Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
File:                     TKV0xyZ2ynWutHnasffoyPnppJw.roa (raw, json)
Hash identifier:          asDtZ2mScuZKTCRvhJLWG6wTpyuVV0sqsg5yjEe8HTU=
Subject key identifier:   4C:A5:74:C7:26:76:CA:75:AE:B4:79:DA:B1:F7:E8:C8:F9:E9:A4:9C
Certificate issuer:       /CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
Certificate serial:       68
Authority key identifier: D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
Signing time:             Sat 30 Nov 2024 01:32:04 +0000
ROA not before:           Sat 30 Nov 2024 01:32:04 +0000
ROA not after:            Sat 15 Nov 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        143.125.224.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 104 (0x68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1400AB89B6D72F7DB424F4AAA8CCFF6438D3D4A
        Validity
            Not Before: Nov 30 01:32:04 2024 GMT
            Not After : Nov 15 01:30:03 2025 GMT
        Subject: CN=4CA574C72676CA75AEB479DAB1F7E8C8F9E9A49C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:7c:9e:c0:b2:0f:12:80:96:03:44:92:41:e4:
                    cb:be:1e:e9:6d:25:c7:30:a0:02:0d:59:01:71:63:
                    8b:60:9e:db:08:c4:b6:c2:a3:a8:bd:1f:44:4b:26:
                    dc:ac:7a:af:29:ba:bb:c9:a1:41:23:2c:f5:ca:9d:
                    14:0e:97:7b:d8:42:5c:83:19:8d:ab:1a:72:1f:df:
                    01:cc:b4:17:24:51:bb:62:9d:ed:db:87:5d:b1:c1:
                    0f:f4:66:e2:4b:2c:8a:41:70:f0:9f:54:ce:a2:8d:
                    47:25:75:e8:5a:46:f0:75:78:8b:eb:93:a8:7a:7c:
                    a3:7e:1c:df:15:9a:39:74:45:c8:07:98:09:6e:73:
                    dd:c5:b8:26:65:d9:49:2a:0f:32:fb:fb:b1:4c:49:
                    cb:80:37:8c:e2:fe:c2:80:41:81:f6:b0:67:dd:bb:
                    bc:9a:93:0a:f8:ec:be:4f:f4:74:76:96:7d:6d:c6:
                    14:16:21:38:23:af:66:ee:35:95:6e:af:5a:58:9f:
                    5f:11:78:e4:d4:5e:e4:6c:69:5d:be:0b:b2:6f:2b:
                    d5:66:7a:64:19:af:9f:b3:7c:3c:50:78:9a:01:fc:
                    46:84:d3:7c:d8:b8:6a:cf:49:f4:b7:36:40:ac:83:
                    fd:6e:f7:d9:3f:05:5c:58:a6:a2:62:5c:4b:e4:42:
                    ee:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:A5:74:C7:26:76:CA:75:AE:B4:79:DA:B1:F7:E8:C8:F9:E9:A4:9C
            X509v3 Authority Key Identifier:
                keyid:D1:40:0A:B8:9B:6D:72:F7:DB:42:4F:4A:AA:8C:CF:F6:43:8D:3D:4A

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/0UAKuJttcvfbQk9KqozP9kONPUo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0UAKuJttcvfbQk9KqozP9kONPUo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/TKV0xyZ2ynWutHnasffoyPnppJw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.125.224.0/19

    Signature Algorithm: sha256WithRSAEncryption
         09:78:d8:b7:b7:42:23:fd:bc:a2:8d:b6:50:26:be:1b:ae:da:
         f4:97:c0:22:5c:6b:94:40:5d:d3:c4:47:a8:8f:93:87:70:42:
         41:8a:26:1f:64:aa:b8:f6:35:38:7d:9b:3a:c6:6b:28:64:5a:
         92:71:ab:d5:cb:b6:a9:11:ce:55:a2:7e:98:b9:dd:7d:84:d5:
         60:ef:7a:37:5c:d0:8f:7a:bb:03:da:d9:81:dd:df:77:57:60:
         f1:46:53:0d:73:51:f6:e3:b5:9e:a5:37:86:a0:58:51:c3:e2:
         01:d4:dc:d9:36:ae:44:0f:9a:70:21:3a:cb:11:c2:90:16:d8:
         f5:43:c3:c8:3e:2c:87:63:35:94:f5:96:6d:fc:b1:89:dc:d7:
         e0:69:09:c2:c1:11:90:69:88:32:5b:04:a8:f4:d2:a7:3f:8d:
         4f:84:37:4d:67:b4:2c:bd:07:7e:97:59:64:4a:a9:db:c5:5e:
         33:51:e3:65:ac:e0:71:c3:99:d1:a4:b6:51:48:17:be:fa:d6:
         83:df:8f:82:e1:04:fc:6f:2a:73:eb:50:7c:56:7a:2a:6a:dc:
         a3:9a:03:77:21:2a:34:dd:ae:d2:45:be:b0:bf:61:b1:37:42:
         3c:1b:56:82:99:09:a7:57:7b:50:cd:09:1b:55:d6:1b:f8:b8:
         93:e4:85:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:37:57 2025 by rpki-client