Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/232/Nn1-oXcUMKz_TFt_l23wf9h5rE0.roa
File:                     Nn1-oXcUMKz_TFt_l23wf9h5rE0.roa (raw, json)
Hash identifier:          FPgCOEEqlw5biqVNEayjkpTGk8d9ruDn36hD4r5PTog=
Subject key identifier:   36:7D:7E:A1:77:14:30:AC:FF:4C:5B:7F:97:6D:F0:7F:D8:79:AC:4D
Certificate issuer:       /CN=2222A4C3961E467181A78700B960718846C8404B
Certificate serial:       20
Authority key identifier: 22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Nn1-oXcUMKz_TFt_l23wf9h5rE0.roa
Signing time:             Mon 20 May 2024 06:51:53 +0000
ROA not before:           Mon 20 May 2024 06:51:53 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     7672
IP address blocks:        110.232.232.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 32 (0x20)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2222A4C3961E467181A78700B960718846C8404B
        Validity
            Not Before: May 20 06:51:53 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=367D7EA1771430ACFF4C5B7F976DF07FD879AC4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:cb:e1:48:dd:19:3e:95:ff:3b:70:a2:52:46:
                    8e:11:67:da:14:5c:99:08:c7:ba:ca:26:21:16:86:
                    8d:eb:c9:31:42:c3:b4:84:74:e1:d3:f9:ac:0f:aa:
                    d8:3d:ca:37:40:96:c6:e2:b3:38:9b:83:1b:23:40:
                    d3:f1:79:34:b6:b0:f7:99:d5:01:61:98:28:4c:0c:
                    d4:ed:7f:78:de:6a:36:0f:f0:6d:cc:0a:9d:54:be:
                    6d:42:c2:25:5b:64:72:ba:13:88:42:7c:a1:11:9c:
                    36:ab:4b:d7:31:56:19:41:f0:5b:35:ac:8e:9a:39:
                    8e:7f:87:4e:2d:f7:5c:61:b8:f3:82:90:8e:38:e1:
                    54:e0:bb:ec:a3:81:a3:2b:64:74:81:10:78:a6:83:
                    37:ba:da:be:27:ec:29:85:8e:2b:85:ac:18:68:ef:
                    b9:55:b3:88:44:aa:91:c5:14:cc:6c:17:1a:18:bc:
                    7c:4e:e9:70:3b:4b:de:fb:2f:81:e6:e8:78:e9:de:
                    f1:df:b1:fe:57:cc:dc:b5:45:d5:ee:32:07:4c:ec:
                    76:49:f5:52:23:7b:f7:83:53:4e:06:62:78:ac:a5:
                    e5:c4:51:1c:0c:b3:ec:14:98:6c:01:b3:3a:82:24:
                    43:cd:2b:78:d8:d2:88:63:89:be:d3:15:25:5e:de:
                    8f:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:7D:7E:A1:77:14:30:AC:FF:4C:5B:7F:97:6D:F0:7F:D8:79:AC:4D
            X509v3 Authority Key Identifier:
                keyid:22:22:A4:C3:96:1E:46:71:81:A7:87:00:B9:60:71:88:46:C8:40:4B

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/IiKkw5YeRnGBp4cAuWBxiEbIQEs.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/IiKkw5YeRnGBp4cAuWBxiEbIQEs.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/232/Nn1-oXcUMKz_TFt_l23wf9h5rE0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.232.232.0/22

    Signature Algorithm: sha256WithRSAEncryption
         07:05:72:85:cb:29:21:fe:97:03:e2:ba:8d:32:e9:77:9e:d9:
         81:f7:58:9b:a8:16:7b:eb:85:5e:ab:fa:2b:54:a7:37:cd:7c:
         d0:61:b3:f2:71:89:c9:9a:fb:1e:b9:63:cb:f7:16:6c:76:ed:
         66:4f:63:28:41:22:6e:f7:53:9b:ee:f9:74:84:b9:62:1f:1f:
         89:b7:fc:39:ff:73:64:47:8f:7c:c3:9b:08:b8:61:39:c5:ec:
         1a:cc:ec:31:d3:e8:ff:d5:e1:ac:46:c4:07:82:2c:6b:3d:01:
         82:65:01:4a:55:82:dc:6a:ed:86:3c:49:4f:71:87:92:b8:21:
         a3:0d:0d:9f:e6:03:f6:fb:51:b2:45:98:ca:a7:70:31:4f:a1:
         89:f8:7c:30:d1:86:39:98:f2:eb:39:98:e1:3c:cb:41:ea:5e:
         34:de:58:84:1f:52:6a:21:47:48:d8:f3:cd:03:00:1c:ff:a8:
         d7:95:72:32:8e:ac:da:42:52:6a:9e:6f:05:4a:ac:18:3f:4b:
         6d:a0:f5:36:81:cc:7d:3c:10:33:d2:0c:76:92:8b:4c:5c:56:
         2c:f5:16:bd:10:54:62:fc:d4:33:a5:f0:96:bf:46:37:2f:ec:
         dc:6f:7c:38:2a:c7:be:b9:9d:1a:ad:a3:ee:6c:ae:18:ca:1e:
         de:76:ca:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:21 2025 by rpki-client