Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/29/bffTqbHFuC03bOgT4Kg37r_LoN0.roa
File:                     bffTqbHFuC03bOgT4Kg37r_LoN0.roa (raw, json)
Hash identifier:          DAG6GulQCuW/WSQXh1bwSYgA46Hq+heknCNLC2oHU5M=
Subject key identifier:   6D:F7:D3:A9:B1:C5:B8:2D:37:6C:E8:13:E0:A8:37:EE:BF:CB:A0:DD
Certificate issuer:       /CN=06FA662194FCF1EB983AB44CC913004180770D18
Certificate serial:       4E
Authority key identifier: 06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/bffTqbHFuC03bOgT4Kg37r_LoN0.roa
Signing time:             Thu 31 Oct 2024 01:28:39 +0000
ROA not before:           Thu 31 Oct 2024 01:28:39 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2514
IP address blocks:        61.194.0.0/16 maxlen: 17
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 78 (0x4e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=06FA662194FCF1EB983AB44CC913004180770D18
        Validity
            Not Before: Oct 31 01:28:39 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=6DF7D3A9B1C5B82D376CE813E0A837EEBFCBA0DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:bd:94:bb:d4:5f:e7:89:a4:43:17:91:4b:28:
                    e7:a4:a0:f2:69:38:2f:ee:70:a6:88:6c:42:c4:88:
                    55:9e:81:49:d8:d1:47:ad:50:74:6d:d0:79:0c:9a:
                    6b:5d:51:39:ab:88:77:e2:f1:52:03:e3:2d:e1:66:
                    62:c5:17:ac:11:d9:fa:26:55:24:55:9c:bd:04:65:
                    fd:89:af:25:1f:a8:8b:39:9c:19:fe:58:ad:6e:8c:
                    c3:14:00:84:50:f9:60:37:8a:33:f9:a1:ca:5e:14:
                    63:ac:17:fe:9c:df:41:02:af:56:a2:50:32:39:6d:
                    79:01:34:a6:cf:90:57:65:70:89:d2:26:ce:60:39:
                    f7:e6:aa:cc:f6:e1:9e:97:ce:6a:83:9a:10:d3:00:
                    9c:3c:3b:72:74:d3:41:9a:3a:9a:86:a1:36:9d:c9:
                    a5:d7:0c:77:84:1c:22:3d:03:69:7a:dd:c6:45:af:
                    d6:ed:09:b0:5b:a2:2f:63:3d:ba:91:a6:15:e3:a5:
                    8d:33:56:01:f9:cf:8f:eb:b1:d1:1f:06:80:0f:e8:
                    6a:21:22:35:46:e6:2e:31:f8:3a:cf:7c:dd:74:d6:
                    4e:6c:b0:77:f7:d4:0d:3e:a6:77:80:c4:e1:c5:03:
                    df:41:9f:59:04:05:70:73:12:a9:05:4e:66:64:c6:
                    81:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:F7:D3:A9:B1:C5:B8:2D:37:6C:E8:13:E0:A8:37:EE:BF:CB:A0:DD
            X509v3 Authority Key Identifier:
                keyid:06:FA:66:21:94:FC:F1:EB:98:3A:B4:4C:C9:13:00:41:80:77:0D:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/BvpmIZT88euYOrRMyRMAQYB3DRg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BvpmIZT88euYOrRMyRMAQYB3DRg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/29/bffTqbHFuC03bOgT4Kg37r_LoN0.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.194.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         5b:58:3e:92:36:d2:f2:c6:9a:51:26:86:81:13:2f:88:1e:3b:
         11:94:4f:c7:36:12:1e:04:49:ec:cf:34:20:9f:44:31:ce:ac:
         38:22:09:b4:c0:ec:25:9c:4a:84:68:d8:23:f0:d5:9b:0b:13:
         0b:9d:93:d4:4f:26:45:1c:a0:c4:43:76:c3:77:5a:ee:65:8c:
         7e:4f:d7:80:57:67:39:e2:4d:0f:e3:43:13:f5:e4:82:ef:cb:
         0b:ef:d9:d7:fb:80:e2:9e:7f:d0:bd:23:d5:65:d0:05:a3:3c:
         d4:4f:91:d0:37:c5:35:51:d8:41:de:87:f4:d0:b3:d4:33:43:
         ad:7c:8a:9d:6a:87:25:94:7f:2c:a2:d2:cd:8f:b0:ac:a1:c1:
         cf:f4:6e:d5:62:ba:50:2d:ce:8c:4d:c0:8d:71:a1:54:b7:01:
         dc:45:ee:98:29:f6:a2:0a:82:18:04:da:6a:49:8e:7e:d5:cd:
         24:93:ec:91:74:df:79:98:df:3b:15:6c:01:64:46:b0:c8:d4:
         95:a1:8c:22:83:38:49:b8:e2:e4:8e:4b:31:88:8f:c5:de:27:
         4c:68:0c:99:cd:8a:f3:6e:19:a8:a1:b9:7e:57:1d:ea:e4:0f:
         81:39:4a:75:4e:77:39:2e:96:6e:c9:2a:af:05:3a:96:b0:a8:
         68:8b:af:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:56 2025 by rpki-client