Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/deJqhwHtn72EHwF28FOkFY1yWK0.roa
File:                     deJqhwHtn72EHwF28FOkFY1yWK0.roa (raw, json)
Hash identifier:          zwAq6vkPoqN4NjR1Om81Uz6A42pvr3G0WygL2v5MLCc=
Subject key identifier:   75:E2:6A:87:01:ED:9F:BD:84:1F:01:76:F0:53:A4:15:8D:72:58:AD
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       08
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/deJqhwHtn72EHwF28FOkFY1yWK0.roa
Signing time:             Fri 05 Jul 2024 01:40:14 +0000
ROA not before:           Fri 05 Jul 2024 01:40:14 +0000
ROA not after:            Thu 03 Jul 2025 05:04:45 +0000
asID:                     18282
IP address blocks:        202.238.0.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 8 (0x8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jul  5 01:40:14 2024 GMT
            Not After : Jul  3 05:04:45 2025 GMT
        Subject: CN=75E26A8701ED9FBD841F0176F053A4158D7258AD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:f5:9e:a9:90:49:e5:24:ef:04:ad:01:b3:87:
                    de:6f:6f:6c:04:e5:51:be:fc:9a:73:e2:3f:30:27:
                    42:9d:50:75:fb:49:00:d4:be:ea:49:af:d3:62:c1:
                    d1:70:4c:a3:ff:b5:ef:90:a8:73:ff:67:9a:f2:2a:
                    7f:14:be:fd:37:bc:0b:09:78:7d:72:8d:13:3a:a3:
                    80:1f:0e:c7:a6:19:77:77:ff:d7:93:d4:f4:7d:6d:
                    f2:66:f3:6a:e1:65:72:78:32:32:be:27:da:6a:12:
                    20:5b:75:98:ff:57:83:e1:a8:e6:f4:6f:85:61:9f:
                    b3:e1:66:2d:6b:70:ed:93:e8:33:25:e7:5f:6e:40:
                    57:0f:6f:b6:6d:9b:d1:c7:5e:f2:9c:c5:41:38:16:
                    c0:3d:df:ee:ec:1c:87:6c:4c:56:57:3e:3f:3c:d5:
                    2e:5f:01:eb:c0:19:a7:ad:5e:2e:ca:25:53:a3:a2:
                    a8:8d:60:5e:13:37:bc:a7:ca:fc:ca:7b:7f:cd:85:
                    7c:01:50:c3:d1:2d:6e:1d:16:9b:a4:a9:ab:f8:bf:
                    96:76:e8:fc:f5:22:ec:c9:af:c9:8d:b2:2d:bb:3a:
                    a3:5e:d3:65:9f:e9:7f:e4:04:cc:ad:20:8f:49:b9:
                    7a:5c:f6:f4:3d:e8:71:2a:9c:47:20:d0:73:be:83:
                    0b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:6A:87:01:ED:9F:BD:84:1F:01:76:F0:53:A4:15:8D:72:58:AD
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/deJqhwHtn72EHwF28FOkFY1yWK0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.238.0.0/20

    Signature Algorithm: sha256WithRSAEncryption
         97:c3:7d:82:1d:6a:25:5d:0f:96:51:45:eb:1a:ec:ea:7d:ba:
         ea:87:3f:62:19:72:98:a9:c9:e0:ec:cf:8e:a6:3d:89:16:e6:
         8e:f1:f4:ad:8e:ca:5f:86:b4:52:41:a8:da:d6:9f:4e:58:52:
         8b:fa:e1:ce:62:70:97:f1:1c:a4:85:1c:5d:e6:a4:75:11:18:
         c9:f9:d3:66:02:c0:72:59:e5:40:cc:ac:e3:53:eb:1e:ef:68:
         47:d1:f0:d4:e9:08:f3:18:02:c0:3c:fb:67:a8:6b:c9:cf:fb:
         2f:16:27:d6:dd:73:2c:25:07:e5:fe:74:71:f1:a9:ad:31:cd:
         f3:4e:46:45:e0:4e:99:59:9a:2a:01:d4:0e:fd:d5:06:91:e0:
         73:23:20:3b:82:e2:5f:d2:87:fa:9d:38:b8:ab:f0:de:47:fe:
         bc:5e:83:17:11:21:be:1e:11:c0:dd:b1:44:c7:f7:fe:21:14:
         a4:45:a2:47:cf:33:21:ca:9d:71:14:9e:78:b7:0e:24:c9:7f:
         09:89:53:b8:5e:34:53:8a:ae:7b:0e:85:20:92:06:27:a1:57:
         06:7c:85:41:d6:4f:c6:75:c7:ef:8e:e7:4c:9e:41:f2:fb:1f:
         af:50:bf:78:88:6c:4b:af:01:de:f3:d7:70:a0:71:40:fb:c0:
         de:9f:22:5f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:08 2025 by rpki-client