Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/MeMrjWBTJgyoErrCL1_-fyU_Tps.roa
File:                     MeMrjWBTJgyoErrCL1_-fyU_Tps.roa (raw, json)
Hash identifier:          HcI/07pNhzyQY8LU6RdxHtr+PIzlknPqNz433c/T7rs=
Subject key identifier:   31:E3:2B:8D:60:53:26:0C:A8:12:BA:C2:2F:5F:FE:7F:25:3F:4E:9B
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       4D
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/MeMrjWBTJgyoErrCL1_-fyU_Tps.roa
Signing time:             Sat 31 Aug 2024 01:31:46 +0000
ROA not before:           Sat 31 Aug 2024 01:31:46 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        219.121.192.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 77 (0x4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:46 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=31E32B8D6053260CA812BAC22F5FFE7F253F4E9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:76:da:4c:dc:a4:f9:80:86:af:fc:76:2c:86:
                    d3:4f:40:b7:14:fb:59:77:ec:8e:8a:d0:ae:85:08:
                    2d:5e:0c:19:28:83:d4:e8:0a:c4:a6:ea:6f:f0:00:
                    86:8e:87:e9:5d:34:fd:06:1f:5e:d3:a1:76:c4:53:
                    03:51:13:60:5b:5c:05:d3:00:ee:5e:91:54:af:91:
                    79:4f:ff:1d:ad:51:0d:a3:20:0f:c7:6e:ea:a3:f1:
                    af:b2:c2:98:33:19:62:e7:02:76:2f:f4:6f:ae:0e:
                    2c:ce:af:b6:4b:e6:b1:5e:ea:5d:d3:c5:2a:f5:0e:
                    0f:06:a5:9e:cb:95:69:64:93:a9:f1:de:63:da:f0:
                    ea:3d:83:03:05:bb:2e:4d:fd:ba:c1:ce:3a:88:e0:
                    37:b0:c0:e0:31:d1:55:ad:b4:08:4f:38:4f:8a:3b:
                    d7:13:1c:9b:4c:db:de:3e:a1:91:8c:5b:70:80:74:
                    39:a3:61:a1:0d:c8:0b:ab:0d:a8:a4:14:97:89:74:
                    61:82:67:d0:f4:71:12:31:b3:f7:03:94:ff:7a:53:
                    b4:9d:cf:e5:a6:68:a6:81:5b:aa:df:52:fb:34:3b:
                    14:9f:69:0d:de:94:4d:2f:63:05:52:3a:71:ee:ed:
                    ed:e1:ec:ef:eb:9d:0d:94:1a:c3:31:fd:76:f8:a0:
                    2b:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:E3:2B:8D:60:53:26:0C:A8:12:BA:C2:2F:5F:FE:7F:25:3F:4E:9B
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/MeMrjWBTJgyoErrCL1_-fyU_Tps.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.121.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         66:d5:60:c6:d1:ae:fa:f6:c1:fe:22:06:10:bb:c0:9b:ab:ab:
         5c:c6:16:9c:da:bf:4c:06:cd:15:53:5f:b1:34:c7:1b:e8:04:
         29:d0:4e:17:08:5b:84:5f:1c:b4:a0:6d:43:2e:87:94:bf:3a:
         cb:5b:0a:e8:ac:7c:a6:37:95:90:76:96:7c:c0:3b:e4:65:d3:
         86:dc:bd:9e:40:32:64:cb:fa:7c:91:f0:f0:33:24:d7:c2:26:
         e7:01:67:47:5b:95:2e:8e:da:f9:85:17:74:05:59:37:80:b2:
         79:5d:26:5b:d5:86:b8:48:26:43:44:38:41:3d:7f:1b:41:e6:
         e5:0c:b7:e9:bf:1b:c0:7f:e4:b5:6a:42:aa:9c:0b:ba:39:89:
         fb:4b:ab:28:05:bc:95:3c:07:a9:17:a9:62:b6:ea:80:df:11:
         9f:fd:0e:e5:5b:be:90:e7:6b:3c:3a:c2:79:7c:8a:30:b5:35:
         cb:c4:45:1f:e6:00:9c:b9:b0:11:da:ea:bb:43:25:49:d8:23:
         c9:dc:69:e1:6a:3b:2b:c1:82:db:31:9f:0b:26:2a:b8:fc:43:
         d4:20:1a:ce:9a:79:95:b9:b6:b5:a4:f4:3a:0c:5a:60:43:65:
         f0:5c:56:43:e8:d0:3e:54:d9:14:fe:56:2d:d0:84:db:e4:d3:
         ab:d7:bc:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 17:40:21 2025 by rpki-client