Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/247/N8oTmAePWLfGiUs9eyP2U0izQ0I.roa
File:                     N8oTmAePWLfGiUs9eyP2U0izQ0I.roa (raw, json)
Hash identifier:          7z/HDmp3itWj2mOWMG09584Zy0U8R2z4A/pyF58bfzo=
Subject key identifier:   37:CA:13:98:07:8F:58:B7:C6:89:4B:3D:7B:23:F6:53:48:B3:43:42
Certificate issuer:       /CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
Certificate serial:       D6
Authority key identifier: 9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/N8oTmAePWLfGiUs9eyP2U0izQ0I.roa
Signing time:             Fri 31 May 2024 01:31:19 +0000
ROA not before:           Fri 31 May 2024 01:31:19 +0000
ROA not after:            Thu 15 May 2025 01:30:03 +0000
asID:                     9370
IP address blocks:        163.43.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 214 (0xd6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A21BDFF2DCAFCC138F5BFD6C0330D0219E0F532
        Validity
            Not Before: May 31 01:31:19 2024 GMT
            Not After : May 15 01:30:03 2025 GMT
        Subject: CN=37CA1398078F58B7C6894B3D7B23F65348B34342
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:67:94:ba:49:f2:26:3b:95:e3:41:bd:16:7d:
                    0a:4f:fe:6a:52:bc:81:61:57:32:c9:ea:95:9a:89:
                    58:90:85:1c:cb:a3:5e:41:e9:a7:de:9b:2a:4c:e8:
                    8d:1c:73:2a:84:1d:f8:98:3f:06:f9:ba:77:54:1f:
                    76:87:fb:61:fb:08:31:12:bf:10:5a:e6:59:4b:db:
                    2e:dc:60:5a:24:51:7a:93:8a:cb:ba:72:af:69:5d:
                    b8:2a:52:01:0b:e4:f8:15:d0:5f:27:97:83:0b:cd:
                    75:e6:66:d3:b1:58:9a:dd:d8:dc:8e:0e:a6:7f:e4:
                    3d:37:cc:c3:a5:ad:3c:98:53:b0:a3:49:50:1a:13:
                    a7:9b:3a:c8:12:e7:75:25:26:46:1e:c5:66:c0:16:
                    b1:2a:da:0c:f5:9f:d4:41:d0:b4:10:b5:0f:2d:20:
                    2a:05:2b:bc:75:aa:1a:f7:73:dc:11:fb:61:01:f9:
                    90:46:1e:8a:db:03:7e:fa:58:81:35:82:50:64:10:
                    34:c4:e4:87:63:f1:1c:09:0b:b8:aa:0a:10:44:b8:
                    e0:a5:1d:f5:ff:db:13:c7:32:84:c5:65:13:05:14:
                    fc:19:28:b5:2e:1d:43:bc:0c:31:c7:ba:42:d3:c9:
                    8b:28:f6:66:cf:1b:a7:8a:c3:5a:d4:84:ac:7b:fa:
                    2b:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:CA:13:98:07:8F:58:B7:C6:89:4B:3D:7B:23:F6:53:48:B3:43:42
            X509v3 Authority Key Identifier:
                keyid:9A:21:BD:FF:2D:CA:FC:C1:38:F5:BF:D6:C0:33:0D:02:19:E0:F5:32

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/miG9_y3K_ME49b_WwDMNAhng9TI.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/miG9_y3K_ME49b_WwDMNAhng9TI.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/247/N8oTmAePWLfGiUs9eyP2U0izQ0I.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  163.43.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         85:5c:66:05:90:75:9a:59:f2:25:e4:d3:d0:d5:6e:68:6e:22:
         00:1a:13:1a:12:d5:c6:38:3c:c0:77:f8:97:7f:ed:fa:d6:18:
         77:e6:c1:fb:03:f5:52:ae:a7:dc:c3:56:ff:df:51:76:41:21:
         de:15:4f:37:a8:61:d0:bd:b8:57:28:b2:f9:c4:35:c5:fd:9e:
         ca:2d:e1:d6:d7:1f:40:02:b2:cd:a5:22:62:3b:c3:31:ae:d4:
         db:d9:bd:20:ed:a9:2b:2e:bb:c7:e0:9a:e4:ae:10:1c:d6:da:
         45:09:37:77:3a:bb:29:b2:38:8e:a2:0b:a4:03:de:c8:ae:09:
         b6:c6:08:89:bd:fc:2b:7a:e1:3e:f3:4b:30:fe:4c:13:af:1c:
         b1:a8:35:a5:c6:c1:b4:fb:0f:80:ac:19:f6:09:52:ac:4d:6d:
         fb:69:5c:b3:e8:a5:68:07:b8:80:36:80:02:2c:97:96:f7:78:
         8b:21:aa:34:fd:90:4b:ea:41:18:88:62:da:75:5c:a7:7b:d7:
         6e:2c:57:56:24:b3:19:4b:02:a3:f6:c2:56:fd:cb:0f:4e:48:
         f3:e5:da:72:10:77:ef:28:43:89:b2:b0:08:42:9c:7f:5e:58:
         8e:33:9e:be:56:a7:9d:26:13:fb:42:3b:c1:88:65:9f:b5:af:
         1a:4f:b7:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:45 2025 by rpki-client