Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/20214/XeA5ylDtb-s48_LxIZwUMsAdYoA.roa
File:                     XeA5ylDtb-s48_LxIZwUMsAdYoA.roa (raw, json)
Hash identifier:          3pKBvF0Hnsthcwi5Z/B6yv5rqW+jwwyG3dDJJBbmcG4=
Subject key identifier:   5D:E0:39:CA:50:ED:6F:EB:38:F3:F2:F1:21:9C:14:32:C0:1D:62:80
Certificate issuer:       /CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
Certificate serial:       14
Authority key identifier: 25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/XeA5ylDtb-s48_LxIZwUMsAdYoA.roa
Signing time:             Sun 30 Jun 2024 13:41:50 +0000
ROA not before:           Sun 30 Jun 2024 13:41:50 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     63801
IP address blocks:        103.131.150.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=250E82975D8291C44AA7E53EA15124F0EEA20B05
        Validity
            Not Before: Jun 30 13:41:50 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=5DE039CA50ED6FEB38F3F2F1219C1432C01D6280
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:88:fa:33:78:87:f7:a5:d0:da:cf:7e:a7:94:
                    31:71:96:f8:e9:39:d4:d6:6f:bd:36:27:d9:be:97:
                    ee:43:a2:f7:27:b8:c4:4c:b8:b3:58:b0:d4:4b:0e:
                    1e:96:ae:e8:f7:62:79:58:81:e9:5d:e8:39:e9:e0:
                    c6:65:d0:95:e5:6f:ad:6c:bc:26:e0:a2:85:26:46:
                    80:ef:7d:cf:02:ac:4c:6a:d3:b2:41:4f:fe:a3:61:
                    58:f9:b3:ff:8a:66:34:53:b2:c3:f9:89:b8:53:39:
                    78:13:ef:14:bf:d8:42:72:f9:f5:7f:a8:f6:a5:84:
                    8a:bf:b0:aa:b6:b3:7e:d3:80:a3:a0:3d:66:09:20:
                    b1:0c:8a:3f:f7:28:d8:bf:47:25:bd:09:39:33:b6:
                    14:2f:4c:33:39:74:60:56:9c:df:6a:48:77:c4:4b:
                    e8:cb:71:99:8e:0a:24:3e:ab:1c:88:ae:ea:6c:86:
                    51:b6:a6:07:64:b7:0b:9c:1a:ff:b6:8e:3d:d1:98:
                    bc:76:4d:97:07:8e:27:45:d8:ec:d9:57:b5:1b:cb:
                    dc:d1:6b:5e:fc:48:cf:1c:46:14:b1:e3:e9:1a:ca:
                    43:a6:02:c6:ce:3a:38:d4:a4:aa:71:59:4d:65:28:
                    84:8b:07:fd:39:d1:b2:f7:08:fe:2a:89:df:49:df:
                    48:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:E0:39:CA:50:ED:6F:EB:38:F3:F2:F1:21:9C:14:32:C0:1D:62:80
            X509v3 Authority Key Identifier:
                keyid:25:0E:82:97:5D:82:91:C4:4A:A7:E5:3E:A1:51:24:F0:EE:A2:0B:05

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/JQ6Cl12CkcRKp-U-oVEk8O6iCwU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/20214/XeA5ylDtb-s48_LxIZwUMsAdYoA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.131.150.0/24

    Signature Algorithm: sha256WithRSAEncryption
         5c:65:f3:8f:1e:18:eb:e3:d1:97:fd:1a:c0:6c:94:a2:a5:6a:
         a6:72:b8:d6:33:06:b5:9d:f3:d2:d2:63:24:7b:4d:70:89:ff:
         c8:fe:c9:a1:51:ad:b9:c0:ec:fe:8b:68:2e:64:39:25:c2:8e:
         91:c7:65:47:76:e2:cc:53:09:25:43:1a:66:35:69:bd:93:30:
         1a:7b:b4:d9:71:36:83:08:58:d8:8b:58:ac:7b:3b:20:e3:eb:
         b0:9c:8d:df:64:ed:36:71:6f:80:58:c2:dc:cd:80:aa:a7:70:
         48:21:16:cf:fd:d8:67:74:14:32:b1:f9:30:c8:c2:56:b1:1a:
         1d:2d:05:62:bd:de:b6:18:af:27:32:5b:30:77:7a:2e:a1:35:
         91:f1:6c:62:9b:91:e1:73:b8:cd:2f:a0:b0:a4:ed:89:b5:f7:
         e3:1c:32:e0:61:91:05:8a:4d:c9:b3:bf:91:94:7f:db:03:58:
         c4:e0:3f:0b:b1:68:39:36:1b:2b:68:b1:01:1e:04:73:39:87:
         ef:6a:f2:67:17:5d:1e:fe:1b:2c:99:5a:d5:99:db:b5:d5:5d:
         63:c9:2d:b4:9a:09:1b:20:ad:fb:d0:78:09:4a:0d:d8:0e:48:
         63:7f:5f:e7:f0:84:72:90:e2:e8:c9:b9:3f:c1:3b:8e:10:89:
         17:80:39:ce
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 21:54:07 2025 by rpki-client