Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Wl4Ww1RmYcrZXWo1dXGus6qN6Co.roa
File:                     Wl4Ww1RmYcrZXWo1dXGus6qN6Co.roa (raw, json)
Hash identifier:          MjIXw1HeYGpGP2p7kpGdnCBqLBUDY7spNBesqtiakyE=
Subject key identifier:   5A:5E:16:C3:54:66:61:CA:D9:5D:6A:35:75:71:AE:B3:AA:8D:E8:2A
Certificate issuer:       /CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
Certificate serial:       73
Authority key identifier: C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Wl4Ww1RmYcrZXWo1dXGus6qN6Co.roa
Signing time:             Thu 31 Oct 2024 01:29:42 +0000
ROA not before:           Thu 31 Oct 2024 01:29:42 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7521
IP address blocks:        115.69.237.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 115 (0x73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C3A03D286196CB3388028B4047BE4F1F9B0FEBAC
        Validity
            Not Before: Oct 31 01:29:42 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=5A5E16C3546661CAD95D6A357571AEB3AA8DE82A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:94:af:99:1e:3d:f9:99:3e:7f:51:21:8b:63:
                    cc:5e:dd:33:19:6a:e3:3d:ff:88:57:71:f6:0b:80:
                    6b:56:0c:a5:79:4c:bd:65:72:a1:45:11:ae:99:9b:
                    82:6a:7a:e9:ad:dc:65:ce:c4:21:4c:06:a7:3c:44:
                    99:0f:1e:9b:fd:9a:cb:a1:01:9e:f8:e0:70:73:a1:
                    4c:2f:cf:5e:dd:5f:56:3b:4a:be:46:e2:2f:e9:70:
                    02:35:a3:3f:d0:97:cc:1d:b8:d7:48:ea:87:a9:e3:
                    f4:06:c0:ff:e2:0e:40:06:e1:10:c4:bd:4f:e8:59:
                    b0:d5:54:cd:09:e2:37:86:2d:7d:6b:13:35:7b:11:
                    f2:b2:f3:ce:55:60:14:17:3d:34:c4:2d:b4:78:e6:
                    ff:6a:e4:11:15:d2:18:b2:92:37:cf:ea:c9:c1:28:
                    58:3a:70:96:52:4a:27:16:bb:63:b1:87:dc:a2:a4:
                    c1:95:07:b2:b7:51:4c:87:ab:10:6f:8c:10:d4:12:
                    85:d4:df:91:81:0a:b8:63:70:ea:be:f9:3b:f7:97:
                    7c:f4:0a:e2:de:fe:4f:dd:83:63:cc:c2:b1:42:63:
                    5e:85:fc:a1:ee:ee:02:f2:de:7e:c1:fd:82:34:d2:
                    39:3b:ff:91:37:8e:9b:be:fa:8e:d7:3c:02:f0:39:
                    66:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:5E:16:C3:54:66:61:CA:D9:5D:6A:35:75:71:AE:B3:AA:8D:E8:2A
            X509v3 Authority Key Identifier:
                keyid:C3:A0:3D:28:61:96:CB:33:88:02:8B:40:47:BE:4F:1F:9B:0F:EB:AC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/w6A9KGGWyzOIAotAR75PH5sP66w.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/w6A9KGGWyzOIAotAR75PH5sP66w.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10207/Wl4Ww1RmYcrZXWo1dXGus6qN6Co.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  115.69.237.0/24

    Signature Algorithm: sha256WithRSAEncryption
         21:a3:30:23:be:53:2d:fb:f1:9c:48:bb:b7:ae:b6:c8:0e:c5:
         aa:7b:9f:19:7c:6c:0d:72:53:04:01:b8:5c:11:c8:8d:2a:7a:
         1b:50:ef:5d:a8:43:68:6a:4f:76:23:f1:c2:a7:bb:2c:f5:50:
         45:07:1f:04:28:2a:2d:7a:87:bb:26:6e:28:68:ce:a0:2c:76:
         46:dd:44:47:ba:b2:aa:ba:91:59:c8:59:14:b2:f1:0a:65:ca:
         15:bd:22:fc:2e:df:85:f5:64:e8:57:59:31:1a:5c:0b:64:bf:
         8c:cb:68:16:e5:c0:98:70:29:b7:1f:b6:0c:dc:f1:1d:9e:19:
         06:ea:58:9f:5d:24:8e:4d:20:60:de:3b:19:32:e0:83:01:0e:
         3a:a6:6b:46:58:27:7a:62:e4:88:c3:1a:99:74:8c:fe:e8:0e:
         d1:0b:6a:d2:df:c9:70:fa:44:a9:93:0b:d3:28:ff:35:81:8d:
         1d:4a:8a:31:3e:12:0c:1b:43:ae:50:e6:9c:d8:24:8f:d4:fc:
         f6:5e:08:84:91:90:61:2b:08:64:dd:af:8a:96:2c:fe:59:d7:
         8a:81:95:7f:09:f4:8e:0a:f8:31:ed:c0:8c:67:6b:a5:85:ec:
         41:7b:87:dc:5f:43:93:54:1e:38:6a:f2:61:cc:94:df:38:56:
         9d:a1:70:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:03 2025 by rpki-client