Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QoWp_X-ss96f7SUqCn_VTxL-TpU.roa
File:                     QoWp_X-ss96f7SUqCn_VTxL-TpU.roa (raw, json)
Hash identifier:          AR1HNUdhcKyc0wLBx78hqb8cF9pTOujpIIYjV1cSto8=
Subject key identifier:   42:85:A9:FD:7F:AC:B3:DE:9F:ED:25:2A:0A:7F:D5:4F:12:FE:4E:95
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       039B
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QoWp_X-ss96f7SUqCn_VTxL-TpU.roa
Signing time:             Thu 31 Oct 2024 01:28:49 +0000
ROA not before:           Thu 31 Oct 2024 01:28:49 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     146979
IP address blocks:        103.180.131.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 923 (0x39b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Oct 31 01:28:49 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=4285A9FD7FACB3DE9FED252A0A7FD54F12FE4E95
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:5a:d5:fa:4f:66:7a:d0:90:71:bd:47:aa:21:
                    d9:51:43:79:92:21:dc:26:be:82:20:4e:a0:56:82:
                    86:65:2c:10:19:23:05:00:e8:35:78:4d:7d:f7:9a:
                    b6:5a:ab:dd:92:7d:4e:a4:dc:34:f7:8c:f9:ac:c0:
                    ed:f7:e2:18:5b:bd:54:85:fc:2a:1c:1b:66:d1:ea:
                    c1:7b:ae:a9:13:5a:a5:d6:28:6e:3a:85:c9:09:a8:
                    b7:ac:6a:52:02:42:8a:ab:eb:5c:ef:fd:81:03:de:
                    b2:61:42:62:b7:1e:34:4f:4b:71:16:b8:cb:f4:1c:
                    51:29:4b:83:f3:54:19:1f:b3:cb:c8:79:6f:eb:e5:
                    16:cf:fd:6d:ba:f6:cd:08:0b:c2:ec:d3:39:de:9c:
                    55:00:0c:d9:bc:a6:4e:9d:c7:54:ca:72:a0:fc:84:
                    11:f9:0f:7d:2d:71:03:05:c4:37:d3:eb:2d:02:91:
                    8a:d6:8d:cc:35:4d:12:bf:5c:29:66:6f:a5:8c:a6:
                    a3:18:a6:a6:20:7a:4c:8d:44:2c:3d:66:a5:7a:56:
                    94:44:20:5b:37:aa:ad:a8:75:48:da:a7:f4:8e:3b:
                    41:e3:b9:1b:e0:4f:59:4a:31:43:9b:f1:d8:f3:e3:
                    bf:90:68:c1:b9:c5:c1:d5:e2:2a:8e:b1:a5:4c:17:
                    70:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:85:A9:FD:7F:AC:B3:DE:9F:ED:25:2A:0A:7F:D5:4F:12:FE:4E:95
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/QoWp_X-ss96f7SUqCn_VTxL-TpU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.180.131.0/24

    Signature Algorithm: sha256WithRSAEncryption
         94:55:b8:23:25:86:3c:e4:96:f4:b9:59:1f:4d:ac:73:c8:2f:
         e5:cd:c2:06:c6:3e:44:39:fd:0d:ee:85:91:9b:08:a0:86:19:
         f3:1f:f0:4d:57:1a:10:48:f6:91:23:d5:56:76:9b:13:cd:1d:
         cc:7b:18:a9:d4:63:b5:dc:a7:28:44:ab:9b:39:02:b7:22:f9:
         03:ab:f7:0e:a8:19:f0:86:e7:10:22:e4:69:58:af:3c:27:9e:
         20:16:9c:af:4d:6f:75:40:8f:14:97:2c:c4:d0:15:9a:e1:92:
         50:62:09:b7:34:a2:a1:0d:44:dc:7a:75:ce:c1:24:65:e7:15:
         b8:2a:3f:01:f4:5e:84:62:a2:9a:11:b8:d8:15:8a:d7:08:2b:
         73:11:7f:ab:ff:4c:0b:ac:37:15:33:f9:5d:d5:28:f1:41:2e:
         7b:bb:b4:2f:43:18:37:2a:be:8b:48:e9:04:2e:ae:1b:4e:3e:
         ca:fa:ca:42:6c:5c:28:45:db:a1:e5:8e:03:8b:56:48:48:8b:
         8a:ce:18:60:f2:a9:72:62:65:04:b8:a4:5d:4f:ba:8d:4c:6c:
         ea:39:99:cf:1e:d3:ec:03:95:46:3d:b3:4e:44:eb:c3:cf:f2:
         c6:ec:d9:1d:20:aa:4c:a4:42:b3:1e:e9:6f:ed:68:b5:3a:e9:
         21:1e:1b:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:49 2025 by rpki-client