Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/299/fs_sfv2JcetZppeQMfI_cL27DF4.roa
File:                     fs_sfv2JcetZppeQMfI_cL27DF4.roa (raw, json)
Hash identifier:          wkUjQ/JW+uuldUc/0xD/6LryUTibDVk46kN2HkCd4Tg=
Subject key identifier:   7E:CF:EC:7E:FD:89:71:EB:59:A6:97:90:31:F2:3F:70:BD:BB:0C:5E
Certificate issuer:       /CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
Certificate serial:       44
Authority key identifier: D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/fs_sfv2JcetZppeQMfI_cL27DF4.roa
Signing time:             Sun 31 Mar 2024 01:30:30 +0000
ROA not before:           Sun 31 Mar 2024 01:30:30 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     63789
IP address blocks:        202.9.209.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 68 (0x44)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D8F1514508AFC38E51743B6CB58BA6561EDD3BB9
        Validity
            Not Before: Mar 31 01:30:30 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=7ECFEC7EFD8971EB59A6979031F23F70BDBB0C5E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:21:e7:6d:08:3f:a4:b2:99:98:07:d9:28:0f:
                    0a:e6:6b:b8:d7:78:35:2f:3b:b5:ed:6d:2c:8d:e1:
                    c2:86:17:6a:51:45:50:38:c9:4e:7d:da:8f:a9:64:
                    43:77:d7:dc:d6:9f:bd:d0:91:27:a3:47:83:1a:3e:
                    e8:ea:03:14:e4:5d:70:71:bb:6b:1b:66:c5:54:d1:
                    d5:c2:1a:8c:b3:53:f4:71:4e:b5:05:76:f6:1d:2d:
                    a8:3a:70:6c:03:80:ea:4e:fa:4e:56:ac:09:91:96:
                    3a:8d:36:6d:cc:ee:06:84:f6:5b:51:2d:d4:f0:a7:
                    e6:83:32:f5:ce:c6:c1:db:97:b9:76:16:2e:32:1a:
                    4b:5c:c5:9e:c0:c3:0c:54:bc:2f:66:35:77:b1:2e:
                    1c:db:4a:ac:f2:ec:5e:a8:4e:69:a6:96:d5:f8:da:
                    8b:69:e7:f1:f7:28:f2:7d:55:04:9a:2d:5e:db:69:
                    31:b4:64:86:d7:2f:97:d7:5f:bf:be:20:59:6d:ad:
                    1b:91:f8:ea:cd:14:6e:2d:64:c4:7c:f5:71:65:d0:
                    f1:79:0f:17:33:f4:59:15:26:01:a6:f7:27:14:78:
                    e2:b3:b9:64:a9:80:c0:7e:e4:94:58:f5:13:4f:b7:
                    d5:f8:50:39:bc:a6:7b:e7:4d:c9:4b:fd:2e:dc:42:
                    13:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:CF:EC:7E:FD:89:71:EB:59:A6:97:90:31:F2:3F:70:BD:BB:0C:5E
            X509v3 Authority Key Identifier:
                keyid:D8:F1:51:45:08:AF:C3:8E:51:74:3B:6C:B5:8B:A6:56:1E:DD:3B:B9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/2PFRRQivw45RdDtstYumVh7dO7k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/2PFRRQivw45RdDtstYumVh7dO7k.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/299/fs_sfv2JcetZppeQMfI_cL27DF4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.9.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         b8:f5:2e:a6:04:4a:f5:f9:ae:7f:b4:18:33:22:84:92:20:bc:
         37:30:fe:1a:f2:b1:c4:05:94:ab:3f:0b:16:ea:25:ae:af:f5:
         51:2a:97:cc:ac:e5:3e:be:fb:ca:3e:88:08:56:73:43:96:97:
         5a:3f:00:9e:f1:b6:d1:b1:fb:c7:e8:87:06:11:29:6f:06:43:
         d6:43:41:6c:89:22:54:6b:bf:d5:9d:ad:03:de:e5:56:fa:43:
         01:02:bb:6e:3b:bd:24:56:f2:60:53:9f:24:e4:19:5e:7c:8a:
         ed:52:f4:d3:8b:c2:f6:49:60:c8:be:a4:5e:74:2a:f0:87:64:
         f5:68:e0:06:87:c8:0a:56:f8:f4:c7:5a:08:f9:ff:7e:18:09:
         e4:95:4b:86:11:77:c0:56:5d:f5:e6:35:4d:59:ca:75:20:14:
         6c:1e:f0:1a:cc:0c:e5:40:d1:89:04:cb:c7:9a:e8:d1:2d:71:
         6b:4c:38:83:ae:09:63:5a:0b:cc:4d:63:5d:20:d6:75:fe:f6:
         7a:4f:97:81:97:18:0b:67:c1:05:92:88:cd:d4:7f:f9:57:e4:
         d2:fd:79:81:c1:fb:7d:88:28:bb:15:33:4b:37:ee:8b:e3:62:
         83:81:78:05:9f:23:d9:5e:c5:7c:1b:4b:00:05:21:ba:29:3e:
         f4:c2:a5:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:58 2025 by rpki-client