Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/MIbpeY5Y_fdCI2-O2Y2ik3rXSvs.roa
File:                     MIbpeY5Y_fdCI2-O2Y2ik3rXSvs.roa (raw, json)
Hash identifier:          aLmqfcKu7JlWR0zNs0v65IDtkKS4culN6WIX53LDcFk=
Subject key identifier:   30:86:E9:79:8E:58:FD:F7:42:23:6F:8E:D9:8D:A2:93:7A:D7:4A:FB
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       25
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/MIbpeY5Y_fdCI2-O2Y2ik3rXSvs.roa
Signing time:             Sat 03 Aug 2024 02:01:46 +0000
ROA not before:           Sat 03 Aug 2024 02:01:46 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        118.82.64.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 37 (0x25)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:46 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=3086E9798E58FDF742236F8ED98DA2937AD74AFB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:40:75:02:c6:e1:d5:0e:52:9b:c1:b3:71:69:
                    2d:4a:a0:bc:59:38:ad:0f:72:49:7f:24:a9:9d:96:
                    a5:56:c9:d6:21:4c:f9:a5:02:42:4a:6b:8b:f9:5d:
                    1d:97:3a:4c:4d:58:35:fe:32:81:12:b1:0c:ac:ea:
                    e3:5d:e9:53:ad:3f:76:dc:56:4a:e8:05:90:20:dd:
                    eb:a1:b7:f7:38:d3:80:2b:5d:03:78:3d:9f:70:0f:
                    9b:f6:9d:ff:aa:34:82:54:74:d5:02:fd:14:55:13:
                    39:c1:8a:17:1d:64:83:d7:82:a6:e2:66:34:b5:d3:
                    a5:77:ec:0e:72:6b:ed:3d:2a:d4:fe:73:2d:5f:41:
                    a7:bc:23:7f:ab:92:e0:bb:d8:76:16:8c:ec:22:08:
                    83:c3:ff:df:da:ee:89:b0:59:38:9b:ed:c1:c2:bd:
                    2f:15:0a:0f:fe:0c:17:f4:14:f0:2f:b9:b2:a8:bd:
                    fa:91:2f:1e:fd:cf:65:cc:58:6f:13:f1:11:55:54:
                    01:97:ea:e5:24:b5:e6:2d:48:cc:16:06:2b:82:ff:
                    64:7d:bd:42:22:00:42:72:19:65:6d:0e:fe:fd:77:
                    4a:f3:b6:5d:fd:77:5f:41:8a:d7:0c:43:6b:0f:f8:
                    9c:69:02:31:32:8a:b2:92:94:91:a3:50:cc:50:c3:
                    0b:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:86:E9:79:8E:58:FD:F7:42:23:6F:8E:D9:8D:A2:93:7A:D7:4A:FB
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/MIbpeY5Y_fdCI2-O2Y2ik3rXSvs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  118.82.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         c0:65:71:d1:9a:61:c2:0e:c1:51:08:e3:82:30:e0:e0:ed:b7:
         85:6f:7e:c4:59:7f:5d:bc:13:1d:24:d9:e4:1e:bf:b3:64:94:
         b1:f2:c7:8c:60:5c:fd:3c:1b:ce:f9:ef:c9:71:27:99:61:9b:
         56:b3:94:83:e2:8c:39:dd:00:b3:91:93:ee:5e:0a:d0:51:85:
         5d:9e:78:b1:bd:84:49:98:10:c9:f4:78:28:3d:49:8d:30:2b:
         4f:2a:c9:37:d9:07:04:a9:21:09:85:92:17:dd:35:00:d1:a8:
         2f:95:12:60:f0:e2:23:87:70:bd:95:26:35:f8:68:91:80:1b:
         3d:c9:ae:0f:03:94:e6:ac:b9:fb:9f:be:ab:18:33:4b:a4:0a:
         ef:4a:58:e6:32:ff:cc:e3:d1:75:91:98:9a:7d:a7:8e:91:1b:
         cd:22:06:66:92:7a:09:fe:f1:07:f1:d4:a9:cf:a0:f6:03:75:
         a7:36:c8:2c:f9:28:41:ac:43:32:2c:36:75:61:ab:54:52:4c:
         64:72:1b:1d:b1:0c:2c:63:36:6b:e3:73:b7:24:75:7e:93:4c:
         25:0f:d0:2e:84:9a:24:49:10:0a:e7:3f:5b:cf:14:0e:b3:6f:
         95:44:16:56:2f:fa:3f:7f:a9:18:0d:21:f6:a6:2a:6c:43:45:
         12:24:98:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:07:19 2025 by rpki-client