Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20160/hCupn6WRMGc2iPWwYAaHz-MSBYw.roa
File:                     hCupn6WRMGc2iPWwYAaHz-MSBYw.roa (raw, json)
Hash identifier:          wKrLOSZSRYphEZfjn/QeP4M4a4zX3yn4wG/eXIyx3aQ=
Subject key identifier:   84:2B:A9:9F:A5:91:30:67:36:88:F5:B0:60:06:87:CF:E3:12:05:8C
Certificate issuer:       /CN=050401C788B569B3D440041730E28A991F4018D2
Certificate serial:       07
Authority key identifier: 05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/hCupn6WRMGc2iPWwYAaHz-MSBYw.roa
Signing time:             Fri 05 Jul 2024 01:40:14 +0000
ROA not before:           Fri 05 Jul 2024 01:40:14 +0000
ROA not after:            Thu 03 Jul 2025 05:04:45 +0000
asID:                     18282
IP address blocks:        202.226.104.0/23 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 7 (0x7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=050401C788B569B3D440041730E28A991F4018D2
        Validity
            Not Before: Jul  5 01:40:14 2024 GMT
            Not After : Jul  3 05:04:45 2025 GMT
        Subject: CN=842BA99FA59130673688F5B0600687CFE312058C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:5b:59:17:36:df:b1:61:13:b9:54:c3:24:45:
                    59:d1:4f:8d:7f:03:a1:4d:58:30:45:1d:de:72:47:
                    1c:fa:ed:12:0c:62:f3:42:1c:58:cd:c8:02:8b:21:
                    b2:99:c8:a4:70:9d:f4:31:74:e8:dd:b6:77:b1:b7:
                    7e:aa:02:74:6c:97:c6:b2:62:94:11:e3:53:f1:bc:
                    c4:33:f6:2a:6a:ca:b1:58:42:84:30:2d:67:60:19:
                    28:5e:4f:c4:2d:cd:f3:29:7f:81:9d:2c:a9:e4:8a:
                    be:4c:b8:ce:92:cb:ed:3d:8a:28:4f:7d:f5:44:90:
                    3c:d0:93:51:dd:cd:8c:9a:c8:27:40:d9:90:65:4e:
                    1d:aa:03:95:31:53:ee:3c:90:7d:7d:5e:3d:cd:6b:
                    47:73:4c:27:5b:a4:30:a2:ed:3d:ec:69:94:23:aa:
                    34:2f:30:de:83:b3:e0:85:d3:84:c0:4e:69:28:88:
                    31:23:d3:f8:25:21:0e:c0:77:df:10:3b:47:4f:82:
                    20:bf:b9:ec:72:c8:65:cc:c3:ca:90:04:aa:87:64:
                    f6:4f:53:22:ae:55:d0:15:61:b1:73:83:f3:b1:89:
                    f6:6e:30:e0:53:4f:39:52:da:5c:c5:67:16:00:70:
                    bc:94:4a:8f:e4:64:cd:b8:ae:79:67:46:42:9e:91:
                    9a:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:2B:A9:9F:A5:91:30:67:36:88:F5:B0:60:06:87:CF:E3:12:05:8C
            X509v3 Authority Key Identifier:
                keyid:05:04:01:C7:88:B5:69:B3:D4:40:04:17:30:E2:8A:99:1F:40:18:D2

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/BQQBx4i1abPUQAQXMOKKmR9AGNI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BQQBx4i1abPUQAQXMOKKmR9AGNI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20160/hCupn6WRMGc2iPWwYAaHz-MSBYw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.226.104.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b8:54:5a:89:8f:7a:2b:21:1c:b9:bb:a3:86:1a:dd:c2:3b:e8:
         73:61:16:77:bb:fe:9b:17:60:41:76:4c:b7:3a:21:dd:bf:6f:
         60:45:df:f7:17:16:46:0b:89:1c:94:f4:8b:eb:55:19:ca:f0:
         54:c7:cc:45:ab:59:46:ae:1d:36:b5:16:ca:97:52:0c:56:84:
         bc:91:ca:fe:a7:3e:fc:6c:c5:20:61:7c:9c:d3:27:27:bc:bb:
         3a:cb:1e:5b:69:59:42:1f:b6:57:1d:42:cf:e6:bb:74:75:96:
         fa:55:f1:7d:15:d6:d4:da:15:78:a6:23:b8:3b:6f:ad:8e:49:
         a1:72:7a:fe:ee:08:16:d2:96:e3:e9:e0:22:e9:e2:47:2c:02:
         f5:89:a1:17:e4:10:8b:53:54:7b:c5:3c:60:7e:00:9f:55:a0:
         7d:ca:34:81:d7:55:cd:93:0a:f0:6a:97:32:74:6d:f6:ea:3b:
         01:2b:78:9e:a5:d2:69:54:42:8a:fa:e3:77:29:de:a8:74:1f:
         22:09:c0:53:15:e1:fc:4f:a6:fe:49:7e:e3:13:d8:eb:63:62:
         c7:f5:8a:07:04:18:65:aa:61:f6:43:89:15:7c:2a:10:07:03:
         ed:6a:0f:17:c3:5e:e7:7d:f4:26:c2:7b:50:8c:9d:18:b1:ed:
         dc:f8:05:d8
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:48 2025 by rpki-client