Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/pZpnsN_OuoZPuN2Orr4dJ35rQQU.roa
File:                     pZpnsN_OuoZPuN2Orr4dJ35rQQU.roa (raw, json)
Hash identifier:          TKuCBZ6zD916hAnG+mDJnIEgBx+HfPRpkT7VGfMWUyQ=
Subject key identifier:   A5:9A:67:B0:DF:CE:BA:86:4F:B8:DD:8E:AE:BE:1D:27:7E:6B:41:05
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       53
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/pZpnsN_OuoZPuN2Orr4dJ35rQQU.roa
Signing time:             Tue 31 Dec 2024 01:28:44 +0000
ROA not before:           Tue 31 Dec 2024 01:28:44 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     23637
IP address blocks:        202.9.208.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Mon 14 Apr 2025 06:50:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 83 (0x53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Dec 31 01:28:44 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=A59A67B0DFCEBA864FB8DD8EAEBE1D277E6B4105
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:50:ed:87:ee:d3:bb:ee:4c:10:23:f1:50:b3:
                    41:df:2c:5f:00:74:b1:4d:2f:fc:e8:d3:8f:c9:19:
                    ac:ac:d9:f5:50:10:fa:40:2b:bf:1d:be:c2:89:01:
                    6e:ad:a1:69:b7:a5:e3:03:dd:a1:c2:92:b0:02:ac:
                    48:51:ff:7e:e6:1c:4b:7c:b0:da:5b:3b:4f:3c:a8:
                    96:d0:4b:30:fb:9e:f2:15:eb:45:ce:1c:18:f2:7a:
                    d0:09:43:5a:43:02:70:f7:d6:1c:04:76:f5:c1:32:
                    57:1b:45:0a:9a:74:e1:af:3a:fb:32:0b:c2:44:fa:
                    39:da:1b:e3:ff:05:18:ff:b4:87:85:b3:59:7c:04:
                    76:b4:52:e7:43:07:a9:fe:62:5c:37:83:c8:7e:f2:
                    e9:3c:b3:1f:ec:51:98:cb:8c:da:0c:36:22:ad:ba:
                    0b:c6:3a:53:34:f3:1f:cf:3f:e5:63:96:1e:82:e2:
                    a9:62:95:e0:19:67:1e:ef:d0:ce:da:62:50:e7:b0:
                    b4:d1:0a:cf:ea:76:ab:ba:70:4c:ba:fd:2a:06:3f:
                    75:9e:55:b3:ef:48:a6:fe:4b:59:da:4d:be:78:82:
                    1b:c6:60:fa:c8:69:00:13:3c:9e:82:01:d1:55:60:
                    9b:8f:0d:87:bc:b9:12:aa:89:ca:d8:7a:48:bc:32:
                    2b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:9A:67:B0:DF:CE:BA:86:4F:B8:DD:8E:AE:BE:1D:27:7E:6B:41:05
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/pZpnsN_OuoZPuN2Orr4dJ35rQQU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.208.0/23

    Signature Algorithm: sha256WithRSAEncryption
         37:60:48:51:05:c2:9a:40:82:03:3d:3e:b4:6a:86:5b:18:b1:
         f9:98:0c:64:7a:bb:5c:85:fc:3d:0e:d6:73:56:71:cf:d8:89:
         dc:f8:df:26:44:99:5e:1e:01:00:0f:8f:27:66:d8:c4:96:02:
         7b:3c:4a:f3:e9:4f:74:10:36:94:ab:e1:1a:ce:a3:4e:64:9a:
         9a:bd:25:1b:22:bf:8b:82:9a:33:4d:3d:e1:2e:5f:f1:6a:40:
         f9:92:42:75:51:0f:57:f3:31:30:d0:47:58:ef:9f:d0:e6:7c:
         98:b2:2b:3c:7d:23:62:7c:ea:8c:11:b5:9f:61:bc:e9:36:c8:
         4a:98:61:45:70:85:ef:18:75:98:f0:60:e9:50:1a:64:96:ec:
         e2:6c:1f:6c:36:b4:e4:41:5f:9d:c9:d9:39:35:6c:13:6f:59:
         d0:73:2e:ca:ea:30:48:da:c1:7b:a7:ab:56:40:69:25:89:75:
         be:92:15:b1:c3:c5:ca:9c:fe:b6:2b:77:43:65:03:d9:10:1b:
         98:ea:94:61:50:2a:04:df:87:32:21:fa:4d:23:65:53:f0:39:
         cc:2d:29:97:2c:9f:61:a9:92:d3:89:15:5b:b3:87:82:09:26:
         1e:05:ce:a4:e2:66:8a:6c:c8:fc:96:1f:58:92:ef:b7:58:f3:
         d6:c8:ef:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 7 08:11:59 2025 by rpki-client