Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1eQHe1k_lSJOrp-jdsX0kjOpA9s.roa
File:                     1eQHe1k_lSJOrp-jdsX0kjOpA9s.roa (raw, json)
Hash identifier:          IOBX4sTFVqFU9HAB8f86+uBBcjY8MaoobinyfaepK2s=
Subject key identifier:   D5:E4:07:7B:59:3F:95:22:4E:AE:9F:A3:76:C5:F4:92:33:A9:03:DB
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       5C
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1eQHe1k_lSJOrp-jdsX0kjOpA9s.roa
Signing time:             Wed 04 Sep 2024 06:25:30 +0000
ROA not before:           Wed 04 Sep 2024 06:25:30 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        110.232.192.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 92 (0x5c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:25:30 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D5E4077B593F95224EAE9FA376C5F49233A903DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:14:81:bf:bb:12:be:f5:c0:fa:e2:4c:65:62:
                    81:cc:ea:58:23:c2:47:8f:39:8b:25:51:fe:cd:41:
                    8e:8d:87:95:06:91:eb:f5:d3:2d:b7:65:b8:d9:11:
                    71:f4:09:1b:01:8f:c2:0c:be:ed:6b:c4:94:2b:c6:
                    af:f1:e2:35:b0:8d:38:59:13:7f:a1:77:75:63:11:
                    d7:e5:c0:4d:b3:bb:4b:e6:cd:b0:6e:b2:b6:e1:86:
                    9f:de:e8:a1:59:a4:46:46:4d:99:64:e9:65:a0:18:
                    93:6d:bb:38:e4:af:73:71:08:71:0e:9a:0d:2f:f3:
                    79:5e:33:b6:7b:f5:03:ff:d6:3e:d2:a3:1e:0b:49:
                    6e:75:ef:27:9d:3d:92:45:c9:69:ab:7a:d1:4d:fc:
                    e6:53:9c:35:af:ab:e7:f8:d7:36:d8:3d:eb:6c:f8:
                    10:0b:fc:17:66:16:de:5d:94:03:69:46:34:8d:9a:
                    b0:3f:0f:2e:88:d0:09:af:3f:f7:4c:42:ad:ff:0b:
                    70:8c:4c:64:f1:c3:34:9f:4f:f8:92:b6:84:45:b3:
                    ef:7c:78:69:4b:47:a7:5c:bd:43:6e:9c:4b:df:34:
                    6d:c7:18:97:3e:c2:80:c4:75:30:21:f8:09:bd:b0:
                    7a:9f:f6:f1:bf:c5:51:81:10:fd:c7:73:79:1e:8a:
                    bf:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:E4:07:7B:59:3F:95:22:4E:AE:9F:A3:76:C5:F4:92:33:A9:03:DB
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/1eQHe1k_lSJOrp-jdsX0kjOpA9s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.192.0/19

    Signature Algorithm: sha256WithRSAEncryption
         2a:f5:90:b3:a5:db:51:a2:59:00:80:58:93:b5:9d:ba:26:7f:
         0e:6a:77:9b:14:94:9b:24:77:f6:52:42:48:05:76:97:fc:14:
         d6:3e:b4:8e:ac:cd:3c:25:7b:84:19:3f:32:f7:03:3e:b0:45:
         ef:92:66:40:6f:ad:75:77:84:44:e5:b4:23:40:09:da:93:77:
         45:03:9b:14:33:97:6e:0f:15:73:0f:18:f5:1a:2a:62:41:9c:
         e3:9c:43:b6:5d:41:d4:c9:aa:3e:9a:98:fc:c8:39:67:41:73:
         7e:05:bf:91:a6:4d:b5:62:ff:09:0f:98:b4:d8:ed:3e:17:4d:
         25:d8:07:e2:df:d6:34:ae:45:f4:50:98:fb:3f:92:22:4b:5d:
         c9:e0:e0:5b:9e:c5:93:b5:cb:94:a4:c5:a3:88:d5:65:6d:ca:
         88:b6:b9:fd:d2:64:bf:bc:50:f9:76:97:e9:cc:f5:2c:d2:10:
         af:56:8c:a1:8d:de:b6:8b:6c:29:74:8d:da:e4:97:24:4a:25:
         3b:e2:9d:6e:cf:31:e7:56:9d:9c:72:d2:fa:bb:5c:91:8f:d0:
         b6:86:ea:39:39:8c:55:4f:fa:57:8c:ed:69:d9:82:43:57:38:
         26:06:45:3b:ae:f4:5b:16:75:6d:d8:38:0c:39:eb:10:14:31:
         38:71:1a:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:16:19 2025 by rpki-client