Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/90ljwsisYsG79K5zngMdRHm44uA.roa
File:                     90ljwsisYsG79K5zngMdRHm44uA.roa (raw, json)
Hash identifier:          3pYZtpXlj2wyP/4dQyOlXoII3/ir0I4wvVEXTGmGBqI=
Subject key identifier:   F7:49:63:C2:C8:AC:62:C1:BB:F4:AE:73:9E:03:1D:44:79:B8:E2:E0
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0203
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/90ljwsisYsG79K5zngMdRHm44uA.roa
Signing time:             Mon 30 Sep 2024 01:29:57 +0000
ROA not before:           Mon 30 Sep 2024 01:29:57 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.66.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 515 (0x203)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:57 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=F74963C2C8AC62C1BBF4AE739E031D4479B8E2E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:cc:b3:a0:54:9d:a8:95:91:72:b9:23:d4:d7:
                    f7:69:39:0b:50:35:3a:f1:41:eb:79:97:73:ab:29:
                    cc:ac:cf:7e:8a:ad:4f:df:08:90:4f:bc:a0:ea:cd:
                    4b:4d:80:7d:93:da:90:86:c8:29:d7:c8:a8:05:db:
                    01:25:c1:86:1d:74:60:fc:ea:38:4d:bc:df:64:49:
                    23:8e:7f:25:3c:f0:fb:d9:27:1b:dc:d3:40:67:ce:
                    f1:65:66:f1:44:7c:fb:16:26:a8:08:03:c5:e9:6c:
                    5f:e9:46:69:53:50:6a:a7:7e:7b:a8:a0:1d:26:5b:
                    9a:31:b3:35:61:4a:1f:73:fb:40:bc:09:a8:cf:94:
                    ed:75:ea:e9:c0:ad:c5:69:97:c4:d0:5b:fc:18:a4:
                    ff:7d:a3:3f:1f:5c:06:2c:5a:66:b4:36:78:79:da:
                    4e:48:63:c7:7b:20:2d:02:d5:9e:2b:d5:02:1e:e0:
                    d3:d8:65:2f:d2:86:e9:42:e2:1a:23:11:67:d8:cd:
                    f5:14:95:98:b7:48:8e:de:92:34:32:8f:89:5c:7f:
                    c5:07:29:15:92:a6:c5:d2:2e:06:31:06:9c:49:fd:
                    a4:7c:8a:32:af:a8:8a:56:21:f8:64:09:cb:2a:76:
                    29:fd:c9:9a:cc:f8:f2:9b:aa:37:94:3c:73:3e:8a:
                    12:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:49:63:C2:C8:AC:62:C1:BB:F4:AE:73:9E:03:1D:44:79:B8:E2:E0
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/90ljwsisYsG79K5zngMdRHm44uA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.66.0/24

    Signature Algorithm: sha256WithRSAEncryption
         90:63:4c:87:7a:37:f9:dc:ae:cf:74:a2:53:8a:06:0c:c6:49:
         61:bb:75:53:21:d5:3d:d1:fc:97:90:38:49:1c:8a:8f:eb:1a:
         99:2d:7b:0f:85:1b:b4:bd:46:2e:b9:05:07:eb:4f:9a:8d:cb:
         0f:ae:bf:a5:38:5d:56:e3:a0:1f:2b:ed:59:70:e5:ee:9f:2e:
         44:e8:ad:28:d5:fc:5a:28:a0:90:95:69:da:09:e9:c6:53:91:
         77:b9:bd:c8:fe:2c:25:70:db:22:67:06:b6:62:f2:04:b9:f8:
         56:c6:6b:31:a8:c1:e5:47:32:fa:09:87:25:76:da:de:dd:22:
         4d:4a:5a:e4:bf:7c:a0:57:c0:6d:e5:d8:a4:d7:7d:83:50:ba:
         5d:18:ab:c2:29:4b:bf:18:d4:f2:ca:ba:8f:58:8f:ef:e7:ea:
         49:27:71:fd:44:ca:bd:f6:38:64:38:6a:56:db:82:da:58:34:
         43:d6:16:88:9e:b7:0f:dd:5a:85:24:90:8c:17:4d:d9:83:03:
         71:d5:95:40:5e:8d:72:50:79:a1:50:31:57:15:1a:e4:80:61:
         92:71:c2:83:8d:54:79:3d:3c:3f:ca:52:8d:0e:a9:0d:31:ac:
         5f:64:42:02:8e:90:de:c4:63:84:73:db:db:69:a8:69:6a:3b:
         76:3d:85:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:21 2025 by rpki-client