Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/bxJBv8k2VP6NtPi0uL7bYEOlniI.roa
File:                     bxJBv8k2VP6NtPi0uL7bYEOlniI.roa (raw, json)
Hash identifier:          d3MygnIVm3XrL/N6iQarvDuMpXAs5k50/UhR/arseak=
Subject key identifier:   6F:12:41:BF:C9:36:54:FE:8D:B4:F8:B4:B8:BE:DB:60:43:A5:9E:22
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       48
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/bxJBv8k2VP6NtPi0uL7bYEOlniI.roa
Signing time:             Thu 26 Sep 2024 23:58:09 +0000
ROA not before:           Thu 26 Sep 2024 23:58:09 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     2907
IP address blocks:        210.133.64.0/19 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 72 (0x48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep 26 23:58:09 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=6F1241BFC93654FE8DB4F8B4B8BEDB6043A59E22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:af:c7:c6:5c:76:21:9d:91:50:ab:7a:08:e7:
                    5d:2f:00:e3:7d:3c:ab:a8:2d:a4:ee:5e:2b:26:f7:
                    60:b8:0c:9a:25:7d:8b:18:5a:5a:b7:3f:e2:9b:88:
                    7b:70:0b:35:4d:a1:01:99:34:47:ea:50:10:85:9d:
                    92:37:9d:56:b6:30:93:d6:8c:5c:d5:de:13:1e:26:
                    3b:91:61:35:56:19:99:a5:e8:4e:3f:1d:23:4f:9a:
                    ee:b6:3e:2b:c7:d0:39:b2:34:b0:18:2f:7e:94:4d:
                    34:0f:b8:0a:2f:6e:af:21:5e:bf:5e:a8:d4:34:4f:
                    cc:35:f3:e8:c2:4c:3d:da:3a:57:36:70:f7:f5:60:
                    91:58:d6:3d:1e:69:2a:c4:97:10:6b:73:15:c3:12:
                    fd:09:fa:7e:d7:a0:ef:80:38:27:8e:8d:83:3f:04:
                    c5:0d:ed:48:78:01:cf:e9:21:1d:5f:e4:09:ce:06:
                    1a:c8:80:58:51:c2:c4:1a:b7:ee:a8:a9:5d:8c:2b:
                    0f:05:e6:65:05:7a:05:18:bc:5b:ad:46:9c:75:a4:
                    e0:d2:18:50:d4:3f:fa:2b:7d:14:ea:dd:23:06:6f:
                    21:ae:29:bf:57:a1:b3:0c:0d:76:41:fc:bd:a5:dd:
                    99:71:c7:f8:2a:a9:3f:df:45:45:f9:35:ff:31:23:
                    15:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:12:41:BF:C9:36:54:FE:8D:B4:F8:B4:B8:BE:DB:60:43:A5:9E:22
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/bxJBv8k2VP6NtPi0uL7bYEOlniI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.133.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:4f:26:df:1b:1a:eb:40:02:99:28:5a:61:5e:a2:44:33:7f:
         42:e2:1c:85:15:8f:a5:f1:20:f9:f7:b9:8c:be:0b:4b:87:83:
         78:e7:e2:73:bc:b0:b0:96:24:07:1d:24:58:57:79:f8:f8:fb:
         6f:bc:89:65:0f:33:1d:0a:a6:d9:c3:53:9b:7b:c6:c5:4a:cf:
         73:e5:99:cb:c1:09:f0:75:84:23:14:e4:17:9d:62:76:5b:94:
         29:f9:9c:6c:e6:bf:82:ac:b1:92:bf:68:c4:33:84:7a:63:69:
         2d:fa:ba:74:e7:63:1b:cc:a5:7d:d0:16:bc:8a:00:a7:b4:f7:
         aa:3d:b6:07:6f:8d:10:74:00:e5:9f:bf:35:ba:b0:88:76:05:
         0e:9e:5c:47:b9:b9:c7:00:48:8d:40:62:f4:9b:19:33:0a:bb:
         85:2a:f7:cc:c5:2e:2e:21:0d:aa:08:35:49:ac:47:81:9d:ae:
         94:fe:e6:b8:86:c9:56:ed:6b:98:e7:59:c2:53:c3:88:49:ee:
         12:ba:be:e7:55:47:45:6c:2b:92:55:e5:d8:28:9d:c0:64:74:
         79:8c:36:b8:03:2d:8a:3a:2f:aa:bb:68:0b:34:71:a9:b2:61:
         dd:1d:08:6e:20:fe:69:92:76:40:6b:22:06:b7:25:b1:a5:42:
         98:a7:b4:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:24 2025 by rpki-client