Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xF7xIpjse5Pb7i2N_R2cT3J5lUc.roa
File:                     xF7xIpjse5Pb7i2N_R2cT3J5lUc.roa (raw, json)
Hash identifier:          EFbdCQZDdPAPBY6iaLShqYQLFKAEYZNb/XZFpe6AeME=
Subject key identifier:   C4:5E:F1:22:98:EC:7B:93:DB:EE:2D:8D:FD:1D:9C:4F:72:79:95:47
Certificate issuer:       /CN=36DA30F686577D6576F647B295455535835130C3
Certificate serial:       0C
Authority key identifier: 36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xF7xIpjse5Pb7i2N_R2cT3J5lUc.roa
Signing time:             Fri 27 Sep 2024 00:55:44 +0000
ROA not before:           Fri 27 Sep 2024 00:55:44 +0000
ROA not after:            Fri 26 Sep 2025 07:28:48 +0000
asID:                     24287
IP address blocks:        192.50.12.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12 (0xc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=36DA30F686577D6576F647B295455535835130C3
        Validity
            Not Before: Sep 27 00:55:44 2024 GMT
            Not After : Sep 26 07:28:48 2025 GMT
        Subject: CN=C45EF12298EC7B93DBEE2D8DFD1D9C4F72799547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:4b:11:6e:f0:9c:f0:a0:0e:d2:13:bd:c6:bc:
                    eb:c5:35:e1:09:3d:43:a3:53:c1:dd:51:00:0d:18:
                    72:d7:15:e2:ca:1a:d1:f0:63:c0:35:bc:51:95:a8:
                    53:31:06:19:81:3e:aa:72:91:8c:bb:f2:5c:a5:5e:
                    05:29:6f:b4:30:0f:f7:d1:c8:47:db:11:a1:15:28:
                    b4:0a:6e:c5:37:23:26:ea:96:14:25:51:11:4a:f9:
                    55:43:b5:91:a1:ea:80:60:2b:b8:92:1a:2f:de:71:
                    5c:49:dd:e4:70:df:78:7c:4e:c1:46:84:ec:89:48:
                    dc:7b:24:10:29:87:fa:9c:34:6d:0e:0b:fb:cf:13:
                    c7:b5:d0:3a:2e:8f:d5:59:6b:0b:7c:9d:d6:0e:66:
                    6a:71:e2:7c:1f:39:a2:10:8d:65:29:8a:35:86:31:
                    80:f4:0b:2b:f1:23:eb:f3:79:32:23:37:a0:67:d0:
                    7c:42:d0:d9:5a:ca:93:89:75:8e:2d:5d:65:17:66:
                    69:2f:6e:3c:90:e1:9e:a8:f4:18:cb:c3:b8:64:50:
                    34:1e:40:d2:47:2b:04:a5:ad:1d:49:b1:98:e6:dd:
                    eb:bd:89:f5:ab:a2:84:9c:06:a5:dc:49:1e:3d:69:
                    db:c8:b9:40:0c:71:2d:6c:b7:19:dc:11:f9:30:9d:
                    5a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:5E:F1:22:98:EC:7B:93:DB:EE:2D:8D:FD:1D:9C:4F:72:79:95:47
            X509v3 Authority Key Identifier:
                keyid:36:DA:30:F6:86:57:7D:65:76:F6:47:B2:95:45:55:35:83:51:30:C3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/Ntow9oZXfWV29keylUVVNYNRMMM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ntow9oZXfWV29keylUVVNYNRMMM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2166/xF7xIpjse5Pb7i2N_R2cT3J5lUc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.50.12.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:91:c6:09:2c:b1:45:9e:df:7b:ad:2f:31:27:6d:cf:25:ae:
