Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20081/uHVVCg3e1Od6Xf6BvAmaHa8MNyw.roa
File:                     uHVVCg3e1Od6Xf6BvAmaHa8MNyw.roa (raw, json)
Hash identifier:          HNgaMNKN67qGdW6cG/LMwGkR7neou4UaByBOmRJStGg=
Subject key identifier:   B8:75:55:0A:0D:DE:D4:E7:7A:5D:FE:81:BC:09:9A:1D:AF:0C:37:2C
Certificate issuer:       /CN=049B35AACA20B630F4AD52CB598F951250FF07FD
Certificate serial:       0E
Authority key identifier: 04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/uHVVCg3e1Od6Xf6BvAmaHa8MNyw.roa
Signing time:             Thu 30 Jan 2025 01:26:42 +0000
ROA not before:           Thu 30 Jan 2025 01:26:42 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     17529
IP address blocks:        124.241.128.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 28 Feb 2025 22:25:09 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14 (0xe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=049B35AACA20B630F4AD52CB598F951250FF07FD
        Validity
            Not Before: Jan 30 01:26:42 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=B875550A0DDED4E77A5DFE81BC099A1DAF0C372C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:11:f1:2b:72:f6:d0:6d:78:48:bb:20:8b:14:
                    9f:7a:88:81:20:6c:9f:3d:ca:f2:3b:82:98:67:09:
                    95:42:47:d3:45:a0:0c:69:b6:5e:c2:59:61:bc:5d:
                    e1:46:77:88:18:fe:27:30:05:6b:f0:aa:c3:c8:9b:
                    7f:77:d6:6b:71:74:98:ec:cd:ec:36:1d:13:5b:58:
                    3b:a0:83:69:8b:b4:5e:d8:dd:d3:80:df:2c:33:aa:
                    8d:47:d6:52:f5:39:44:4c:07:60:1e:27:da:f8:54:
                    ce:54:d4:36:8c:9e:43:3e:1e:1a:a4:f7:4a:7e:62:
                    75:d3:c5:be:93:c1:db:83:46:bc:c8:73:8c:d5:02:
                    4c:08:c6:11:b0:49:90:f8:64:02:e6:e7:53:b9:7d:
                    fe:15:60:e1:a1:8e:89:10:78:88:9e:96:8b:db:64:
                    3a:90:9a:86:0e:33:74:05:d8:a6:e6:39:0c:ff:f5:
                    09:04:46:b0:92:1f:44:e5:c0:a4:9e:80:c3:8b:bc:
                    eb:0e:a7:a4:ff:8f:f1:b5:a9:55:c6:d0:23:1c:30:
                    b1:e4:47:b0:c9:3b:c1:a6:42:31:73:c8:40:0d:f9:
                    54:be:56:7c:f7:56:15:bc:ab:37:44:8c:95:1f:19:
                    d6:a7:13:6b:6e:2c:6b:6d:ad:9e:7e:91:46:a5:36:
                    2f:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:75:55:0A:0D:DE:D4:E7:7A:5D:FE:81:BC:09:9A:1D:AF:0C:37:2C
            X509v3 Authority Key Identifier:
                keyid:04:9B:35:AA:CA:20:B6:30:F4:AD:52:CB:59:8F:95:12:50:FF:07:FD

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/BJs1qsogtjD0rVLLWY-VElD_B_0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BJs1qsogtjD0rVLLWY-VElD_B_0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20081/uHVVCg3e1Od6Xf6BvAmaHa8MNyw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.241.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         08:db:2a:da:44:1f:38:5a:3f:31:c8:14:f2:d2:4f:10:78:92:
         db:86:3c:54:38:0f:0c:6b:47:94:b5:48:cc:b7:43:fe:f3:f7:
         1c:91:9c:5e:f1:b8:11:56:5f:f8:82:a6:7c:c8:2d:ca:36:8f:
         d4:60:d0:33:23:c5:fe:9f:17:24:55:01:16:8f:9d:f7:f2:59:
         b1:14:52:ba:7b:b9:39:e7:47:81:9f:7e:14:35:4b:73:65:62:
         b5:70:99:3e:45:fb:f6:9c:ca:6f:c6:f9:a7:00:04:d3:f2:0b:
         e9:e1:9f:61:3b:08:fa:c3:fd:a2:d0:9c:d2:3f:08:a2:e7:07:
         3f:32:37:73:1f:85:8a:5a:bf:e4:c1:95:e4:2a:2d:80:b3:0e:
         13:cc:f3:18:43:42:d7:91:09:cb:e5:06:52:35:3e:ba:d2:0d:
         0c:c3:ad:13:52:bb:c7:2a:49:b0:72:19:07:76:bf:f0:ff:3d:
         23:53:8b:37:31:92:57:5c:2f:32:91:e0:d8:23:48:ba:7a:94:
         a4:85:9e:38:79:cd:5e:fb:ed:9d:20:75:da:c1:de:02:11:cd:
         3c:4e:1d:f5:64:ec:2b:c3:ff:bc:da:46:9c:88:4a:94:05:4a:
         9f:81:e9:85:6c:2a:07:d2:9b:c2:bb:3a:50:b1:4e:82:9a:56:
         4c:b6:fc:f2
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sat Feb 22 04:50:06 2025 by rpki-client