Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/_lpsikoeJ-cnENlS5gIPv6rwDds.roa
File:                     _lpsikoeJ-cnENlS5gIPv6rwDds.roa (raw, json)
Hash identifier:          lRF9sVi6v3PeIzL/YXa5NXAz8vGHwAa4cgtkP0ILmaw=
Subject key identifier:   FE:5A:6C:8A:4A:1E:27:E7:27:10:D9:52:E6:02:0F:BF:AA:F0:0D:DB
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       04
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/_lpsikoeJ-cnENlS5gIPv6rwDds.roa
Signing time:             Thu 04 Jul 2024 08:25:40 +0000
ROA not before:           Thu 04 Jul 2024 08:25:40 +0000
ROA not after:            Thu 03 Jul 2025 05:04:45 +0000
asID:                     18282
IP address blocks:        124.240.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jul  4 08:25:40 2024 GMT
            Not After : Jul  3 05:04:45 2025 GMT
        Subject: CN=FE5A6C8A4A1E27E72710D952E6020FBFAAF00DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:ca:56:4f:ef:4d:cf:c3:ae:39:c8:b8:9f:
                    0a:14:bf:ed:8c:c4:69:ae:7d:21:98:74:27:46:49:
                    07:07:b7:32:ae:92:2f:42:72:d0:6e:7b:e4:6a:cd:
                    20:d2:60:2c:e4:7b:01:be:4f:5e:81:71:5d:ca:01:
                    ac:96:56:ad:b9:c8:a0:ae:3e:0a:1b:6c:83:46:19:
                    08:09:50:0b:7f:68:f3:46:c3:68:61:44:b7:8a:4a:
                    49:de:22:11:60:b7:e2:94:12:14:a7:ed:0b:88:c6:
                    23:37:30:4c:05:88:f0:4a:df:e8:ac:35:a5:f6:fe:
                    02:ee:08:51:4e:b3:d7:48:94:d9:c7:1c:68:3d:4e:
                    71:22:45:1d:dc:70:c3:af:ab:97:ae:79:46:57:32:
                    5b:64:f0:44:ec:e3:48:d7:0c:1d:a5:bb:be:ba:ba:
                    0b:e0:08:23:02:87:d2:4c:ee:00:7f:9d:ec:8f:1d:
                    e8:0c:69:6b:b9:28:06:24:81:87:aa:d5:5a:91:51:
                    4e:fb:a6:de:25:05:20:07:cc:e4:4b:c5:d2:b3:a5:
                    f3:b9:d1:fb:6f:91:d7:51:ec:74:2a:d7:b1:9d:e1:
                    18:14:74:8a:17:e9:9b:a3:40:ba:61:cd:e5:a4:d6:
                    00:a2:45:15:c1:ae:56:69:1b:ed:01:1e:94:d3:73:
                    86:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:5A:6C:8A:4A:1E:27:E7:27:10:D9:52:E6:02:0F:BF:AA:F0:0D:DB
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/_lpsikoeJ-cnENlS5gIPv6rwDds.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  124.240.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:18:e6:ab:db:1c:fb:be:61:5e:cb:0c:3e:09:35:8c:3f:8a:
         38:b8:34:19:6b:1f:96:2f:05:a4:79:56:53:d1:c7:40:3c:3e:
         bb:23:e6:3f:bc:53:56:31:2e:14:15:2e:e1:c5:23:be:7f:f0:
         0e:66:31:3b:c5:c2:02:51:f9:58:b1:d8:36:f9:bc:ac:62:72:
         53:68:23:85:15:be:55:a0:4d:5f:82:f5:b8:ed:e4:18:54:26:
         fa:f7:f2:ab:ad:b7:a2:cb:aa:f4:a1:80:de:95:da:e9:4d:f5:
         ec:b9:57:dc:e9:51:83:c2:63:06:8e:10:5a:e3:56:f9:da:48:
         c8:74:fa:f8:3b:13:41:c0:f6:d1:cb:69:0d:a8:5a:c6:55:7a:
         b6:98:e1:ca:87:4a:a4:50:a5:08:ba:94:58:e8:2f:d5:6c:02:
         8c:19:75:7c:86:6d:90:c7:cb:4e:73:9f:d2:8d:a8:ad:34:a5:
         b7:0a:53:31:ee:61:d8:d7:26:df:8b:12:48:29:3a:5a:69:4c:
         20:1f:8e:fd:ec:b8:24:f6:3e:35:a1:2c:bb:8d:88:5e:66:c9:
         72:81:6a:54:9e:2e:f3:de:d0:4c:4b:c6:f2:46:62:a6:a2:ed:
         47:f4:0f:f6:d9:8f:c4:aa:b7:78:40:c3:3e:df:da:98:22:67:
         fc:5e:c4:14
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:21:07 2025 by rpki-client