Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20183/irJrQy8MlNnq4rv5LJyQ_oNjM1I.roa
File:                     irJrQy8MlNnq4rv5LJyQ_oNjM1I.roa (raw, json)
Hash identifier:          w+J00PnmmPm47ppuetZX3ueWcs43L4pniwsW6Q8P7e8=
Subject key identifier:   8A:B2:6B:43:2F:0C:94:D9:EA:E2:BB:F9:2C:9C:90:FE:83:63:33:52
Certificate issuer:       /CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
Certificate serial:       0395
Authority key identifier: 16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/irJrQy8MlNnq4rv5LJyQ_oNjM1I.roa
Signing time:             Thu 27 Jun 2024 04:08:11 +0000
ROA not before:           Thu 27 Jun 2024 04:08:11 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     150357
IP address blocks:        103.13.27.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 917 (0x395)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1606BEB137B88DBBEEBA7851A0A8F8D7D18294AF
        Validity
            Not Before: Jun 27 04:08:11 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=8AB26B432F0C94D9EAE2BBF92C9C90FE83633352
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:50:1f:00:81:b9:a4:f1:22:3f:f9:16:d8:de:
                    5b:71:df:19:55:be:c8:12:bf:84:32:25:2b:cf:5c:
                    e6:a0:55:2d:0b:f9:af:e4:41:c2:e9:d8:67:cc:4f:
                    9d:04:a0:38:9b:02:b1:bf:48:b0:8e:a7:3b:3a:a6:
                    67:08:d0:54:25:79:8c:be:4c:d2:03:d0:c1:52:19:
                    c6:06:69:22:1a:97:7e:75:f4:0d:c3:a1:27:d8:36:
                    85:df:bd:6b:d1:67:5c:75:6f:a5:a5:0a:a4:5f:02:
                    2c:36:ff:ec:b8:38:83:1a:62:07:3a:69:57:42:13:
                    75:73:da:dc:20:d8:b6:3c:f4:55:a7:9c:68:f2:90:
                    63:43:81:49:d7:68:87:18:e2:98:da:88:fc:85:33:
                    b7:6b:e1:e5:15:58:9a:58:25:24:f7:1b:cc:46:37:
                    78:f5:c3:b6:af:bb:62:33:00:50:c0:5c:9f:96:3d:
                    fe:dc:c6:a6:1c:8a:97:8e:fb:10:cd:d3:ed:d6:50:
                    ac:29:1d:bb:e7:44:b7:6b:ec:0e:df:6a:0e:a4:94:
                    3e:79:d3:94:f3:5f:d8:66:3d:54:b8:ab:f7:64:25:
                    39:13:74:3b:b4:29:3e:21:a5:f0:84:66:1c:66:18:
                    e6:70:ac:63:16:a0:34:65:0d:45:a3:fc:1a:ef:a2:
                    33:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:B2:6B:43:2F:0C:94:D9:EA:E2:BB:F9:2C:9C:90:FE:83:63:33:52
            X509v3 Authority Key Identifier:
                keyid:16:06:BE:B1:37:B8:8D:BB:EE:BA:78:51:A0:A8:F8:D7:D1:82:94:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/Fga-sTe4jbvuunhRoKj419GClK8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Fga-sTe4jbvuunhRoKj419GClK8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20183/irJrQy8MlNnq4rv5LJyQ_oNjM1I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.13.27.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:11:e9:ea:b5:f5:a7:ae:14:00:f5:eb:29:ed:14:c7:3f:68:
         87:b3:3a:f4:29:60:53:f6:b2:5d:85:18:62:3f:d5:6c:2c:e0:
         22:eb:b7:20:f5:a4:30:0d:57:5c:6d:ce:a7:5f:45:3d:1d:15:
         7e:ea:8c:00:e0:06:eb:00:10:65:d0:44:c0:8d:79:c7:03:50:
         32:45:59:45:8b:ca:53:6e:b0:85:a0:47:3e:e6:32:49:4e:63:
         ef:28:96:44:cf:49:d3:8d:e7:78:ff:15:77:fa:97:e2:b8:61:
         11:7e:7d:df:7d:f8:3b:9b:b0:b0:a5:97:fe:a4:aa:60:d8:d5:
         f5:1b:12:1a:04:9c:1c:ed:ac:50:fb:02:af:8e:d7:04:a6:c7:
         b9:96:28:60:40:8f:d1:f2:76:1e:b3:65:a8:aa:a3:c8:26:b7:
         6c:7d:75:44:07:24:e9:1b:5f:93:08:f5:0b:46:5b:3b:9d:4e:
         36:e0:24:3e:51:83:5b:c8:90:06:06:16:0e:d8:1e:d0:95:76:
         53:76:16:c1:29:c5:a3:0f:32:ca:63:76:e2:7f:0d:89:a3:00:
         07:8e:d4:bb:e0:06:89:c6:29:82:2c:8b:72:1b:51:e5:01:d5:
         37:a3:aa:d8:bc:1c:31:15:60:57:5d:24:98:6e:1f:c2:95:58:
         8f:4b:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:14 2025 by rpki-client