Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/240/HNy-BDiCKuiXU3KdTP02xr1DqS4.roa
File:                     HNy-BDiCKuiXU3KdTP02xr1DqS4.roa (raw, json)
Hash identifier:          BvwD8oimA4vhhacG77MD8NDbMGxSwoOMBC28vLizrG4=
Subject key identifier:   1C:DC:BE:04:38:82:2A:E8:97:53:72:9D:4C:FD:36:C6:BD:43:A9:2E
Certificate issuer:       /CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
Certificate serial:       2C
Authority key identifier: B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HNy-BDiCKuiXU3KdTP02xr1DqS4.roa
Signing time:             Sat 03 Aug 2024 02:01:50 +0000
ROA not before:           Sat 03 Aug 2024 02:01:50 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     9597
IP address blocks:        202.164.224.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 23:55:32 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B96964A7CE0A58F4AE3673F47D7A1D425BE4A07D
        Validity
            Not Before: Aug  3 02:01:50 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=1CDCBE0438822AE89753729D4CFD36C6BD43A92E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:41:da:9e:d6:42:ed:4b:30:d9:cb:f6:f7:00:
                    a8:b1:43:8d:1c:12:b4:50:64:d1:d0:1b:2f:a4:e3:
                    bf:f7:02:e9:fd:2d:eb:78:bc:98:c6:05:4a:32:46:
                    13:29:ab:02:ce:53:72:29:d0:5b:35:89:59:d9:52:
                    84:b4:e0:32:f4:16:91:48:15:7a:e8:4d:aa:44:c2:
                    d7:e5:61:35:65:aa:3a:9a:f1:0a:56:29:a0:16:3d:
                    15:54:c1:23:91:43:1d:67:ae:ba:96:1a:15:a5:8b:
                    56:4c:95:0b:18:3c:42:57:ed:b6:4d:24:d5:f9:3a:
                    18:6c:24:89:be:fd:51:72:73:60:1c:97:68:ad:a5:
                    43:0a:d5:37:a8:da:65:6f:0e:cb:b6:1b:d2:41:bb:
                    6f:4a:92:ad:90:a6:23:6d:ca:96:dc:ce:e6:c5:81:
                    df:71:2c:4f:b3:0d:2f:7b:01:3c:fd:11:54:29:8d:
                    b9:19:33:c3:02:8d:4e:fd:a8:bd:24:a2:5c:c1:d0:
                    48:4b:c1:f6:9b:16:3a:6a:81:56:ef:85:25:1f:fd:
                    72:2d:09:53:2b:f1:00:3f:41:59:2e:2e:75:93:22:
                    fa:30:10:53:bc:46:19:58:35:83:0f:cf:d7:67:d7:
                    ab:78:d1:c1:92:57:60:8e:32:b5:c8:2c:2b:52:bc:
                    d5:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:BE:04:38:82:2A:E8:97:53:72:9D:4C:FD:36:C6:BD:43:A9:2E
            X509v3 Authority Key Identifier:
                keyid:B9:69:64:A7:CE:0A:58:F4:AE:36:73:F4:7D:7A:1D:42:5B:E4:A0:7D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/uWlkp84KWPSuNnP0fXodQlvkoH0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/uWlkp84KWPSuNnP0fXodQlvkoH0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/240/HNy-BDiCKuiXU3KdTP02xr1DqS4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.164.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         29:91:bb:06:a7:02:d8:43:57:c2:f3:23:31:c5:57:a4:21:cc:
         f0:d6:a0:98:46:be:bb:49:54:8e:f7:bb:63:c7:18:5d:3f:e8:
         1b:e5:4e:50:95:bb:9d:15:59:a8:9b:a7:fe:fe:6a:f2:96:55:
         10:9a:cf:af:6b:17:1e:44:6a:b8:3e:ea:4f:13:92:89:80:fd:
         ab:5e:1e:72:62:00:0b:cd:f8:1a:da:9a:39:35:f3:13:2d:40:
         fc:c8:01:ac:73:d3:ff:d6:f6:70:ef:e2:b3:98:4f:93:a2:c5:
         19:ab:b2:aa:7c:1c:ff:e1:28:0a:c2:7e:aa:26:dc:44:39:f7:
         51:75:cd:00:c0:b3:a3:d9:49:a1:a7:e7:3c:2c:af:ff:5a:ec:
         25:5d:16:2d:d7:23:32:d1:38:b2:b8:11:f9:6e:ef:11:24:b8:
         57:57:bb:09:12:fb:07:b7:64:c0:81:f5:12:63:4e:63:1a:04:
         12:f6:37:af:9f:e1:14:9c:3d:aa:8e:8f:4f:21:b0:b6:66:b8:
         13:ca:0c:90:bb:52:8d:22:f6:86:ca:e3:21:8f:6b:3a:06:49:
         0a:86:a2:89:1e:b0:67:0b:fb:4b:84:13:d0:87:d9:c8:69:60:
         fb:c1:a2:eb:63:88:99:d4:7d:d7:1c:97:76:b6:86:10:18:75:
         3b:fc:53:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:55:57 2025 by rpki-client