Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/10762/a_5Tq-OImF5pnA7bmo-RXVx-wo4.roa
File:                     a_5Tq-OImF5pnA7bmo-RXVx-wo4.roa (raw, json)
Hash identifier:          lO02vXLsqI7u1M6Z+eLj8VKBxHpLd3KgWDchicJGEMY=
Subject key identifier:   6B:FE:53:AB:E3:88:98:5E:69:9C:0E:DB:9A:8F:91:5D:5C:7E:C2:8E
Certificate issuer:       /CN=28393FAE129B501824696BAE24B64734A203C376
Certificate serial:       6D
Authority key identifier: 28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/a_5Tq-OImF5pnA7bmo-RXVx-wo4.roa
Signing time:             Thu 31 Oct 2024 01:31:04 +0000
ROA not before:           Thu 31 Oct 2024 01:31:04 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     7514
IP address blocks:        120.93.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 109 (0x6d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=28393FAE129B501824696BAE24B64734A203C376
        Validity
            Not Before: Oct 31 01:31:04 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=6BFE53ABE388985E699C0EDB9A8F915D5C7EC28E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:1c:b7:8c:ad:8d:ae:d4:2e:10:29:77:bf:d3:
                    61:83:cd:9d:6d:f1:38:b3:68:28:ca:48:e1:4d:04:
                    4c:f3:60:b1:e9:9f:5d:96:79:73:80:34:93:96:42:
                    b4:05:1f:a3:af:1a:a0:37:fa:48:17:a1:d4:53:eb:
                    6a:18:66:9d:cd:47:ad:8d:29:21:54:45:e9:4a:86:
                    43:49:5b:92:78:33:8d:df:3e:7a:94:6c:42:8e:2a:
                    c3:dd:a1:21:81:54:c5:75:1a:77:e0:a2:91:70:47:
                    d6:20:78:3e:8c:97:23:b9:24:43:c0:e1:61:e5:79:
                    56:29:07:4a:b2:a6:5e:04:2b:5a:14:4d:21:2d:8b:
                    08:bb:0c:3f:23:d7:35:e2:4d:2c:9b:03:7a:15:c9:
                    c3:4a:9e:d7:93:07:f4:b1:58:1f:67:07:2a:96:68:
                    99:9b:db:26:c9:4a:8f:0b:b4:51:63:ea:dd:b2:aa:
                    4a:50:5f:c6:b8:68:d5:cd:f0:6a:52:76:f2:aa:d4:
                    94:35:3c:ca:36:c5:8c:fc:a1:87:0f:53:6e:c4:78:
                    12:bc:24:f9:a1:dd:69:d4:f3:eb:44:93:c6:23:25:
                    a8:be:ee:9f:12:ef:7c:fc:2c:fc:f8:49:2b:fd:ee:
                    78:76:3b:4c:f1:48:45:14:cb:db:f6:3c:e6:3f:5e:
                    ae:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:FE:53:AB:E3:88:98:5E:69:9C:0E:DB:9A:8F:91:5D:5C:7E:C2:8E
            X509v3 Authority Key Identifier:
                keyid:28:39:3F:AE:12:9B:50:18:24:69:6B:AE:24:B6:47:34:A2:03:C3:76

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KDk_rhKbUBgkaWuuJLZHNKIDw3Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/10762/a_5Tq-OImF5pnA7bmo-RXVx-wo4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.93.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         c1:8a:55:11:8c:f2:b3:25:86:10:52:be:28:75:b0:ee:99:df:
         d2:e6:43:2a:8a:b8:41:c6:ba:2c:29:7e:19:b5:42:7d:83:26:
         ad:5b:4b:ce:45:cd:59:c0:bd:04:f9:f2:c0:9d:6c:b3:05:fb:
         82:40:89:7b:ce:49:d5:15:fe:48:04:7c:be:0d:9c:ca:ce:83:
         d9:90:66:c0:c6:7a:ca:02:8a:25:5f:8c:b0:57:a6:7c:bc:90:
         a3:bc:1c:71:0c:e7:ff:90:8c:90:ab:14:0e:19:59:74:bd:d1:
         85:2a:a3:3e:5d:06:42:53:b5:a1:90:e8:9d:4f:30:af:2e:47:
         55:ce:19:b4:c1:8b:77:3d:20:ed:f4:3b:32:52:ab:67:31:5b:
         7d:c2:06:a9:90:bf:5d:e0:66:4b:4a:6e:cf:43:10:d1:75:37:
         35:e5:44:a9:a1:71:64:28:c0:1d:6e:9f:19:4a:83:60:02:96:
         5e:1f:f8:b5:03:51:95:14:e6:1a:01:38:08:e3:93:d5:b5:f4:
         b4:b7:34:22:83:28:9b:fb:08:d9:4a:cd:bb:f9:30:32:f3:7d:
         5e:95:6a:fd:38:c7:e9:90:a1:06:23:af:2c:d6:26:b6:eb:21:
         7e:03:8d:7f:c7:09:39:07:79:b9:3e:34:6f:72:58:f2:e2:11:
         2b:f4:5c:47
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:15:21 2025 by rpki-client