Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6PFMfut8IVXl4HwN4ACVmN_OEQ.roa
File:                     k6PFMfut8IVXl4HwN4ACVmN_OEQ.roa (raw, json)
Hash identifier:          /uTS+1Hc6q0pKvvO3XmAgtYlNbWIbx/77o5qIJODgzs=
Subject key identifier:   93:A3:C5:31:FB:AD:F0:85:57:97:81:F0:37:80:02:56:63:7F:38:44
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       020E
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6PFMfut8IVXl4HwN4ACVmN_OEQ.roa
Signing time:             Mon 30 Sep 2024 01:30:03 +0000
ROA not before:           Mon 30 Sep 2024 01:30:03 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.70.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 526 (0x20e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:03 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=93A3C531FBADF085579781F037800256637F3844
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:38:15:1b:bb:7f:1a:a8:d1:e6:64:93:cf:59:
                    e5:49:0f:2b:07:03:57:41:e0:ca:64:45:8c:5a:e6:
                    8a:bb:5a:6a:b2:e4:82:a7:62:51:bd:13:28:27:7d:
                    41:15:97:5f:33:9a:cf:17:43:6e:84:66:e2:7e:23:
                    33:d3:01:fe:15:96:a4:b2:f9:20:ab:0b:8b:fe:e1:
                    db:fc:91:e3:83:02:2b:0c:c7:ca:27:06:56:ae:bb:
                    40:c0:89:9d:ec:42:64:00:9f:07:9b:2e:f2:49:ba:
                    56:33:60:6b:bc:20:78:76:d1:3d:2a:ec:69:f6:93:
                    56:2b:f7:be:47:5e:e5:3e:c1:80:e5:12:38:ca:97:
                    bd:50:c2:e5:0b:e0:9f:eb:ba:26:02:43:bc:fc:0f:
                    86:e9:4b:51:96:14:04:52:88:a4:27:86:98:b8:42:
                    19:19:ba:d6:27:67:36:32:7b:46:25:81:e2:64:22:
                    68:36:40:09:7d:73:6a:74:d9:57:53:5c:3b:2e:9d:
                    23:d6:9f:59:47:34:18:92:3a:23:89:7c:d6:ee:1b:
                    9a:c3:1a:6b:46:c8:93:6a:e7:ab:d4:2a:cd:01:d6:
                    4e:b5:53:9f:02:18:f7:b2:96:75:8b:7d:bb:12:38:
                    d2:6c:ae:4a:dd:a1:18:34:12:78:ce:81:c7:d4:5b:
                    de:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:A3:C5:31:FB:AD:F0:85:57:97:81:F0:37:80:02:56:63:7F:38:44
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/k6PFMfut8IVXl4HwN4ACVmN_OEQ.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.70.0/24

    Signature Algorithm: sha256WithRSAEncryption
         be:54:70:0d:4d:71:83:af:a6:2d:8f:47:08:5e:8c:a9:00:77:
         0c:41:fb:fc:9e:c3:d2:36:cb:bd:d7:0d:c0:70:1e:cc:c4:ff:
         c4:e3:43:a8:c2:fe:2c:b6:68:fc:a6:5d:1c:32:5d:02:2e:37:
         4e:ac:78:89:bb:0f:f8:00:4e:08:cb:10:2d:29:3b:cc:46:96:
         dd:8c:09:5b:6c:0b:f4:a3:7f:9e:58:6d:85:d0:8d:3e:7c:57:
         6c:fd:95:c6:7a:fd:b6:9f:33:32:53:1b:60:1c:be:77:26:fa:
         49:bd:44:da:e7:df:97:79:36:f6:ad:3d:b0:9e:f7:ab:d7:d2:
         1c:b0:6c:d1:84:5e:04:c9:b3:bd:76:56:d7:23:50:bc:5f:9e:
         9a:7f:1e:0e:f7:6c:4f:5e:27:48:01:a2:92:9d:fc:20:db:63:
         2e:4b:7f:e3:25:f7:c8:df:c8:a7:42:aa:9e:40:7d:90:37:3d:
         11:6c:95:0a:ae:4b:75:ba:4e:46:68:4e:82:7b:65:85:06:08:
         ee:b9:97:62:76:a8:67:a0:12:0a:15:70:49:58:3a:2a:07:32:
         3e:31:e9:bf:72:ea:96:ae:80:9a:50:e1:1b:08:4b:af:79:c9:
         57:3f:44:c2:68:f6:e7:ca:7f:c2:f5:f2:03:a5:8e:ef:92:92:
         5a:86:80:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:18:26 2025 by rpki-client