Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/234/4zWCyY-o3sjwG-EghRO08J6cbl8.roa
File:                     4zWCyY-o3sjwG-EghRO08J6cbl8.roa (raw, json)
Hash identifier:          mjeAv+38tShrcw5QMzUb5cmGzMKpv0fRv6pnmX02DGg=
Subject key identifier:   E3:35:82:C9:8F:A8:DE:C8:F0:1B:E1:20:85:13:B4:F0:9E:9C:6E:5F
Certificate issuer:       /CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
Certificate serial:       A6
Authority key identifier: 50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4zWCyY-o3sjwG-EghRO08J6cbl8.roa
Signing time:             Sat 30 Nov 2024 01:31:22 +0000
ROA not before:           Sat 30 Nov 2024 01:31:22 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     9351
IP address blocks:        61.198.48.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 166 (0xa6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=500EF358BCBE14A358CA4EEE41B4E90DC923E9D2
        Validity
            Not Before: Nov 30 01:31:22 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=E33582C98FA8DEC8F01BE1208513B4F09E9C6E5F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2c:e8:49:da:8e:77:f8:a6:e0:15:a3:a9:a4:
                    e6:0f:28:e6:f5:8f:53:04:43:83:04:31:30:e8:a1:
                    fa:2f:8b:50:dd:30:68:61:17:28:49:84:e9:6b:65:
                    7d:e6:a4:1d:10:94:b2:52:1f:11:4b:a1:2b:73:ff:
                    52:54:08:42:ec:a3:b5:50:80:48:5a:04:07:6f:69:
                    d0:13:7a:51:a8:77:0e:e7:0f:d4:82:1d:ea:fe:67:
                    f8:d6:c6:5a:7c:f7:99:fb:2b:c7:ee:4d:5c:ae:df:
                    94:a4:a9:9c:54:5c:d7:39:fb:c8:d2:ce:0b:03:28:
                    68:00:fa:e5:4c:64:32:a7:45:cb:04:ec:6a:1f:02:
                    09:bd:5f:a8:d1:c1:3f:a2:6f:ce:d7:5f:68:76:e0:
                    a1:d9:3a:87:e8:40:b6:34:80:77:cc:60:1d:01:80:
                    e7:b6:48:c8:0d:be:bd:fb:0a:dd:cf:ac:1d:52:e8:
                    b2:bd:55:11:52:0b:f1:cb:32:cc:36:20:35:2b:e1:
                    4d:82:ce:8d:d2:e1:c5:b0:14:52:b0:71:dc:87:e9:
                    59:25:9e:29:f0:fb:0e:13:40:43:d1:b5:5b:6c:7f:
                    87:08:e9:27:b9:1f:b4:d6:86:e8:aa:bb:6b:50:4b:
                    d9:29:a3:c9:9f:f5:fb:00:1f:52:6f:0c:54:d0:45:
                    ac:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:35:82:C9:8F:A8:DE:C8:F0:1B:E1:20:85:13:B4:F0:9E:9C:6E:5F
            X509v3 Authority Key Identifier:
                keyid:50:0E:F3:58:BC:BE:14:A3:58:CA:4E:EE:41:B4:E9:0D:C9:23:E9:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/UA7zWLy-FKNYyk7uQbTpDckj6dI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/UA7zWLy-FKNYyk7uQbTpDckj6dI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/234/4zWCyY-o3sjwG-EghRO08J6cbl8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.198.48.0/20

    Signature Algorithm: sha256WithRSAEncryption
         c7:39:3a:ee:4e:f1:dd:53:7e:3f:8c:f1:cf:c0:ab:8f:da:9c:
         bc:1e:8a:4f:d4:9b:f6:2f:3d:94:0e:6c:90:3c:2c:e9:5e:5d:
         36:c0:66:92:5f:1f:92:53:5a:99:67:b6:6c:7c:55:4a:18:6e:
         16:58:c0:4b:bf:49:7b:55:26:f6:77:73:c0:58:1d:59:d0:6d:
         da:ee:82:9a:9f:15:fe:12:b1:d4:5a:56:e8:c2:c4:f7:d2:fc:
         34:0b:04:41:af:c8:4a:c0:8e:c3:7a:97:98:71:fa:f5:f5:28:
         61:25:79:a2:47:ca:8c:10:e3:62:86:08:c3:07:5f:a6:93:ec:
         b3:09:08:67:95:77:9f:b5:78:2d:07:d6:cc:44:ac:12:10:39:
         8c:4e:bb:dd:a8:62:4c:dc:5b:14:4a:ca:a3:2c:75:d7:f4:89:
         76:9a:c6:64:6a:a5:50:4d:85:5a:c6:67:dc:d5:7f:d4:2c:23:
         a5:f0:9d:59:4b:c2:f6:60:3d:57:81:58:db:d9:e3:ba:cf:6a:
         de:34:ef:ce:e4:a4:36:d0:47:a2:5d:1a:fd:72:46:8b:39:e6:
         c7:83:e4:d6:8d:fd:a6:88:fe:28:05:1d:45:c7:f7:3c:18:fb:
         8a:9b:24:29:b6:bf:45:59:60:a1:6f:06:0a:ff:35:f6:c1:ef:
         35:3b:27:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Apr 6 01:44:23 2025 by rpki-client