Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20116/e_EXmnomq6Xm6AHZtLtO2Ju7MIs.roa
File:                     e_EXmnomq6Xm6AHZtLtO2Ju7MIs.roa (raw, json)
Hash identifier:          gcjZldJ6lFk5cR3QLuLQ7o9AlAENJpBiUglKiZB0jW8=
Subject key identifier:   7B:F1:17:9A:7A:26:AB:A5:E6:E8:01:D9:B4:BB:4E:D8:9B:BB:30:8B
Certificate issuer:       /CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
Certificate serial:       59
Authority key identifier: C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/e_EXmnomq6Xm6AHZtLtO2Ju7MIs.roa
Signing time:             Mon 01 Jul 2024 06:07:18 +0000
ROA not before:           Mon 01 Jul 2024 06:07:18 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     38631
IP address blocks:        43.223.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C49E64FB7C8C7C6B5CD7C7701882E8597C42838E
        Validity
            Not Before: Jul  1 06:07:18 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=7BF1179A7A26ABA5E6E801D9B4BB4ED89BBB308B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:41:b3:80:bf:44:c8:04:b6:2a:de:71:dc:13:
                    03:6c:69:a2:23:d3:4f:f3:ee:eb:ff:59:41:79:12:
                    bd:95:7d:63:a3:3f:95:59:58:52:1a:72:f5:58:9f:
                    65:0b:ed:5b:97:97:32:74:a8:c2:cc:cf:80:84:5d:
                    b0:37:e5:f9:71:a7:91:96:a0:56:50:5b:a7:00:0a:
                    d5:04:f0:ff:03:81:19:43:91:26:5b:b7:23:1a:a6:
                    12:dd:4b:20:fe:b1:75:b2:14:f4:c9:0b:97:c9:4b:
                    3d:fc:0b:89:93:2a:38:c1:03:a5:ea:75:7e:52:e8:
                    8c:df:af:ee:9b:6c:e6:91:95:58:06:ec:1e:55:ee:
                    56:75:54:26:33:5a:72:60:9e:aa:29:17:54:4a:c2:
                    f6:84:37:61:1a:9b:96:8a:51:b0:56:ed:10:0b:54:
                    ab:70:52:13:51:7d:f0:8f:23:4e:2c:48:c8:44:99:
                    64:6a:2d:7d:84:c6:2d:a6:f0:64:03:0d:96:22:87:
                    6f:0a:bf:75:69:df:fc:2f:d3:49:51:71:9e:2a:01:
                    55:5a:70:a8:cf:84:e8:18:08:ab:56:ab:b5:47:73:
                    1b:7f:97:41:1b:d7:5b:3d:d0:d5:9d:62:8c:b1:fb:
                    ec:50:b1:41:86:39:06:02:6d:80:aa:47:ae:5a:3b:
                    86:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:F1:17:9A:7A:26:AB:A5:E6:E8:01:D9:B4:BB:4E:D8:9B:BB:30:8B
            X509v3 Authority Key Identifier:
                keyid:C4:9E:64:FB:7C:8C:7C:6B:5C:D7:C7:70:18:82:E8:59:7C:42:83:8E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/xJ5k-3yMfGtc18dwGILoWXxCg44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/xJ5k-3yMfGtc18dwGILoWXxCg44.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20116/e_EXmnomq6Xm6AHZtLtO2Ju7MIs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  43.223.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         55:46:d0:2c:2a:48:52:af:ed:81:2b:fb:c8:03:8f:89:68:6b:
         1c:06:68:86:c3:c7:80:5a:7d:1e:bc:bb:c1:66:0c:59:a7:23:
         0b:07:c7:29:04:47:ab:e7:4c:91:d0:f1:14:14:1d:fd:17:4a:
         32:6b:77:5f:2a:d8:57:ff:5d:64:ee:77:81:b8:39:8d:3f:ca:
         70:a0:37:c9:d4:29:a2:3b:fb:08:fb:35:98:c7:99:fa:c2:df:
         c9:ec:49:4e:a8:0c:e7:d7:a7:27:c1:65:26:7c:fa:a9:85:18:
         75:9b:1a:fa:10:92:18:a5:56:b8:a8:90:0c:f0:f8:85:40:99:
         46:58:e8:0c:28:72:bc:7b:38:48:8e:4b:5d:ec:95:21:0a:ac:
         f3:7f:5a:4c:dc:c9:85:01:f7:97:21:e0:69:8e:e3:84:04:d6:
         1b:7d:0d:9f:14:a9:18:3e:77:35:bd:c3:fc:15:0f:40:2f:c9:
         be:2a:aa:6c:ab:93:40:8b:86:32:82:92:24:c6:3d:bb:a8:1f:
         97:1e:8d:fa:ab:0d:a3:e7:cd:43:39:3d:cb:8a:79:f0:ce:21:
         c3:88:59:da:14:0a:4f:62:6e:e6:13:aa:77:d0:db:89:fb:7c:
         e2:52:fd:80:0d:a9:7d:bf:cd:21:aa:27:92:15:37:a2:cf:e9:
         8d:6d:e8:2e
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:11:08 2025 by rpki-client