Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/21116/3krgxq865Ozatn316bmxY9mN6oA.roa
File:                     3krgxq865Ozatn316bmxY9mN6oA.roa (raw, json)
Hash identifier:          clKtkDSAosZ/sGUlxRNdueXpXUqQf1MKe/upblcHmcU=
Subject key identifier:   DE:4A:E0:C6:AF:3A:E4:EC:DA:B6:7D:F5:E9:B9:B1:63:D9:8D:EA:80
Certificate issuer:       /CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
Certificate serial:       56
Authority key identifier: 72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/3krgxq865Ozatn316bmxY9mN6oA.roa
Signing time:             Sun 30 Jun 2024 01:31:50 +0000
ROA not before:           Sun 30 Jun 2024 01:31:50 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     23816
IP address blocks:        203.95.16.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 86 (0x56)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=72F8ABBA4AB4F650B2C69BA8C6CA5ED22DFE354F
        Validity
            Not Before: Jun 30 01:31:50 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=DE4AE0C6AF3AE4ECDAB67DF5E9B9B163D98DEA80
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:ee:9f:92:b4:3d:08:03:47:8d:f1:dd:bd:
                    27:c3:ae:c3:6e:93:c2:1a:40:56:02:e4:c0:76:8a:
                    09:97:8c:1e:c2:4c:62:ae:f1:60:f6:b0:5d:5f:d4:
                    60:1a:4f:93:a3:f8:4b:cf:ea:46:7f:00:ac:4f:7c:
                    a7:22:76:3f:f1:f8:b6:01:e6:00:8c:5a:b1:22:64:
                    16:21:e2:98:65:4f:d1:d5:f5:e3:cf:c5:7d:f2:c7:
                    7d:84:a6:fb:f1:22:68:36:ec:33:ef:92:27:ee:8a:
                    f2:0d:ba:4d:ad:59:7c:73:8e:f0:8a:c7:7a:a8:be:
                    c2:ec:03:19:18:40:05:d1:04:94:f0:1a:f0:5b:ae:
                    5c:2c:72:ec:ed:f3:ec:52:d1:74:a9:ac:f9:88:b1:
                    99:2e:41:f4:4f:aa:71:87:12:52:25:f1:31:5f:12:
                    bf:5d:b9:36:ed:8d:90:bd:cb:3d:f4:e1:bf:7a:a7:
                    c1:a4:43:20:bf:1e:86:1e:d2:ba:23:05:7d:cc:7f:
                    f5:fa:a2:25:a9:09:8d:3f:fc:39:cf:39:2c:15:35:
                    27:c2:95:98:0a:af:14:c4:71:22:a2:12:84:ae:fe:
                    33:5b:0a:61:fb:79:21:5a:e4:78:12:5f:a5:93:16:
                    79:a3:8e:56:46:a5:b5:e4:bb:2e:10:fc:c2:27:97:
                    f9:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4A:E0:C6:AF:3A:E4:EC:DA:B6:7D:F5:E9:B9:B1:63:D9:8D:EA:80
            X509v3 Authority Key Identifier:
                keyid:72:F8:AB:BA:4A:B4:F6:50:B2:C6:9B:A8:C6:CA:5E:D2:2D:FE:35:4F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/cvirukq09lCyxpuoxspe0i3-NU8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/cvirukq09lCyxpuoxspe0i3-NU8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/21116/3krgxq865Ozatn316bmxY9mN6oA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.95.16.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6d:0d:9f:c0:5b:bc:3f:f1:93:a4:ed:07:6c:dc:ec:38:76:5f:
         2e:18:af:22:87:ec:b3:9e:83:9e:7e:7f:d0:10:fe:7c:3e:90:
         6c:f0:ba:1d:bd:0f:95:e5:f2:18:bc:8a:52:f4:e0:c3:7e:60:
         6d:f0:f5:92:b4:4e:ff:63:6a:6b:52:a3:81:27:61:32:45:72:
         f0:25:00:71:4e:cb:39:4f:65:8c:62:c1:5a:48:71:a9:64:e7:
         73:9c:54:aa:ab:18:5c:c9:ca:a2:39:d1:e5:cc:5e:ea:fd:0c:
         f2:81:d4:33:62:2b:97:98:0a:6b:79:c7:3f:f6:29:74:a3:1e:
         2f:71:32:d5:8c:f6:ac:bc:d4:31:35:8b:d1:06:2e:a4:08:a3:
         27:95:cb:8f:81:c4:16:a8:b1:6f:c3:56:75:3a:38:75:39:76:
         dd:4e:e1:ec:96:e6:eb:5b:f9:ee:ce:63:95:b7:87:42:3a:62:
         4e:b0:c8:27:bc:e7:80:86:e2:c8:e4:90:b1:b4:dc:e6:4d:ae:
         6c:fe:6e:40:ec:13:72:c3:b7:3a:1a:22:69:5c:e5:91:3a:46:
         de:81:af:e9:e2:c4:ea:7e:55:48:11:e8:76:c2:7e:6c:ab:18:
         3d:9f:b0:b1:1f:ff:c9:88:9a:e2:81:f3:c4:70:3a:34:13:61:
         80:1e:c4:22
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:22:33 2025 by rpki-client