Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/EHnLP4oUaGsGwv-cjLwvzdNG1YQ.roa
File:                     EHnLP4oUaGsGwv-cjLwvzdNG1YQ.roa (raw, json)
Hash identifier:          FmGmij3nRY+0hiputN08aPBPFrZaj6aPRvhayZwZtUI=
Subject key identifier:   10:79:CB:3F:8A:14:68:6B:06:C2:FF:9C:8C:BC:2F:CD:D3:46:D5:84
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       61
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EHnLP4oUaGsGwv-cjLwvzdNG1YQ.roa
Signing time:             Tue 31 Dec 2024 01:31:15 +0000
ROA not before:           Tue 31 Dec 2024 01:31:15 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        210.136.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 25 Apr 2025 03:13:25 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 97 (0x61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec 31 01:31:15 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=1079CB3F8A14686B06C2FF9C8CBC2FCDD346D584
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:99:f2:55:b8:f3:d3:8e:50:7b:10:76:88:ed:
                    7d:44:5a:e6:65:10:ce:06:33:31:25:cd:b4:73:c1:
                    aa:63:48:d1:ab:3b:0a:a8:c8:36:34:3f:48:7d:af:
                    62:94:6e:e5:f2:a4:01:cb:65:1a:9d:fd:33:c2:c8:
                    d7:6f:81:55:ea:5b:6d:e8:49:56:74:0d:12:0d:ec:
                    54:53:ef:1c:09:c3:6b:80:ed:74:94:73:d7:46:9b:
                    30:b0:0a:a3:f5:f5:96:64:60:43:34:22:f0:c2:43:
                    05:c7:e7:eb:ab:00:d1:c9:65:81:62:83:f9:e5:97:
                    3d:8d:7b:bf:0f:fb:d4:61:ff:b3:ed:3d:4c:33:d0:
                    68:98:b2:53:90:78:d3:03:5c:67:f7:8c:6c:e4:db:
                    56:0f:6c:84:ac:e5:e8:e8:11:ac:53:c9:cf:5e:ff:
                    c3:40:97:68:a6:fc:a4:df:13:68:28:06:e9:b0:da:
                    02:46:72:84:19:47:a5:69:31:8e:71:c1:a8:da:f2:
                    18:36:58:ae:31:1e:f0:57:a8:ba:e7:58:84:b1:81:
                    f9:8c:f6:1c:8d:4f:a2:29:a0:23:48:31:46:8e:53:
                    e2:ac:08:1a:c8:fb:27:e5:6f:46:dc:79:5c:a0:ce:
                    87:9e:4e:39:44:5a:07:ad:20:cd:fe:ff:10:a6:7d:
                    7a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:79:CB:3F:8A:14:68:6B:06:C2:FF:9C:8C:BC:2F:CD:D3:46:D5:84
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EHnLP4oUaGsGwv-cjLwvzdNG1YQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.136.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         0f:cf:ef:fa:ab:a9:55:8c:60:95:d6:7f:81:eb:d5:8a:c7:c5:
         07:a7:80:22:6d:a2:06:bf:9a:0e:4e:3b:11:67:f8:2d:23:3d:
         2e:db:fe:9b:a4:de:33:11:04:c4:67:6b:6a:0d:87:c1:33:f1:
         b6:30:4d:52:3d:10:15:78:67:39:17:c1:9e:b6:38:6f:6f:01:
         2e:2c:a4:54:3c:d1:2b:6f:92:30:35:da:1a:42:5c:aa:73:29:
         97:29:13:16:bc:ab:e9:f0:19:f7:63:0c:fa:02:63:b0:83:91:
         c1:20:6a:4d:fe:10:9b:c2:91:d3:51:1a:aa:50:79:86:86:60:
         5d:31:71:30:81:68:44:ff:fe:87:de:ac:9d:62:70:27:a4:69:
         2b:74:19:f2:23:1f:e6:1f:54:2c:7e:a2:8f:65:4e:2c:56:fb:
         85:ab:78:d6:c0:a7:13:c9:26:cf:44:51:60:db:4a:5d:7d:0c:
         0c:db:6f:73:54:e3:ed:72:56:97:3f:84:0f:a8:24:cb:1c:ed:
         67:30:dd:7b:4a:58:11:e6:78:56:1c:73:4d:bb:19:d8:38:ae:
         c0:bd:56:11:65:35:f5:5d:6d:8a:01:35:12:e3:fe:c9:a9:0c:
         fb:12:f9:b2:3b:03:11:58:30:53:f4:bc:6a:65:31:39:48:0f:
         10:a3:d4:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 18 06:35:37 2025 by rpki-client