Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uTjIDcVIeWWenLPMtUrxaWeBL5w.roa
File:                     uTjIDcVIeWWenLPMtUrxaWeBL5w.roa (raw, json)
Hash identifier:          1VKh3s9VSa4PARBnllvP8kq9zVO4ZmT/wHM+WLTrYDI=
Subject key identifier:   B9:38:C8:0D:C5:48:79:65:9E:9C:B3:CC:B5:4A:F1:69:67:81:2F:9C
Certificate issuer:       /CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
Certificate serial:       0212
Authority key identifier: 20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uTjIDcVIeWWenLPMtUrxaWeBL5w.roa
Signing time:             Mon 30 Sep 2024 01:30:05 +0000
ROA not before:           Mon 30 Sep 2024 01:30:05 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     7684
IP address blocks:        49.212.65.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 530 (0x212)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20320F6D09DB18C0F70B354A3D87450F70E6D71A
        Validity
            Not Before: Sep 30 01:30:05 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=B938C80DC54879659E9CB3CCB54AF16967812F9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:6f:23:06:c8:28:e7:aa:a7:e4:4b:0d:78:3f:
                    f2:3b:88:1f:fa:fd:7f:8a:0e:1f:f9:44:25:90:d5:
                    a0:65:76:25:d6:29:9d:96:77:62:c2:14:92:62:5b:
                    b4:57:68:66:40:d0:37:d3:51:fc:e8:07:bd:17:01:
                    60:fe:68:90:f1:f6:4b:41:59:90:5b:0c:52:32:42:
                    b5:85:71:0c:8f:14:91:f1:17:ff:7f:f7:47:e3:bb:
                    6e:5d:a0:36:ef:0c:db:c1:67:f5:c4:43:01:a6:1a:
                    36:2c:e4:b3:0b:de:41:b9:20:1d:32:23:ec:8f:18:
                    e3:b6:00:11:af:45:47:51:06:77:1d:25:f8:d5:ea:
                    bc:6a:38:bf:bc:59:2d:6c:76:46:f3:c5:5d:7a:8e:
                    66:0f:fb:f7:22:4e:8c:7f:27:7e:75:bd:4b:aa:0f:
                    99:58:1f:f9:16:91:e7:0b:6b:51:6c:80:59:27:79:
                    29:2c:ca:40:94:37:3d:38:12:d7:f4:f3:0d:3d:8a:
                    05:7c:b4:83:9f:2f:e3:47:ed:df:00:e4:e7:14:ad:
                    23:3e:b3:a5:8c:30:44:29:a5:16:d7:11:68:02:53:
                    e8:c1:b7:e5:de:ef:58:4a:0d:3f:bc:c1:b5:b5:64:
                    4d:ab:8a:21:99:58:3a:cd:5e:bf:70:44:b6:64:a7:
                    73:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:38:C8:0D:C5:48:79:65:9E:9C:B3:CC:B5:4A:F1:69:67:81:2F:9C
            X509v3 Authority Key Identifier:
                keyid:20:32:0F:6D:09:DB:18:C0:F7:0B:35:4A:3D:87:45:0F:70:E6:D7:1A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IDIPbQnbGMD3CzVKPYdFD3Dm1xo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10247/uTjIDcVIeWWenLPMtUrxaWeBL5w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  49.212.65.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:49:bd:da:a8:4d:f5:7b:e8:7c:a3:aa:0c:f0:83:a2:c9:21:
         90:f5:a6:68:76:d0:69:b9:df:e8:d0:6d:a3:d1:8f:f3:12:07:
         a1:90:28:2e:9e:86:d3:17:e5:1a:56:05:8f:46:bd:1b:00:d2:
         77:b8:7c:e9:04:41:70:04:42:33:c8:01:36:90:c1:e0:8c:6e:
         bf:8d:04:eb:89:1d:91:ee:5e:10:8c:29:f9:07:83:a5:65:e8:
         53:de:21:75:3f:83:bb:8e:e5:8e:af:aa:9d:3e:d7:f7:55:eb:
         a0:2a:23:d7:2e:7a:16:2d:f3:8d:c2:3a:fa:ef:69:46:49:ac:
         79:f1:ee:55:5f:7a:7f:03:39:29:e5:13:d5:95:ab:94:fc:42:
         6a:c2:d3:38:4a:f2:88:55:71:90:3a:a0:39:cd:91:20:c3:f8:
         fb:db:2a:04:82:ff:87:db:e9:a3:7f:12:c8:2c:60:ff:d5:b4:
         17:4d:e6:8b:75:59:5b:0c:5c:68:d2:84:f1:91:84:8b:5b:28:
         c9:6f:01:6d:dd:68:98:4a:d9:6d:18:2c:8e:66:cd:94:dc:75:
         03:1f:a0:81:5f:6c:e6:d6:93:3a:47:d8:28:91:0e:13:31:8e:
         01:50:f2:a4:8d:ed:9e:1a:2f:8a:84:63:cc:b1:6d:94:9f:52:
         5c:79:c8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:39 2025 by rpki-client