:72:42:40:
                    ff:57:df:46:c2:2d:3d:a6:e3:4e:18:e7:63:45:77:
                    19:a4:b2:a2:23:a2:0b:48:db:8f:5a:51:22:4f:60:
                    09:ee:85:0a:94:92:b7:3a:5f:21:b4:78:92:02:1f:
                    b7:b9:5f:4a:42:e6:3d:a3:81:79:25:c2:a2:95:11:
                    75:da:4f:10:64:06:03:36:2f:49:38:25:4e:0e:54:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:8A:5B:1D:58:77:00:07:1E:E4:CB:41:C1:6C:5A:B8:52:14:50:78
            X509v3 Authority Key Identifier:
                keyid:67:01:8B:4D:FE:54:BD:64:4E:00:06:41:A2:34:B4:71:DB:20:B8:92

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/ZwGLTf5UvWROAAZBojS0cdsguJI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ZwGLTf5UvWROAAZBojS0cdsguJI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/207/LIpbHVh3AAce5MtBwWxauFIUUHg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.192.20.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:4b:50:dc:ea:41:36:39:18:49:e0:02:fb:ef:7b:14:82:e0:
         4a:e9:2d:c2:7c:da:83:a5:16:85:f3:a3:c6:57:ca:75:d7:02:
         22:af:f4:b5:bc:e4:a1:e7:20:e4:0c:fa:e5:fb:af:f2:2a:3f:
         53:70:83:9f:1e:41:40:90:80:8d:44:67:34:1a:68:80:83:f7:
         c0:c6:47:5d:76:dd:58:08:ad:92:dd:9d:9e:b5:02:00:9f:7d:
         46:9f:db:3c:21:49:8b:19:fb:99:64:c5:3a:5a:bb:00:1a:8a:
         6c:9a:a1:98:b8:95:9a:af:f6:5f:c3:a3:37:58:4a:d4:d0:ca:
         4b:f2:e9:9e:dc:73:d2:f2:56:d9:2e:71:db:f3:eb:45:7f:71:
         c3:ec:e4:57:52:3d:c3:a3:6d:3d:4a:4c:57:ec:9b:39:66:72:
         df:52:28:9e:39:ae:53:84:b2:44:a5:04:6e:19:5f:7f:60:31:
         ec:44:18:f7:c5:93:a8:fb:19:2f:9b:3c:8d:da:31:16:f3:66:
         e5:f0:09:fa:7c:e7:74:9f:57:8e:95:6d:10:02:7e:8f:d0:7e:
         5e:04:c9:7e:9b:83:c1:70:42:35:65:1e:12:e1:36:38:c9:53:
         c3:94:4d:7c:8b:7a:df:68:c7:21:99:31:f2:3a:4d:3e:ad:c1:
         10:97:ba:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:33:06 2025 by rpki-client