Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20196/x9NgbiRzFK2daGH2ir4FpSop-5Y.roa
File:                     x9NgbiRzFK2daGH2ir4FpSop-5Y.roa (raw, json)
Hash identifier:          XX8XEMh0I/1CJHN5crwa4vNzKiopwnMi/JDQZs8EJpk=
Subject key identifier:   C7:D3:60:6E:24:73:14:AD:9D:68:61:F6:8A:BE:05:A5:2A:29:FB:96
Certificate issuer:       /CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
Certificate serial:       12
Authority key identifier: F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/x9NgbiRzFK2daGH2ir4FpSop-5Y.roa
Signing time:             Wed 19 Jun 2024 03:26:35 +0000
ROA not before:           Wed 19 Jun 2024 03:26:35 +0000
ROA not after:            Sun 15 Jun 2025 01:30:03 +0000
asID:                     150359
IP address blocks:        103.38.210.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 18 (0x12)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F81BD2E58E8035E57254CDB51651C4E319EFDE6B
        Validity
            Not Before: Jun 19 03:26:35 2024 GMT
            Not After : Jun 15 01:30:03 2025 GMT
        Subject: CN=C7D3606E247314AD9D6861F68ABE05A52A29FB96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f2:21:7f:bd:7a:25:02:a4:d4:c7:22:59:c5:f0:
                    be:e5:48:fe:16:76:34:f4:70:be:e6:cf:11:28:46:
                    da:33:09:d8:28:a4:84:df:83:dd:6c:27:31:94:49:
                    04:db:4e:3e:5e:27:d5:47:8e:62:f2:f3:0a:a5:f6:
                    db:9f:c2:c4:98:0b:97:e4:ce:89:d1:0e:79:8e:8a:
                    df:b6:f1:89:82:dd:89:fc:bc:af:4e:fe:0f:c3:ef:
                    cb:3d:f9:11:85:fb:e4:fb:72:87:3a:ca:4e:7a:47:
                    46:c9:38:f5:7d:ea:ad:ad:c6:ca:cc:02:03:be:61:
                    82:b3:0b:08:26:49:d2:d0:c6:16:82:f1:aa:64:74:
                    5a:c7:35:35:cb:88:5e:80:38:7f:f4:6b:be:b1:b3:
                    92:59:26:ce:e4:e8:ad:86:99:3d:84:ae:d2:dd:f9:
                    f5:b7:03:6a:cd:4b:8f:ff:0d:cc:be:f0:58:93:71:
                    54:39:73:ec:78:c3:c6:27:e4:7b:0d:81:84:9f:e2:
                    7f:ef:d0:9c:a7:63:43:1b:66:f5:8d:62:e2:8a:cd:
                    44:88:2b:fa:a5:bd:71:d8:78:18:6e:73:ed:98:c9:
                    8c:1e:5c:4b:c6:5c:28:77:c8:61:16:aa:cf:72:84:
                    4c:ed:8c:49:42:4b:bf:2a:36:aa:ad:f8:91:3a:14:
                    2b:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:D3:60:6E:24:73:14:AD:9D:68:61:F6:8A:BE:05:A5:2A:29:FB:96
            X509v3 Authority Key Identifier:
                keyid:F8:1B:D2:E5:8E:80:35:E5:72:54:CD:B5:16:51:C4:E3:19:EF:DE:6B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/-BvS5Y6ANeVyVM21FlHE4xnv3ms.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-BvS5Y6ANeVyVM21FlHE4xnv3ms.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20196/x9NgbiRzFK2daGH2ir4FpSop-5Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.38.210.0/23

    Signature Algorithm: sha256WithRSAEncryption
         73:e3:b8:26:03:a6:6a:a5:3d:87:23:d8:94:37:15:ad:e9:55:
         9d:87:2d:d3:74:37:b5:e5:3b:e6:cf:84:69:c9:39:6f:01:79:
         67:51:eb:6b:90:7e:8c:5a:76:05:5c:d9:86:61:57:b1:36:64:
         d5:f5:e4:1d:ef:1d:60:31:ea:aa:d6:e3:a8:15:c7:0e:b4:71:
         00:99:ef:18:4e:25:42:85:f0:b0:a4:f7:47:6f:7f:be:4f:f4:
         43:38:3d:9f:e2:23:ac:94:74:58:93:3a:7c:b1:2d:d2:9c:17:
         55:0e:1c:97:e7:27:ba:30:21:b3:8b:f3:6b:8d:7d:e0:6e:14:
         92:94:36:13:03:ff:45:81:77:1f:8b:cb:2d:43:48:8c:aa:76:
         80:32:c1:42:af:25:53:de:96:27:01:05:eb:dd:f8:46:5f:d8:
         a4:34:70:58:a4:a3:a3:22:84:3b:c7:c6:97:06:c5:b3:8d:52:
         ef:13:38:40:3a:f6:87:5d:75:23:03:17:2f:ad:a7:42:ec:85:
         e0:f1:8a:c7:fb:55:23:5f:18:a0:4f:30:d4:5e:2f:d0:2f:9b:
         26:65:de:92:46:73:34:8f:e3:24:7f:97:d6:4f:36:8f:dd:10:
         d9:17:0e:3b:95:32:7b:d5:43:44:14:99:88:d5:28:98:f9:82:
         e2:e9:f8:29
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:31:14 2025 by rpki-client