Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
File:                     B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa (raw, json)
Hash identifier:          l6Re0g1kdvefESW2h9q50Qo2iVR0+Z7wLU0h8Sr18J8=
Subject key identifier:   07:B7:EF:37:D7:1D:95:63:9F:72:E3:D1:22:1A:17:2A:97:98:58:3C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       51
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
Signing time:             Wed 31 Jul 2024 01:00:54 +0000
ROA not before:           Wed 31 Jul 2024 01:00:54 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        128.53.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 81 (0x51)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Jul 31 01:00:54 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=07B7EF37D71D95639F72E3D1221A172A9798583C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ba:df:2f:d1:dc:07:95:64:3a:40:39:50:13:
                    29:09:0e:c1:d1:7a:ea:3c:a7:f3:d7:c7:1d:4f:8d:
                    85:21:af:6c:61:34:92:3a:bd:16:a6:ff:b3:9e:5e:
                    c2:78:c1:70:2e:7a:de:11:1f:9a:55:3e:8f:e0:4a:
                    25:aa:ce:0b:3b:21:cb:f5:22:f7:75:fd:c5:6e:f3:
                    2e:6b:41:c6:f0:f9:ff:bb:5c:68:7e:b8:21:53:b3:
                    b2:52:d1:72:5c:b3:ab:1a:46:d0:71:10:f0:22:eb:
                    5e:2c:3b:83:44:5f:64:fb:a2:44:e1:e6:15:6b:fb:
                    76:3b:aa:01:14:8c:a0:f9:0f:41:09:8e:50:a8:21:
                    0b:c5:5e:ae:18:af:72:4e:4f:8c:e0:a7:89:0f:82:
                    c6:e9:b5:b5:a4:e7:e7:4b:11:28:de:d9:2e:91:1a:
                    5f:9a:3b:4f:9e:38:35:70:d6:ac:f1:7c:b5:cf:74:
                    e8:c0:60:8c:08:21:82:2b:47:e5:bc:2f:2a:d4:11:
                    4e:88:bd:24:f3:78:ff:1b:cc:0c:54:63:7e:49:41:
                    b7:b1:f2:51:98:56:9e:1b:da:41:c9:8c:70:5b:32:
                    a2:19:9d:b2:e3:c4:f9:d1:84:0e:1d:ae:a4:88:e2:
                    fa:a4:b5:d6:15:57:b8:4a:1e:fe:77:cf:0c:3b:a5:
                    9f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:B7:EF:37:D7:1D:95:63:9F:72:E3:D1:22:1A:17:2A:97:98:58:3C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/B7fvN9cdlWOfcuPRIhoXKpeYWDw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  128.53.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a3:f2:24:b8:ab:09:2d:9d:e4:f7:6d:33:2a:ab:2d:7c:e0:19:
         64:d9:18:6c:4e:44:64:6a:a4:d8:b2:c4:49:4e:2f:78:fe:45:
         9c:38:e3:bc:c8:a8:c3:11:4a:88:95:2d:f5:fe:3b:72:53:88:
         93:a5:a6:fb:bc:53:ab:6d:8c:8a:d1:21:19:f2:c3:ad:50:4c:
