Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/7Y8hZEwyt9g_vKUmn5RnI9rTTzo.roa
File:                     7Y8hZEwyt9g_vKUmn5RnI9rTTzo.roa (raw, json)
Hash identifier:          cz81LkEpAPlV5+JoxB5v6/F9O0MeDaG4s8wbkGXPgR0=
Subject key identifier:   ED:8F:21:64:4C:32:B7:D8:3F:BC:A5:26:9F:94:67:23:DA:D3:4F:3A
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       DD
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/7Y8hZEwyt9g_vKUmn5RnI9rTTzo.roa
Signing time:             Fri 31 May 2024 01:31:22 +0000
ROA not before:           Fri 31 May 2024 01:31:22 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        36.53.128.0/18 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 221 (0xdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:22 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=ED8F21644C32B7D83FBCA5269F946723DAD34F3A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:83:78:b8:52:f2:61:8e:9c:78:60:5a:c6:46:
                    87:75:b9:0c:b5:b3:a0:6f:96:14:5b:8a:b9:a9:09:
                    e1:ba:34:ea:34:bb:06:e0:bc:c9:73:0a:3b:98:db:
                    19:5c:53:d0:7f:2c:02:59:e1:83:1c:1c:cc:c0:ca:
                    f3:d9:32:c4:f9:56:20:6f:6d:0d:2d:b0:70:8d:5e:
                    f3:e7:6a:4d:db:88:f8:2c:42:cd:32:97:3c:80:a4:
                    41:21:d5:ef:3e:2c:a4:c7:3b:24:4d:66:b4:17:27:
                    ed:71:9b:ca:fe:fd:88:c7:3f:95:ab:3a:10:4a:38:
                    71:fe:16:cc:72:26:c4:31:54:3c:11:6b:09:d1:89:
                    c9:74:46:b2:2b:bb:ea:29:77:9b:19:1f:f2:68:2e:
                    37:ff:3c:9e:f9:7e:c9:e5:1d:9a:58:d9:53:af:89:
                    de:55:35:c8:da:d5:cc:ae:f1:fd:65:cd:96:05:c3:
                    6a:aa:4d:4f:d5:d7:27:dd:70:8a:53:03:72:5e:38:
                    bf:2a:23:93:c7:10:7a:75:36:bd:b8:47:8b:08:ad:
                    71:d1:5d:b9:be:ca:2c:77:65:13:cb:55:9a:a0:1b:
                    88:be:d9:65:22:dd:85:78:87:7d:07:69:12:fc:b4:
                    ab:38:10:21:cf:25:1b:a8:10:00:51:e6:17:cb:7a:
                    be:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:8F:21:64:4C:32:B7:D8:3F:BC:A5:26:9F:94:67:23:DA:D3:4F:3A
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/7Y8hZEwyt9g_vKUmn5RnI9rTTzo.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  36.53.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         89:ca:a0:a4:d0:2c:d9:6c:dd:7b:3c:42:ac:fb:85:58:84:13:
         03:21:35:ff:f3:0a:a2:d1:72:6c:12:84:cf:95:b1:de:da:78:
         27:7a:ed:dc:2c:1d:ef:7f:16:16:65:36:b0:d1:53:fa:f1:51:
         e9:bc:29:d1:35:a6:ed:5e:83:cf:d1:c3:b6:ea:41:83:3d:d3:
         97:05:8c:0e:d5:85:ae:f8:ba:d2:aa:43:0b:cb:fb:09:58:79:
         1f:c3:8b:d6:de:b0:0f:53:d5:71:89:62:11:07:43:3b:f3:1a:
         8b:6c:58:ad:6b:35:a3:a2:5c:a5:4e:b5:3c:91:a5:a5:94:8c:
         75:8f:4d:5b:80:c2:6d:be:06:a8:69:b1:49:41:81:0f:b9:88:
         1d:e4:fd:8c:e4:64:f7:66:9d:8d:ae:62:50:46:17:8f:13:e3:
         bf:3f:2b:7b:a0:16:a5:4a:b6:31:d9:1f:bf:1f:30:67:7b:4d:
         a4:f1:b0:82:2b:57:8a:7a:3d:6a:14:42:ae:de:ac:33:e8:1e:
         f1:0e:14:b1:b5:24:c9:87:4b:64:d1:3b:cf:10:bc:d0:d4:79:
         87:df:57:93:f9:af:57:e4:37:6b:36:21:68:56:69:2e:f5:14:
         f0:e9:03:47:14:ca:81:49:86:28:88:96:28:51:23:3f:cd:d6:
         4d:e8:75:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:17:29 2025 by rpki-client