Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/12/jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa
File:                     jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa (raw, json)
Hash identifier:          V6iMKe498tEpk1US8kZSHOyzE6oBTaO1P+La8J2BZi8=
Subject key identifier:   8F:1A:29:C6:11:40:4C:D6:B3:F1:08:6B:F4:14:AC:7D:0D:0C:0F:BC
Certificate issuer:       /CN=1589EECCC6718C652638CF4E92C60003C56FB697
Certificate serial:       52
Authority key identifier: 15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa
Signing time:             Fri 27 Sep 2024 00:02:30 +0000
ROA not before:           Fri 27 Sep 2024 00:02:30 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     2907
IP address blocks:        202.241.0.0/17 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1589EECCC6718C652638CF4E92C60003C56FB697
        Validity
            Not Before: Sep 27 00:02:30 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=8F1A29C611404CD6B3F1086BF414AC7D0D0C0FBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ff:c0:c7:53:83:eb:76:5e:40:b7:b1:78:88:
                    99:c7:cd:da:d9:49:13:2c:75:8d:86:b7:3b:ac:0e:
                    6e:2d:19:0b:ab:36:c0:95:14:3b:97:da:e7:fe:fd:
                    18:ef:fa:eb:1b:86:ae:df:29:e6:a1:0a:ee:3a:98:
                    6c:f1:91:97:c0:c4:e3:ba:35:60:c3:17:50:07:d5:
                    5e:d7:1c:0e:e3:3c:5c:15:48:39:c4:31:07:80:d8:
                    34:2b:06:28:bf:63:f4:c0:19:45:e2:4d:b9:7f:14:
                    1b:9a:3d:eb:04:6b:f8:a7:e0:f1:bd:99:e4:eb:93:
                    03:8b:ae:32:67:8c:21:cb:7c:88:f2:7f:48:b7:93:
                    4e:00:11:8c:3e:58:91:1a:44:d7:90:9a:d7:58:25:
                    71:f9:26:9c:fb:6e:9c:b3:a7:6b:a1:5a:d8:10:3d:
                    0b:03:d4:3c:20:48:e4:3a:60:c9:a4:6a:25:9c:bd:
                    dd:d9:5e:4a:98:d9:99:66:18:42:a7:5d:39:8b:d0:
                    a9:55:77:c3:ee:9d:67:e0:9b:58:51:1c:81:37:a9:
                    67:ca:d2:6f:93:d8:c0:99:9f:9f:10:88:c4:74:0c:
                    94:75:48:6e:03:a7:c8:07:40:3e:0c:f1:07:86:3f:
                    e6:99:2d:aa:28:b8:da:63:c3:f8:ea:51:ac:d3:ca:
                    7f:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:1A:29:C6:11:40:4C:D6:B3:F1:08:6B:F4:14:AC:7D:0D:0C:0F:BC
            X509v3 Authority Key Identifier:
                keyid:15:89:EE:CC:C6:71:8C:65:26:38:CF:4E:92:C6:00:03:C5:6F:B6:97

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/FYnuzMZxjGUmOM9OksYAA8Vvtpc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/FYnuzMZxjGUmOM9OksYAA8Vvtpc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/12/jxopxhFATNaz8Qhr9BSsfQ0MD7w.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.241.0.0/17

    Signature Algorithm: sha256WithRSAEncryption
         9c:94:a1:ec:61:b2:44:79:d1:0f:1b:39:70:d6:72:e2:c9:9d:
         70:4a:11:ba:82:e3:5f:86:b3:7b:d4:5b:89:cf:56:40:fa:26:
         68:3c:44:a1:b2:a3:ae:24:7d:21:8d:69:98:7c:c1:26:50:26:
         9d:00:28:7f:ca:8b:01:fc:54:81:41:d8:6d:84:3d:b4:39:34:
         fd:2f:24:0e:c8:ca:bf:6f:30:56:e6:f7:c4:54:53:34:21:12:
         e1:a2:3b:be:1c:5d:e8:b1:ab:08:12:c1:23:cf:04:a3:3d:ff:
         61:d5:11:e0:5b:5a:01:de:86:15:1e:86:4d:76:47:28:e4:95:
         a3:42:54:e9:a1:20:f0:ca:49:43:35:71:e5:fe:c4:44:a1:0f:
         b0:d9:dd:7f:70:df:86:da:0e:01:3d:1c:1d:45:c5:86:f3:25:
         bb:04:af:5d:00:ab:14:4f:98:c0:d3:eb:68:55:8e:41:91:5e:
         96:3c:3a:bc:3d:1b:31:7e:b2:b0:39:93:28:f4:9e:a1:9a:49:
         27:fe:f1:5d:46:94:56:73:1e:af:6a:85:12:2c:4c:71:c4:8a:
         dc:b0:4d:16:86:f5:6c:23:6e:00:07:fc:cc:bf:b9:15:66:5d:
         4d:3f:d7:58:84:9f:96:90:e7:7e:36:de:25:d9:02:a5:20:20:
         fe:0e:53:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:15 2025 by rpki-client