         d2:78:63:4a:19:0a:5e:ec:67:40:94:ee:47:f2:fb:bc:96:fa:
         6c:e4:27:b4:b7:4b:16:80:27:d8:4e:7e:ca:08:e8:9d:14:74:
         fc:64:8f:bf:de:69:07:ca:15:64:7f:89:4a:89:63:46:29:dc:
         31:a0:a7:b1:22:80:4f:46:12:34:75:5b:69:98:96:89:26:32:
         88:39:03:3e:18:4f:dd:3f:55:d3:3d:58:94:78:d2:95:ed:5b:
         7a:5b:8c:eb:0c:46:89:03:75:c4:e6:57:eb:cf:84:f8:36:ae:
         63:af:63:c8:25:06:fa:28:f6:34:61:d6:cb:d8:dd:c0:47:70:
         0b:6b:dd:05:a4:0d:6b:3e:32:d6:c5:7d:c1:04:96:61:ad:e6:
         6a:da:59:0c:9e:b5:6a:17:2f:16:f6:95:f2:2d:7b:0f:cf:f6:
         cc:dc:ea:42:1e:a5:78:bf:b2:60:d6:4d:06:5c:76:93:ca:43:
         ee:34:36:52
-----BEGIN CERTIFICATE-----
MIIFBDCCA+ygAwIBAgIBUTANBgkqhkiG9w0BAQsFADAzMTEwLwYDVQQDEyhEMTQw
MEFCODlCNkQ3MkY3REI0MjRGNEFBQThDQ0ZGNjQzOEQzRDRBMB4XDTI0MDczMTAx
MDA1NFoXDTI1MDcxNTAxMzAwMlowMzExMC8GA1UEAxMoMDdCN0VGMzdENzFEOTU2
MzlGNzJFM0QxMjIxQTE3MkE5Nzk4NTgzQzCCASIwDQYJKoZIhvcNAQEBBQADggEP
ADCCAQoCggEBALq63y/R3AeVZDpAOVATKQkOwdF66jyn89fHHU+NhSGvbGE0kjq9
Fqb/s55ewnjBcC563hEfmlU+j+BKJarOCzshy/Ui93X9xW7zLmtBxvD5/7tcaH64
IVOzslLRclyzqxpG0HEQ8CLrXiw7g0RfZPuiROHmFWv7djuqARSMoPkPQQmOUKgh
C8Verhivck5PjOCniQ+Cxum1taTn50sRKN7ZLpEaX5o7T544NXDWrPF8tc906MBg
jAghgitH5bwvKtQRToi9JPN4/xvMDFRjfklBt7HyUZhWnhvaQcmMcFsyohmdsuPE
+dGEDh2upIji+qS11hVXuEoe/nfPDDuln8ECAwEAAaOCAiEwggIdMB0GA1UdDgQW
BBQHt+831x2VY59y49EiGhcql5hYPDAfBgNVHSMEGDAWgBTRQAq4m21y99tCT0qq
jM/2Q409SjAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMGUGA1UdHwReMFwwWqBY
oFaGVHJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9hcC9BOTFBNzM4
MTAwMDAvMjkvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09OUFVvLmNybDBtBggrBgEF
BQcBAQRhMF8wXQYIKwYBBQUHMAKGUXJzeW5jOi8vcnBraS1yZXBvc2l0b3J5Lm5p
Yy5hZC5qcC9hcC9BOTFBNzM4MTAwMDAvMFVBS3VKdHRjdmZiUWs5S3FvelA5a09O
UFVvLmNlcjAOBgNVHQ8BAf8EBAMCB4AwgboGCCsGAQUFBwELBIGtMIGqMGAGCCsG
AQUFBzALhlRyc3luYzovL3Jwa2ktcmVwb3NpdG9yeS5uaWMuYWQuanAvYXAvQTkx
QTczODEwMDAwLzI5L0I3ZnZOOWNkbFdPZmN1UFJJaG9YS3BlWVdEdy5yb2EwRgYI
KwYBBQUHMA2GOmh0dHBzOi8vcnBraS1yZXBvc2l0b3J5Lm5pYy5hZC5qcC9ycmRw
L2FwL25vdGlmaWNhdGlvbi54bWwwHgYIKwYBBQUHAQcBAf8EDzANMAsEAgABMAUD
AwCANTANBgkqhkiG9w0BAQsFAAOCAQEAo/IkuKsJLZ3k920zKqstfOAZZNkYbE5E
ZGqk2LLESU4veP5FnDjjvMiowxFKiJUt9f47clOIk6Wm+7xTq22MitEhGfLDrVBM
0nhjShkKXuxnQJTuR/L7vJb6bOQntLdLFoAn2E5+ygjonRR0/GSPv95pB8oVZH+J
SoljRincMaCnsSKAT0YSNHVbaZiWiSYyiDkDPhhP3T9V0z1YlHjSle1beluM6wxG
iQN1xOZX68+E+DauY69jyCUG+ij2NGHWy9jdwEdwC2vdBaQNaz4y1sV9wQSWYa3m
atpZDJ61ahcvFvaV8i17D8/2zNzqQh6leL+yYNZNBlx2k8pD7jQ2Ug==
-----END CERTIFICATE-----
Generated at Sun Feb 16 22:06:31 2025 by rpki-client