Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ieItbJioQc_x9MaY5G9w_sfBlws.roa
File:                     ieItbJioQc_x9MaY5G9w_sfBlws.roa (raw, json)
Hash identifier:          PXSxSWRo4XiKRxKrVJwJiMQQcydu8yIEFpXEwecd7UI=
Subject key identifier:   89:E2:2D:6C:98:A8:41:CF:F1:F4:C6:98:E4:6F:70:FE:C7:C1:97:0B
Certificate issuer:       /CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
Certificate serial:       5B
Authority key identifier: 96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ieItbJioQc_x9MaY5G9w_sfBlws.roa
Signing time:             Wed 04 Sep 2024 06:23:12 +0000
ROA not before:           Wed 04 Sep 2024 06:23:12 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     15830
IP address blocks:        101.97.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=961BC18512722AAF9A90D898ADEA9AF7793C2543
        Validity
            Not Before: Sep  4 06:23:12 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=89E22D6C98A841CFF1F4C698E46F70FEC7C1970B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:ee:4c:53:4e:63:96:0f:42:93:11:b0:47:1c:
                    17:92:0a:e2:7f:66:06:40:a8:fc:f2:7a:93:4f:40:
                    7d:8f:8b:41:46:21:87:b9:21:41:47:67:7c:b8:d0:
                    22:76:a9:eb:89:5c:8d:0e:dd:67:65:2e:69:6a:c6:
                    ad:f0:fd:52:71:1c:8e:6d:ba:94:59:dd:64:62:57:
                    a5:3f:02:df:66:fc:fe:43:ce:b6:0f:a1:a5:71:03:
                    7e:a7:8e:c0:04:ba:7d:5b:ad:04:c1:58:6b:a8:03:
                    7c:0e:33:c7:66:bb:99:cf:f2:b6:7f:05:be:a0:7f:
                    28:37:91:7f:cc:a3:ca:36:6d:68:e6:ab:8a:3f:b7:
                    fa:38:72:1b:ce:d9:f2:7c:27:3d:86:5a:aa:3f:01:
                    5e:8c:cc:64:3c:23:d0:e1:b2:58:f7:19:3e:c3:60:
                    49:05:f2:63:47:3d:53:cc:55:31:64:7f:31:f3:d0:
                    69:5c:8c:72:b7:dd:fd:bc:75:b6:71:83:56:f4:a3:
                    62:db:58:b7:2e:37:d2:ce:b7:b6:73:ca:ff:0b:15:
                    b2:aa:f4:1c:e6:c9:75:65:8b:99:5d:7f:25:c2:22:
                    d2:18:8d:e7:27:63:56:a0:ca:1f:d0:f3:89:fe:5f:
                    ee:1d:15:0f:06:84:6a:28:05:20:29:39:18:19:98:
                    a0:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:E2:2D:6C:98:A8:41:CF:F1:F4:C6:98:E4:6F:70:FE:C7:C1:97:0B
            X509v3 Authority Key Identifier:
                keyid:96:1B:C1:85:12:72:2A:AF:9A:90:D8:98:AD:EA:9A:F7:79:3C:25:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/lhvBhRJyKq-akNiYreqa93k8JUM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/lhvBhRJyKq-akNiYreqa93k8JUM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20042/ieItbJioQc_x9MaY5G9w_sfBlws.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  101.97.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         8b:1e:ba:4b:bb:8e:5a:20:1a:5f:64:d9:01:ed:48:61:96:6c:
         90:53:79:f7:2b:f9:4b:c1:1c:b4:a9:15:0d:e4:3a:fe:cd:a0:
         a5:0c:1c:94:93:00:3a:06:40:08:a3:8c:8b:aa:82:18:8d:90:
         dc:0b:37:4f:ef:b7:3e:19:48:ad:96:cd:c1:36:97:c1:aa:7f:
         62:71:f6:2c:0e:91:37:7a:3d:f5:36:fe:e2:1b:4b:2a:54:48:
         08:86:3e:b9:a2:00:35:5b:9b:bd:a1:a3:df:dd:00:68:14:29:
         2d:f7:d0:11:94:d4:e8:ba:7f:81:15:f3:64:a8:49:5b:69:4f:
         53:96:9e:27:3b:aa:84:52:d8:d6:de:ea:8c:95:15:9c:11:c1:
         9a:75:c7:0a:35:97:c4:33:05:5e:26:49:f1:2b:7e:2e:4a:97:
         48:9a:c7:a2:51:de:4e:ab:b5:4a:32:8e:47:aa:69:ac:8e:80:
         48:d8:b9:ae:44:a6:ba:58:82:c1:1e:80:09:e9:d5:81:48:f3:
         ab:0b:1b:bb:a6:42:58:e2:ce:71:e9:61:29:63:99:c6:34:76:
         4d:26:fe:90:0e:43:c3:72:0a:41:88:77:aa:08:fa:04:c9:86:
         2a:c3:5a:02:56:28:8b:f9:29:f2:af:0d:b1:2f:a1:ac:3c:f7:
         a8:fd:b2:6a
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 15:19:56 2025 by rpki-client