Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZqLkJ8_3rgrrl7wTcpaEAF--PcY.roa
File:                     ZqLkJ8_3rgrrl7wTcpaEAF--PcY.roa (raw, json)
Hash identifier:          BmxgRizhZD1qeSvjyvNm+r8nrliXXNmCzyosrp3A83k=
Subject key identifier:   66:A2:E4:27:CF:F7:AE:0A:EB:97:BC:13:72:96:84:00:5F:BE:3D:C6
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       67
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZqLkJ8_3rgrrl7wTcpaEAF--PcY.roa
Signing time:             Tue 31 Dec 2024 01:31:17 +0000
ROA not before:           Tue 31 Dec 2024 01:31:17 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     2514
IP address blocks:        219.102.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 103 (0x67)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Dec 31 01:31:17 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=66A2E427CFF7AE0AEB97BC13729684005FBE3DC6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:a0:46:46:0c:e8:4e:d7:57:a0:c0:83:7f:4c:
                    1f:a1:25:15:85:c9:a6:f0:2f:ae:85:1a:bc:66:bb:
                    22:07:46:ba:87:3e:9c:f7:67:e4:77:c4:41:c9:b1:
                    6b:41:a1:63:ea:79:ae:f7:32:cb:50:80:c1:3a:7e:
                    38:22:aa:1e:ac:71:29:08:1a:05:0d:57:2c:24:93:
                    f3:93:5e:40:36:92:ca:e9:cc:07:09:2d:a0:ed:b1:
                    be:07:61:36:d7:10:d3:37:69:d6:e2:e7:b3:83:e9:
                    b9:8f:e2:7e:d0:6b:78:58:e7:91:e9:7d:3a:c8:07:
                    ac:17:c0:58:c8:a4:9c:bd:39:92:dd:b7:1a:ec:d3:
                    8b:d8:cd:44:c3:31:a5:97:79:1d:be:60:e3:9f:ed:
                    84:e4:97:a4:13:a3:f7:f2:a5:b2:9d:71:25:2c:72:
                    45:ea:04:b1:07:c2:0f:ac:e4:a1:3e:16:2d:bf:da:
                    b4:c8:a8:ec:e6:63:d0:3e:9a:09:62:bf:e3:b8:cf:
                    6b:d4:4c:13:7e:d7:8d:9f:34:b3:96:fc:98:41:01:
                    d1:29:60:97:21:72:aa:27:be:6a:fd:53:ab:e3:95:
                    af:17:0c:ff:2b:30:fe:be:cc:11:da:c8:f8:54:77:
                    5a:8d:e2:aa:86:57:08:4d:92:6b:0b:f3:ca:f4:3b:
                    a2:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A2:E4:27:CF:F7:AE:0A:EB:97:BC:13:72:96:84:00:5F:BE:3D:C6
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/ZqLkJ8_3rgrrl7wTcpaEAF--PcY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  219.102.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         62:38:5d:a5:70:2b:27:60:ec:cd:2d:c9:f6:ec:06:63:37:31:
         fd:6f:6d:c8:ea:56:c5:d5:3c:76:e9:09:31:79:b0:3a:a7:32:
         d1:40:22:60:25:ac:17:55:bf:08:f5:51:fb:8e:1b:94:0b:45:
         2c:37:11:89:2e:81:60:5f:91:08:e5:2a:7b:19:c4:74:16:5f:
         ec:b5:26:76:cc:78:a0:ee:cf:be:51:9b:09:89:2a:84:2b:16:
         fb:9b:e7:53:2d:68:da:ba:6d:1c:2a:64:b1:76:79:8b:38:07:
         94:27:22:89:e9:6d:61:2c:1b:af:b3:ef:78:6b:13:e7:5e:37:
         56:0e:1c:91:3c:1d:9e:41:d6:c4:a6:7b:36:e5:26:87:7c:fc:
         82:65:9b:8f:bb:16:1a:92:64:35:01:4d:10:d3:79:2b:8b:90:
         43:47:4e:39:e6:f2:ad:b2:da:81:72:3b:9e:b4:c5:e4:45:6d:
         0b:7e:00:04:64:78:60:b6:72:c0:7e:cd:42:f2:f0:f0:44:bb:
         56:f7:ec:85:be:65:33:a5:16:7d:b4:14:7d:53:74:0e:d0:a3:
         ce:c9:57:ad:fc:50:7e:8c:41:73:1d:97:eb:c0:53:6a:a2:b0:
         21:28:30:34:b0:93:79:38:d1:f8:f4:48:a3:e3:02:b1:55:56:
         4e:e0:f2:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:34:29 2025 by rpki-client