Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/AUqkGpOCX2U791eZ9CIMFKLmYxM.roa
File:                     AUqkGpOCX2U791eZ9CIMFKLmYxM.roa (raw, json)
Hash identifier:          c45PgrtWr9Nwp46OQpjR071C+NuRKdKkWcR1XQpOiog=
Subject key identifier:   01:4A:A4:1A:93:82:5F:65:3B:F7:57:99:F4:22:0C:14:A2:E6:63:13
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       3D
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/AUqkGpOCX2U791eZ9CIMFKLmYxM.roa
Signing time:             Tue 30 Apr 2024 01:28:49 +0000
ROA not before:           Tue 30 Apr 2024 01:28:49 +0000
ROA not after:            Tue 15 Apr 2025 01:30:02 +0000
asID:                     7660
IP address blocks:        203.181.194.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 61 (0x3d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Apr 30 01:28:49 2024 GMT
            Not After : Apr 15 01:30:02 2025 GMT
        Subject: CN=014AA41A93825F653BF75799F4220C14A2E66313
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3e:f5:4f:32:c5:5c:94:22:c8:7f:e1:79:46:
                    2f:80:be:c9:1e:93:06:01:84:4d:87:71:8a:67:67:
                    83:f7:70:9d:ac:08:a2:0b:b8:30:8b:5e:c6:ec:ba:
                    e2:d0:c5:9d:c0:5a:1c:eb:01:6a:cc:01:4e:63:bd:
                    18:3f:4d:6e:a9:8f:2a:1d:c5:9c:51:2c:42:31:a0:
                    c7:40:f6:2a:b5:20:b4:9c:33:33:0a:fa:8c:70:51:
                    45:5a:51:9d:f8:c1:38:54:0c:23:f9:af:ad:aa:c3:
                    a3:2b:05:e1:f6:c9:77:d8:38:4c:81:92:93:00:9c:
                    d7:79:86:15:79:94:21:67:0d:0b:74:df:02:55:d1:
                    f5:d0:d7:96:91:e0:ad:81:55:e3:aa:a1:04:96:f7:
                    81:cd:4a:d6:67:e5:a9:1a:b6:09:34:5b:93:11:02:
                    52:3d:f5:90:56:0d:a3:e7:b2:17:98:57:74:db:69:
                    bb:47:aa:1b:c1:9a:ac:f1:03:0f:e9:4d:d9:ea:6c:
                    72:e8:58:de:1d:84:47:7c:71:69:96:9f:59:0a:9c:
                    98:38:03:47:f5:6e:07:a8:52:97:cc:54:57:16:01:
                    3f:38:be:35:a4:da:2f:ef:07:29:5a:4a:4c:bb:29:
                    0f:30:fe:ae:6c:23:66:c7:35:67:31:8e:6c:0d:74:
                    27:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:4A:A4:1A:93:82:5F:65:3B:F7:57:99:F4:22:0C:14:A2:E6:63:13
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/AUqkGpOCX2U791eZ9CIMFKLmYxM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.181.194.0/23

    Signature Algorithm: sha256WithRSAEncryption
         a7:11:75:f0:17:f6:ea:e6:7a:bb:7d:73:40:4a:ee:6d:04:21:
         16:bc:31:55:d0:81:f1:1e:94:9e:05:da:dd:a2:96:6f:da:07:
         67:06:ff:a8:09:a2:06:37:22:5b:54:84:59:2d:01:ee:ba:ec:
         43:29:b4:9e:60:8f:9b:32:90:72:13:d3:90:d8:8c:e4:41:77:
         6e:45:47:b5:e4:fa:9d:34:8b:83:1d:fe:34:0a:de:7e:08:2e:
         d5:6c:fb:0a:a5:c3:82:72:e7:9a:c4:78:c6:bc:e0:39:c5:0a:
         98:00:22:54:63:61:a9:1b:d8:60:2e:45:8f:89:c0:c7:6a:e6:
         58:ac:60:60:ba:d6:76:f0:23:31:0d:90:dc:b6:44:c9:da:25:
         75:f8:94:f8:b9:88:dd:f0:bd:9c:29:07:b5:b8:3c:3b:3e:82:
         50:6f:3e:25:e5:e9:70:35:1c:64:0a:7a:81:69:99:4e:07:44:
         e3:9f:02:12:d9:3d:a4:ca:9e:da:c1:97:58:1f:c4:3b:87:bc:
         04:d3:6f:6c:90:4b:68:6b:aa:38:a8:22:00:c6:13:5f:1f:e3:
         33:c4:c2:ed:f0:05:77:9c:d8:00:90:0d:c3:b4:3c:26:1d:17:
         44:ea:0c:f3:36:56:2f:af:3d:5a:32:a0:8f:d0:71:1d:39:d9:
         37:e9:51:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:25 2025 by rpki-client