Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J-XEXJeIBt0Kbk9WBaJOKNgJr2U.roa
File:                     J-XEXJeIBt0Kbk9WBaJOKNgJr2U.roa (raw, json)
Hash identifier:          4dKuN3hezMuMV6CkYud+qHBx5bnFDPiY9lznmhdXPdg=
Subject key identifier:   27:E5:C4:5C:97:88:06:DD:0A:6E:4F:56:05:A2:4E:28:D8:09:AF:65
Certificate issuer:       /CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
Certificate serial:       31
Authority key identifier: 8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J-XEXJeIBt0Kbk9WBaJOKNgJr2U.roa
Signing time:             Sat 30 Nov 2024 01:29:32 +0000
ROA not before:           Sat 30 Nov 2024 01:29:32 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     131923
IP address blocks:        120.50.192.0/20 maxlen: 25
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 49 (0x31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D62A86EAB39FC40E319BE7346F22CC8F5B191A3
        Validity
            Not Before: Nov 30 01:29:32 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=27E5C45C978806DD0A6E4F5605A24E28D809AF65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d0:03:85:1d:6d:e1:54:91:ab:50:35:c9:08:
                    8d:ee:05:53:fb:71:ca:53:e1:5c:85:25:bf:37:5e:
                    c1:0e:4e:d6:ae:37:81:e6:08:78:13:9f:e8:c3:34:
                    92:d8:57:4d:a9:29:de:91:e2:e4:0d:80:61:a5:02:
                    43:f9:d2:d0:14:04:aa:d7:9e:7a:42:46:b7:2f:29:
                    10:1d:04:31:fc:0c:5c:09:e0:bd:f9:66:06:25:71:
                    d2:79:db:78:fa:02:c2:7c:b7:71:36:0a:ab:aa:46:
                    58:39:6b:63:d1:85:79:db:73:47:46:a8:34:c3:45:
                    f8:22:28:91:d2:c7:67:8f:67:01:88:40:f3:4a:06:
                    97:4b:f6:d9:65:7f:74:c4:34:db:87:77:04:94:51:
                    fd:13:2a:c5:ac:0c:fc:91:b5:f0:ba:36:54:38:96:
                    43:8b:4e:ec:d2:8e:4b:0f:31:6a:91:21:41:bd:d0:
                    96:b3:e3:5a:68:09:e8:59:40:2f:72:2f:5b:70:2b:
                    78:08:87:99:fa:ee:f1:76:45:68:4d:31:57:51:f8:
                    7c:fa:12:54:a7:b0:3b:bb:ff:0c:1a:b9:72:b2:79:
                    38:2f:6f:23:3a:ca:ad:6c:33:0e:20:0f:9f:70:7e:
                    af:92:f0:0d:df:16:3d:ef:0f:a0:57:b2:20:ba:6f:
                    45:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:E5:C4:5C:97:88:06:DD:0A:6E:4F:56:05:A2:4E:28:D8:09:AF:65
            X509v3 Authority Key Identifier:
                keyid:8D:62:A8:6E:AB:39:FC:40:E3:19:BE:73:46:F2:2C:C8:F5:B1:91:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/jWKobqs5_EDjGb5zRvIsyPWxkaM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/jWKobqs5_EDjGb5zRvIsyPWxkaM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20034/J-XEXJeIBt0Kbk9WBaJOKNgJr2U.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  120.50.192.0/20

    Signature Algorithm: sha256WithRSAEncryption
         20:c4:31:d9:e3:96:a4:66:4c:c7:01:6c:00:cb:be:dc:59:54:
         5f:2a:85:8a:5e:a0:3a:4a:5b:f9:17:2f:e9:d5:ca:82:5a:db:
         c6:c9:3d:cc:8a:57:c7:49:6b:99:59:cb:38:de:de:f2:e8:77:
         c1:0a:ca:26:8f:8e:bf:1a:07:29:8b:d2:89:73:da:99:9a:73:
         ed:37:04:58:65:34:54:0e:7d:9f:f9:52:8e:5f:c3:a8:54:1a:
         17:e0:51:d7:f1:62:3e:59:fa:d0:89:dd:bb:f7:a6:f1:ad:0d:
         dd:4c:93:01:cd:2f:a2:c2:af:11:40:00:e0:30:de:30:b2:cd:
         01:76:59:72:6e:02:7d:bb:90:38:5c:c8:3c:2f:c1:7b:d2:31:
         17:30:a5:57:f6:ad:0f:d5:c0:f3:63:dd:dd:f1:5e:64:dc:21:
         80:91:ff:ae:a7:23:b5:58:5c:a0:e6:75:14:15:91:3e:61:59:
         46:ee:11:b2:3e:b5:6c:a1:63:75:c5:87:25:e9:0a:bf:ad:19:
         ab:0d:c5:03:5d:0c:0b:35:27:12:23:bd:32:7a:70:d9:98:6c:
         33:f8:51:38:2e:d6:c4:e0:7d:ef:07:ba:5a:32:05:d5:bf:d6:
         2e:a3:f2:eb:ce:e4:3f:30:82:af:58:9c:bd:e3:9c:c0:23:01:
         1f:b3:47:7d
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:50 2025 by rpki-client