Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/EV9I6ntGB69xZMYL0LxrEWMKlQE.roa
File:                     EV9I6ntGB69xZMYL0LxrEWMKlQE.roa (raw, json)
Hash identifier:          mNModUedaNSGj5WwU95rpADCofrrsMPYF9kYz04C2cw=
Subject key identifier:   11:5F:48:EA:7B:46:07:AF:71:64:C6:0B:D0:BC:6B:11:63:0A:95:01
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       52
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EV9I6ntGB69xZMYL0LxrEWMKlQE.roa
Signing time:             Thu 31 Oct 2024 01:28:43 +0000
ROA not before:           Thu 31 Oct 2024 01:28:43 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        119.245.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:43 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=115F48EA7B4607AF7164C60BD0BC6B11630A9501
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c7:e9:d1:85:4c:e4:32:1b:e0:57:cc:f2:8b:
                    7d:5b:af:3d:07:0b:90:2a:a9:75:6a:39:0e:1c:30:
                    c8:2a:fd:df:ec:a7:82:4d:e4:7a:c7:ec:8a:c7:38:
                    c6:18:73:5a:55:93:87:37:d5:a4:ac:31:ac:8c:5d:
                    fd:a0:62:19:6a:48:26:ed:fa:c8:4e:b2:54:dc:d6:
                    f5:3f:fd:4e:e8:f2:30:33:8a:d6:66:61:d2:0d:0c:
                    7a:3b:98:37:27:21:fe:1f:c6:aa:32:dd:82:6e:af:
                    ca:73:2d:16:65:18:80:aa:53:32:19:da:20:cf:9b:
                    2d:72:9e:53:c8:f7:00:2f:f2:e9:f7:a0:4e:97:db:
                    78:e7:6c:cf:3c:7b:d8:42:16:6e:7b:82:2b:e5:a6:
                    d9:e5:e5:6c:e8:cb:6f:e5:f7:c5:cb:cc:84:08:82:
                    b2:ec:c9:f5:6b:02:df:32:a0:51:36:7a:04:d5:5f:
                    6f:6e:73:d7:3e:e4:65:99:5b:e7:a9:de:9a:99:a8:
                    2b:1f:30:8e:c4:fb:92:68:38:b1:1c:c8:b0:c6:8c:
                    d8:9c:51:8d:5d:29:b0:56:43:ad:c3:2a:b7:7f:1d:
                    3b:d9:19:60:36:c4:cf:9e:c5:ab:5b:1a:37:c4:54:
                    0b:49:30:85:97:17:68:83:90:e4:4a:d3:db:2e:3c:
                    f4:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:5F:48:EA:7B:46:07:AF:71:64:C6:0B:D0:BC:6B:11:63:0A:95:01
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/EV9I6ntGB69xZMYL0LxrEWMKlQE.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.245.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         15:33:31:a2:07:89:41:4c:20:16:98:9a:a5:5e:a4:01:90:38:
         a1:cc:f7:68:30:db:9e:f9:10:c2:bd:52:a6:4f:d7:a9:c3:10:
         f6:e5:d2:b3:43:49:4a:a0:ae:46:cf:fb:4f:5a:23:ba:11:dc:
         84:f7:09:b2:bc:23:26:ec:f4:89:4c:d9:56:18:70:b5:86:aa:
         56:f6:43:c5:21:1d:57:3f:17:c0:19:d6:22:ca:fd:cb:13:58:
         25:1d:96:63:ea:2c:87:8b:cd:a7:7a:5d:48:bc:e7:56:ab:5e:
         12:34:06:c1:96:71:04:b8:73:72:21:5d:ae:1b:fb:44:24:e4:
         c4:6a:f4:81:e6:41:a0:28:eb:95:dc:29:fb:aa:e7:e2:d4:00:
         c8:ce:fa:fa:21:ef:dd:77:26:1d:7d:a4:e4:98:b9:1c:db:1a:
         0b:8f:59:b7:d2:33:72:48:a7:53:ec:6e:83:fd:8b:a1:57:fa:
         55:92:87:fd:27:ca:08:69:c6:40:38:2e:10:5b:8a:8f:fa:ff:
         9c:78:dd:d5:c7:89:23:e7:5e:d5:9c:97:c7:df:2a:68:cf:34:
         f1:53:f3:fd:bf:4c:e7:dc:3b:c7:75:3b:ae:ae:29:70:6c:97:
         8c:57:7e:ba:b0:75:8a:85:a6:a6:0f:cd:a1:a5:eb:d4:64:59:
         95:c7:a0:1e
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBUjANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEygwNkZB
NjYyMTk0RkNGMUVCOTgzQUI0NENDOTEzMDA0MTgwNzcwRDE4MB4XDTI0MTAzMTAx
Mjg0M1oXDTI1MTAxNTAxMzAwMlowMzExMC8GA1UEAxMoMTE1RjQ4RUE3QjQ2MDdB
RjcxNjRDNjBCRDBCQzZCMTE2MzBBOTUwMTCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALLH6dGFTOQyG+BXzPKLfVuvPQcLkCqpdWo5DhwwyCr93+yngk3k
esfsisc4xhhzWlWThzfVpKwxrIxd/aBiGWpIJu36yE6yVNzW9T/9TujyMDOK1mZh
0g0MejuYNych/h/GqjLdgm6vynMtFmUYgKpTMhnaIM+bLXKeU8j3AC/y6fegTpfb
eOdszzx72EIWbnuCK+Wm2eXlbOjLb+X3xcvMhAiCsuzJ9WsC3zKgUTZ6BNVfb25z
1z7kZZlb56nempmoKx8wjsT7kmg4sRzIsMaM2JxRjV0psFZDrcMqt38dO9kZYDbE
z57Fq1saN8RUC0kwhZcXaIOQ5ErT2y489JECAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBQRX0jqe0YHr3FkxgvQvGsRYwqVATAfBgNVHSMEGDAWgBQG+mYhlPzx65g6tEzJ
EwBBgHcNGDAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIzRFJnLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvQnZwbUlaVDg4ZXVZT3JSTXlSTUFRWUIz
RFJnLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L0VWOUk2bnRHQjY5eFpNWUwwTHhyRVdNS2xRRS5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwB39TANBgkqhkiG9w0BAQsFAAOCAQEAFTMxogeJQUwgFpiapV6kAZA4ocz3aDDb
nvkQwr1Spk/XqcMQ9uXSs0NJSqCuRs/7T1ojuhHchPcJsrwjJuz0iUzZVhhwtYaq
VvZDxSEdVz8XwBnWIsr9yxNYJR2WY+osh4vNp3pdSLznVqteEjQGwZZxBLhzciFd
rhv7RCTkxGr0geZBoCjrldwp+6rn4tQAyM76+iHv3XcmHX2k5Ji5HNsaC49Zt9Iz
ckinU+xug/2LoVf6VZKH/SfKCGnGQDguEFuKj/r/nHjd1ceJI+de1ZyXx98qaM80
8VPz/b9M59w7x3U7rq4pcGyXjFd+urB1ioWmpg/NoaXr1GRZlcegHg==
-----END CERTIFICATE-----
Generated at Sat Apr 5 17:41:57 2025 by rpki-client