         43:2a:69:7a:33:56:19:e1:ce:51:44:53:98:54:d5:7c:bc:e4:
         55:62:fa:e4:8f:26:6c:3a:08:9e:60:56:59:85:de:03:de:80:
         62:4c:0b:92:1e:08:70:93:0e:d9:c6:f8:18:66:cb:e0:04:1b:
         48:7f:4b:63:22:86:89:24:0c:58:15:1d:1b:07:23:52:d8:67:
         10:ef:d4:5c:40:76:cf:e9:73:98:5b:22:13:dc:82:79:e1:5e:
         9c:94:2c:73:89:bf:fc:8b:17:ab:2a:5b:39:c4:2c:c8:94:2b:
         f6:d6:c7:d3:d6:19:4e:ff:d2:72:d6:d5:52:dc:a0:b8:77:8a:
         3d:10:05:87:04:6e:5c:a5:af:86:ed:da:4c:0f:af:a7:de:40:
         46:a3:f5:bb:cd:5e:43:78:8f:cc:02:23:79:50:9a:8a:85:53:
         6c:16:49:73:70:c9:73:e1:5c:54:bd:83:f5:45:8d:4a:79:7a:
         04:8e:6e:29:60:1a:0d:4e:9f:02:32:87:d0:8f:26:2e:e4:32:
         b6:08:a7:ee:ef:f4:0f:5e:07:52:87:60:6d:f1:12:3f:ce:30:
         a6:d5:7e:77:7c:c7:65:6b:0b:62:a7:45:b4:ac:d3:33:64:b0:
         e2:39:01:d2
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgIBDDANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygzNkRB
MzBGNjg2NTc3RDY1NzZGNjQ3QjI5NTQ1NTUzNTgzNTEzMEMzMB4XDTI0MDkyNzAw
NTU0NFoXDTI1MDkyNjA3Mjg0OFowMzExMC8GA1UEAxMoQzQ1RUYxMjI5OEVDN0I5
M0RCRUUyRDhERkQxRDlDNEY3Mjc5OTU0NzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBAOVLEW7wnPCgDtITvca868U14Qk9Q6NTwd1RAA0YctcV4soa0fBj
wDW8UZWoUzEGGYE+qnKRjLvyXKVeBSlvtDAP99HIR9sRoRUotApuxTcjJuqWFCVR
EUr5VUO1kaHqgGAruJIaL95xXEnd5HDfeHxOwUaE7IlI3HskECmH+pw0bQ4L+88T
x7XQOi6P1VlrC3yd1g5manHifB85ohCNZSmKNYYxgPQLK/Ej6/N5MiM3oGfQfELQ
2VrKk4l1ji1dZRdmaS9uPJDhnqj0GMvDuGRQNB5A0kcrBKWtHUmxmObd672J9aui
hJwGpdxJHj1p28i5QAxxLWy3GdwR+TCdWm0CAwEAAaOCAiYwggIiMB0GA1UdDgQW
BBTEXvEimOx7k9vuLY39HZxPcnmVRzAfBgNVHSMEGDAWgBQ22jD2hld9ZXb2R7KV
RVU1g1EwwzAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGcGA1UdHwRgMF4wXKBa
oFiGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjE2Ni9OdG93OW9aWGZXVjI5a2V5bFVWVk5ZTlJNTU0uY3JsMG0GCCsG
AQUFBwEBBGEwXzBdBggrBgEFBQcwAoZRcnN5bmM6Ly9ycGtpLXJlcG9zaXRvcnku
bmljLmFkLmpwL2FwL0E5MUE3MzgxMDAwMC9OdG93OW9aWGZXVjI5a2V5bFVWVk5Z
TlJNTU0uY2VyMA4GA1UdDwEB/wQEAwIHgDCBvAYIKwYBBQUHAQsEga8wgawwYgYI
KwYBBQUHMAuGVnJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9B
OTFBNzM4MTAwMDAvMjE2Ni94Rjd4SXBqc2U1UGI3aTJOX1IyY1QzSjVsVWMucm9h
MEYGCCsGAQUFBzANhjpodHRwczovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAv
cnJkcC9hcC9ub3RpZmljYXRpb24ueG1sMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIA
ATAGAwQAwDIMMA0GCSqGSIb3DQEBCwUAA4IBAQAlkcYJLLFFnt97rS8xJ23PJa5D
Kml6M1YZ4c5RRFOYVNV8vORVYvrkjyZsOgieYFZZhd4D3oBiTAuSHghwkw7ZxvgY
ZsvgBBtIf0tjIoaJJAxYFR0bByNS2GcQ79RcQHbP6XOYWyIT3IJ54V6clCxzib/8
ixerKls5xCzIlCv21sfT1hlO/9Jy1tVS3KC4d4o9EAWHBG5cpa+G7dpMD6+n3kBG
o/W7zV5DeI/MAiN5UJqKhVNsFklzcMlz4VxUvYP1RY1KeXoEjm4pYBoNTp8CMofQ
jyYu5DK2CKfu7/QPXgdSh2Bt8RI/zjCm1X53fMdlawtip0W0rNMzZLDiOQHS
-----END CERTIFICATE-----
Generated at Sun Apr 6 01:36:58 2025 by rpki-client