Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/dZghe_dx457nYtXwyrKmBO_WufM.roa
File:                     dZghe_dx457nYtXwyrKmBO_WufM.roa (raw, json)
Hash identifier:          5wmK3mPS8Oaricw7X6g88aKAe7uAEG5PKVoDFIc3noY=
Subject key identifier:   75:98:21:7B:F7:71:E3:9E:E7:62:D5:F0:CA:B2:A6:04:EF:D6:B9:F3
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       08
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/dZghe_dx457nYtXwyrKmBO_WufM.roa
Signing time:             Thu 30 Jan 2025 01:14:31 +0000
ROA not before:           Thu 30 Jan 2025 01:14:31 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        58.146.0.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Feb 2025 22:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan 30 01:14:31 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=7598217BF771E39EE762D5F0CAB2A604EFD6B9F3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b8:ea:82:49:64:87:85:94:a6:ec:81:e1:d5:
                    6c:cb:b7:11:a1:c6:df:80:1d:cf:8b:cb:5c:d9:a3:
                    51:2a:2a:85:cf:42:0d:c8:d6:0b:a6:d0:4e:c6:51:
                    f6:ee:ad:79:45:c0:40:53:53:2b:39:12:56:c3:d8:
                    36:b7:37:81:5f:ce:93:f3:c0:4d:3b:63:32:95:ac:
                    8d:ab:02:94:32:58:03:99:fb:0d:f4:79:34:bc:45:
                    f5:7f:79:1a:d5:93:84:ce:5c:a9:2e:98:ac:0d:ea:
                    5e:a4:05:ef:80:1a:77:26:de:52:7a:ce:73:86:da:
                    06:0e:05:06:00:74:3e:7a:44:30:bc:3d:9d:c6:de:
                    b4:bd:4b:a9:ed:79:f1:e0:48:49:bc:b7:a0:bd:28:
                    7c:c9:56:4f:62:df:bc:e8:c4:01:b5:40:c7:44:67:
                    59:fe:89:04:87:8f:79:ae:93:7a:e0:2d:8f:94:e9:
                    81:b7:72:3c:aa:53:19:9f:b1:ad:f5:70:d9:03:da:
                    95:ec:50:8d:aa:31:82:f7:4e:87:51:17:88:02:7a:
                    bc:22:59:9a:30:98:c9:10:c5:14:a4:85:e3:41:a6:
                    f4:a4:6f:a4:de:82:59:db:92:1e:7a:6b:32:d8:c7:
                    3c:78:1e:21:f8:2b:25:6e:73:40:8b:1c:3a:d3:83:
                    f2:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:98:21:7B:F7:71:E3:9E:E7:62:D5:F0:CA:B2:A6:04:EF:D6:B9:F3
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/dZghe_dx457nYtXwyrKmBO_WufM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  58.146.0.0/18

    Signature Algorithm: sha256WithRSAEncryption
         0a:a6:88:1a:4f:36:87:79:81:b7:60:41:e8:6b:a5:86:c4:2f:
         a6:ab:dd:92:c9:83:73:13:05:07:33:bf:11:29:a8:3c:77:9d:
         83:90:e3:42:b7:35:63:cf:e0:d8:3d:c8:54:15:a5:85:40:49:
         75:3b:1e:bb:aa:74:30:61:d0:d3:31:1d:86:4c:48:db:ae:97:
         5b:c6:14:84:77:61:28:0c:34:0e:21:1e:16:15:d3:96:f3:07:
         0d:56:cb:14:99:55:39:fb:d6:a3:41:5c:e2:1f:c5:55:fe:20:
         33:85:47:59:76:57:31:f7:7e:4c:47:a4:3c:a2:8d:3f:b1:3a:
         81:0c:ef:4b:d1:4d:ad:33:61:37:04:ff:47:8a:89:3e:c6:2d:
         d0:d9:f9:18:55:75:2a:04:6f:e8:81:dd:f9:c8:d6:aa:e2:57:
         c5:05:e6:a3:03:df:23:a9:df:29:99:04:f6:bb:19:46:df:ed:
         d7:de:f0:42:68:8c:9a:2f:4c:54:5e:1f:25:11:e9:3b:05:11:
         c1:f9:7b:83:0b:a9:ff:44:b7:4f:dc:c0:2e:0e:bd:68:f3:4e:
         4e:53:50:57:b0:0a:3c:d8:a9:f5:31:a1:73:9b:d5:b6:8e:53:
         40:fe:d1:94:a2:d6:de:91:05:3a:2b:05:71:f7:8e:6a:f0:8d:
         8a:b8:82:87
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:28:13 2025 by rpki-client