Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/3u6UzgQEn1dDOo57_TTKOX9ReLI.roa
File:                     3u6UzgQEn1dDOo57_TTKOX9ReLI.roa (raw, json)
Hash identifier:          o8OCNx4MmQ3WzeYh5wwFyyr4cCY3L+gZ5BIthb/DIGg=
Subject key identifier:   DE:EE:94:CE:04:04:9F:57:43:3A:8E:7B:FD:34:CA:39:7F:51:78:B2
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       5F
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/3u6UzgQEn1dDOo57_TTKOX9ReLI.roa
Signing time:             Tue 31 Dec 2024 01:31:15 +0000
ROA not before:           Tue 31 Dec 2024 01:31:15 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        202.239.64.0/18 maxlen: 18
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 95 (0x5f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec 31 01:31:15 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=DEEE94CE04049F57433A8E7BFD34CA397F5178B2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:59:80:c0:2f:cb:eb:4e:af:bb:08:40:32:fb:
                    7b:99:32:80:98:cf:03:2d:68:81:db:ee:26:ae:6d:
                    be:c9:5f:74:0f:88:31:ab:bd:d7:38:bd:d8:6c:88:
                    85:77:d6:d6:26:2d:fd:b9:24:71:8b:f0:e7:7a:29:
                    8b:ec:4c:ac:4b:78:fa:03:2d:84:de:ba:ee:24:f9:
                    29:2f:bf:94:03:ea:27:f2:a7:82:2c:8f:ce:75:ee:
                    87:69:4d:cf:27:d8:93:de:05:d7:00:b0:95:a2:bb:
                    37:9f:85:3c:1d:72:8a:a9:e6:e2:86:ba:ca:2a:47:
                    1c:44:e5:1c:96:1f:af:0d:d4:6b:04:f9:ba:21:30:
                    5f:6b:a3:b1:4a:b4:a1:39:ba:f5:b3:f6:4e:5d:f4:
                    a3:20:8e:15:e6:19:2d:59:af:c2:3f:a3:49:2d:c7:
                    5f:84:ce:7c:fb:f8:5c:28:15:a4:f1:14:9a:c7:04:
                    f4:96:27:e6:89:12:18:ba:ab:e1:82:d5:16:54:39:
                    69:e2:75:20:89:30:f0:30:ec:3c:86:f7:b2:b9:95:
                    dc:86:fb:11:a3:1e:78:a2:08:13:45:48:b9:67:3b:
                    a5:41:60:e6:7b:72:2b:55:e1:ff:44:22:b9:9b:9c:
                    c7:61:3c:62:e6:d4:8d:7d:24:4f:5b:e1:02:28:65:
                    dd:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:EE:94:CE:04:04:9F:57:43:3A:8E:7B:FD:34:CA:39:7F:51:78:B2
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/3u6UzgQEn1dDOo57_TTKOX9ReLI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.239.64.0/18

    Signature Algorithm: sha256WithRSAEncryption
         18:b8:f7:9f:1b:ef:19:00:77:65:18:a7:8e:e0:05:cf:98:a3:
         6f:5d:0a:d6:de:8c:79:54:5e:47:7b:35:c1:8e:11:e6:31:ad:
         3c:7b:02:0a:9c:61:45:4b:e7:b6:51:9a:53:5d:58:af:22:64:
         66:98:89:51:e8:c0:b5:99:f4:ac:b2:5e:fd:6e:da:24:73:6d:
         3a:8d:76:49:58:bf:0d:f1:d1:98:6a:ce:52:b9:1f:c1:47:d4:
         cc:d8:f2:4c:f7:26:d5:db:57:68:e9:1e:8b:5f:ab:ca:37:f5:
         4f:42:a1:a2:a1:ce:f7:75:44:94:02:a1:3f:b4:b9:ac:ba:0f:
         16:35:5f:aa:7f:27:2e:a9:13:9b:f6:2f:6e:90:78:48:98:3c:
         39:16:5d:16:c7:e3:56:fb:2c:cf:30:4f:b4:94:0c:ef:65:69:
         5f:3d:31:1c:95:3c:05:1b:b1:e8:b3:0b:6d:4b:e5:6d:dc:d5:
         22:f0:ea:2e:2b:d8:71:df:09:81:7e:c8:4a:ed:01:8f:c9:1c:
         cf:d7:50:75:84:0e:ea:0c:67:01:2e:06:ca:3f:e6:be:bf:1e:
         83:3a:4f:db:0c:27:de:6d:0b:7e:9d:74:6b:b3:eb:0f:d9:49:
         c5:0b:5e:3b:92:e6:43:c0:be:cb:9f:93:32:68:c6:5c:7f:e1:
         ec:83:cc:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:08 2025 by rpki-client