Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/984/lWQMoo8_Fl80lduskmkRdGhKBZw.roa
File:                     lWQMoo8_Fl80lduskmkRdGhKBZw.roa (raw, json)
Hash identifier:          +FyQMOlIPb5JyxBt3BYePtx7/i90CqgJLjztjX9Zck0=
Subject key identifier:   95:64:0C:A2:8F:3F:16:5F:34:95:DB:AC:92:69:11:74:68:4A:05:9C
Certificate issuer:       /CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
Certificate serial:       1E
Authority key identifier: 07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/lWQMoo8_Fl80lduskmkRdGhKBZw.roa
Signing time:             Wed 31 Jul 2024 01:29:51 +0000
ROA not before:           Wed 31 Jul 2024 01:29:51 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     45677
IP address blocks:        192.92.248.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Sat 12 Apr 2025 07:53:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 30 (0x1e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07192C8FA38FFFCDB1CF5024ABCAD2220DF7AE15
        Validity
            Not Before: Jul 31 01:29:51 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=95640CA28F3F165F3495DBAC92691174684A059C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:ac:33:6a:55:e9:f4:24:ba:f5:e8:19:fc:4e:
                    d3:45:e5:ee:e5:d8:24:a0:84:4b:7b:db:63:5f:ce:
                    74:40:a4:56:01:4d:4d:5d:43:99:85:8e:4f:32:e9:
                    48:56:9a:c1:67:59:04:b4:6d:4f:42:0e:59:c4:9e:
                    96:48:fb:23:02:69:d7:c0:b5:64:a5:09:44:a4:4c:
                    21:cc:bd:30:79:df:9b:b0:38:1a:8b:9c:2a:4d:70:
                    85:9c:84:aa:a2:53:8c:46:a3:05:3f:51:29:6f:a7:
                    01:96:e1:45:c9:9b:99:93:bd:3c:a9:e1:a7:f3:b9:
                    9a:69:23:c8:26:16:53:73:c7:d6:d5:ef:1c:4e:59:
                    49:6b:c4:bc:74:18:6b:05:e6:01:0b:dc:d7:39:6f:
                    35:47:6a:07:23:e7:e6:ee:32:b2:f2:be:eb:5b:2a:
                    03:4d:2f:dc:a1:56:f0:2d:e8:5a:8d:ab:77:e1:8d:
                    39:34:a9:35:23:20:66:b8:d2:8d:a0:f5:2d:f4:00:
                    4c:5e:18:9b:55:1f:bc:71:e5:7e:56:c3:b5:5b:5c:
                    13:f2:9a:54:a8:b0:58:c1:40:55:f0:cd:ab:f4:63:
                    bd:f3:a5:dd:80:97:ad:89:2c:2a:1c:05:cf:44:fa:
                    9b:99:c2:f6:85:85:14:c7:48:18:6f:68:9c:f6:3d:
                    91:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:64:0C:A2:8F:3F:16:5F:34:95:DB:AC:92:69:11:74:68:4A:05:9C
            X509v3 Authority Key Identifier:
                keyid:07:19:2C:8F:A3:8F:FF:CD:B1:CF:50:24:AB:CA:D2:22:0D:F7:AE:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/Bxksj6OP_82xz1Akq8rSIg33rhU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Bxksj6OP_82xz1Akq8rSIg33rhU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/984/lWQMoo8_Fl80lduskmkRdGhKBZw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.92.248.0/21

    Signature Algorithm: sha256WithRSAEncryption
         36:74:a6:b8:6d:0a:82:e9:18:46:43:1e:08:10:14:bf:80:6f:
         6a:6b:25:7a:b5:d1:0a:51:48:a8:19:e0:16:83:1e:19:68:37:
         7f:a5:fd:98:ef:dc:09:77:a0:f0:94:6d:a0:f6:b7:68:e6:be:
         c4:88:dd:29:3f:94:8f:5a:ea:97:d6:8d:47:56:2f:d3:2a:af:
         b4:59:eb:88:e7:bb:01:f8:10:29:8b:29:bf:d8:2f:5f:69:13:
         80:12:4d:e5:87:58:0a:ad:73:1c:1a:5e:2e:cb:8e:6d:e5:87:
         af:b8:9a:26:e3:68:32:d4:95:fd:a7:b2:fc:07:54:6e:27:bc:
         64:85:9a:e6:3a:dd:0d:06:fc:af:d4:80:04:e6:37:81:91:c4:
         3b:41:2d:47:59:c5:1f:c2:43:8d:00:dd:eb:f7:54:51:3f:9d:
         f4:7a:ec:04:46:d5:49:7d:5e:88:c4:46:1b:5f:2f:c2:cc:73:
         b3:09:66:d6:a1:f4:3e:35:7b:0e:86:79:0f:8e:eb:2c:bc:95:
         c3:36:08:55:4b:20:8e:38:cc:2f:ba:00:16:eb:ce:49:6c:03:
         3f:be:d3:c9:73:89:5f:2d:42:d0:1d:05:f4:be:71:15:da:8a:
         03:12:17:bc:74:5b:eb:39:69:bd:55:45:b7:01:db:3e:5b:de:
         58:09:19:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 23:09:31 2025 by rpki-client