Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZF4Dy2kjWKpP1h10Hsdz3nT8R-o.roa
File:                     ZF4Dy2kjWKpP1h10Hsdz3nT8R-o.roa (raw, json)
Hash identifier:          2wV7wJg2oouDdD9pkxARenfSafwnWbeSrB3cy3EsIQU=
Subject key identifier:   64:5E:03:CB:69:23:58:AA:4F:D6:1D:74:1E:C7:73:DE:74:FC:47:EA
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       5B
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZF4Dy2kjWKpP1h10Hsdz3nT8R-o.roa
Signing time:             Tue 31 Dec 2024 01:31:13 +0000
ROA not before:           Tue 31 Dec 2024 01:31:13 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        202.17.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 91 (0x5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec 31 01:31:13 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=645E03CB692358AA4FD61D741EC773DE74FC47EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:30:6a:c1:9c:b6:a6:70:e9:4a:a1:31:93:91:
                    1a:0a:84:ff:d1:1d:3a:82:a2:18:11:00:b7:29:17:
                    fb:9e:19:85:e6:aa:42:44:52:1a:4e:62:08:b6:59:
                    3d:1d:28:76:40:8c:f1:fd:68:56:fb:01:83:14:b5:
                    13:57:df:2a:fd:dd:2a:ad:94:47:b1:cc:41:b6:83:
                    74:4f:0d:4d:de:32:90:c4:ad:15:c6:8e:49:37:3d:
                    8e:bb:ba:b6:4e:b9:6f:4c:e3:2a:35:80:c9:40:04:
                    9a:29:44:0f:60:f5:4c:a1:18:90:47:6e:76:a4:19:
                    0c:bd:cc:a3:52:b2:15:d4:0c:9a:49:4d:13:84:02:
                    8f:2a:a9:3a:72:7f:1c:fd:f3:c7:cb:93:86:04:6e:
                    4a:53:b7:4c:86:2b:a4:8e:f2:00:b1:b0:6f:63:18:
                    c2:4a:75:87:a2:6a:53:6a:84:0d:95:7f:22:3f:ae:
                    57:44:4a:9a:8d:c8:a5:1d:f4:a4:55:b2:be:f8:dc:
                    7b:5f:d8:82:f8:42:47:93:ac:d6:91:c0:a1:02:e7:
                    22:81:1b:34:44:dd:89:1f:46:3f:2d:59:05:26:18:
                    ad:66:93:d1:d2:88:2f:76:21:e5:d9:49:83:e3:d1:
                    e6:bb:85:2e:64:8b:ca:5f:6e:32:48:8a:59:cf:25:
                    9f:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:5E:03:CB:69:23:58:AA:4F:D6:1D:74:1E:C7:73:DE:74:FC:47:EA
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZF4Dy2kjWKpP1h10Hsdz3nT8R-o.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.17.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         53:41:ac:87:79:af:c3:7c:52:de:fd:0d:b7:1e:fd:17:d1:21:
         92:f7:d2:90:dd:72:cf:2e:5c:f9:de:9c:7a:51:f1:a0:b7:35:
         03:09:2b:1d:69:fa:7a:69:18:82:f9:b2:d5:3f:a6:78:b3:2f:
         51:c7:c2:f7:80:25:a2:a8:40:20:04:9d:3a:06:9a:cd:e3:aa:
         a8:88:1b:3c:ad:67:4b:a2:56:09:9e:fe:5f:01:49:70:ec:0f:
         ae:96:e1:7f:2b:e7:f0:5a:7b:e4:b7:92:ca:a7:38:92:73:b2:
         2b:df:fa:ff:aa:2e:3a:17:8e:67:cd:46:89:de:b2:e1:f4:47:
         a8:8a:9d:42:58:dd:ad:5f:46:ec:ec:6c:00:56:13:5a:28:db:
         f8:9d:3c:cc:30:27:20:c7:03:5a:f1:0f:54:69:26:57:e0:bc:
         7b:ff:46:eb:95:26:92:dd:49:99:3a:87:da:49:cf:0c:8b:af:
         24:32:64:e8:ec:54:b7:62:a4:ad:bc:13:a1:e8:c1:1c:59:5c:
         ef:db:84:73:85:78:5b:47:09:90:d2:57:7d:b6:8a:57:6d:b0:
         9b:f7:57:bb:4c:4f:66:64:c4:24:7b:82:c1:c9:bc:02:72:23:
         cb:69:55:09:d1:27:76:44:90:b4:58:12:f9:2e:33:10:60:57:
         31:b2:c5:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:29:51 2025 by rpki-client