Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
File:                     SHNLQCZRNzMHhRR278196vmUFV0.roa (raw, json)
Hash identifier:          KW0SeDFVWDCdjvDQDjaHrsa3jmevAmKE34Hq6UX6o08=
Subject key identifier:   48:73:4B:40:26:51:37:33:07:85:14:76:EF:CD:7D:EA:F9:94:15:5D
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0206
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
Signing time:             Mon 30 Sep 2024 01:29:58 +0000
ROA not before:           Mon 30 Sep 2024 01:29:58 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.168.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 518 (0x206)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:29:58 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=48734B402651373307851476EFCD7DEAF994155D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:70:10:47:77:f7:31:1b:4a:0b:e6:d7:bc:ae:
                    51:52:eb:8d:8d:4a:d0:b6:c2:7d:f6:46:ff:18:f1:
                    08:70:75:f4:7e:49:c4:c3:67:08:d0:a2:75:03:01:
                    31:94:98:83:30:88:15:49:8e:72:cc:61:ab:fd:6c:
                    2e:81:74:a8:de:d0:14:20:33:2a:cb:07:51:89:b0:
                    89:d5:af:86:56:39:ae:c4:20:06:cc:9c:e1:08:8f:
                    a1:9d:49:ae:ff:bb:a4:80:4c:5b:71:9a:76:1c:01:
                    9e:54:50:77:7e:52:d2:0c:55:07:39:83:b8:68:42:
                    a9:3c:d7:75:b9:4a:b3:c5:5c:d8:d2:c0:70:1e:ab:
                    36:6d:f7:de:50:d6:12:7c:5f:80:b7:d3:71:df:39:
                    c5:46:b6:6b:36:9c:6f:99:8b:c8:e1:5f:ae:1e:a7:
                    58:e4:ad:19:86:62:2f:4a:d5:94:80:22:8a:18:51:
                    00:60:a1:90:9d:27:97:3f:e6:c1:1a:6e:fd:c5:38:
                    60:96:0a:a9:e3:d9:d9:c9:35:cf:7a:fd:13:ca:ad:
                    dd:c2:17:35:ea:98:b3:c1:ab:49:e1:3e:d2:76:c8:
                    a4:ac:50:a9:c3:51:ff:ab:aa:06:39:8d:03:92:b8:
                    ea:87:6a:cd:45:af:7b:d6:a0:1d:a5:be:e8:3a:d9:
                    77:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:73:4B:40:26:51:37:33:07:85:14:76:EF:CD:7D:EA:F9:94:15:5D
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/SHNLQCZRNzMHhRR278196vmUFV0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.168.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7b:0b:eb:fb:57:21:1a:9f:45:b8:0b:a4:c1:6f:7e:80:74:5d:
         cb:bd:c9:1a:e7:ef:cf:b0:08:6e:35:b0:75:3c:c3:e0:05:78:
         67:2d:4b:39:af:c1:be:48:cb:6e:a2:b0:94:3f:50:8e:9b:ca:
         45:66:0c:33:5f:7c:71:14:2c:43:33:f2:b4:f2:04:f5:04:1f:
         4f:c7:aa:15:86:e4:90:2f:cc:8f:04:2b:d6:33:7c:2d:f2:66:
         0b:79:26:4e:98:f2:55:2f:89:1e:a4:25:e7:47:e6:ac:82:78:
         2a:c8:79:62:bb:2a:12:96:d9:87:e3:80:99:90:c3:e9:c5:8a:
         7c:fd:74:2b:63:18:5c:e6:84:ce:29:70:db:f9:fe:1f:3b:1e:
         0b:0c:fb:30:3c:6e:d6:4d:46:78:60:17:0a:da:97:d7:e1:35:
         7d:60:ea:19:7d:d6:48:22:8f:67:90:04:f2:f2:88:dd:04:d6:
         5e:2f:be:e7:ff:f7:0c:0b:bc:6b:77:8a:49:24:21:c6:63:0c:
         3a:d7:82:00:c7:c6:81:b4:ce:e2:42:76:77:9a:b9:6d:54:ac:
         e6:67:ab:18:4f:1a:37:ec:7a:85:35:31:ae:cb:04:c3:14:4f:
         c3:d0:cf:a9:8b:bf:77:9f:94:de:26:3b:a7:2d:77:ec:7f:db:
         0b:ce:b6:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:30:37 2025 by rpki-client