Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/307/JaYXmV1dRf8EeQCppYj7ba4Vo3Y.roa
File:                     JaYXmV1dRf8EeQCppYj7ba4Vo3Y.roa (raw, json)
Hash identifier:          APLDh2delm2USQD44TacpvYBPn7me+wCayxU+bLYx5w=
Subject key identifier:   25:A6:17:99:5D:5D:45:FF:04:79:00:A9:A5:88:FB:6D:AE:15:A3:76
Certificate issuer:       /CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
Certificate serial:       2C
Authority key identifier: 6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/JaYXmV1dRf8EeQCppYj7ba4Vo3Y.roa
Signing time:             Thu 31 Oct 2024 01:32:12 +0000
ROA not before:           Thu 31 Oct 2024 01:32:12 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     23783
IP address blocks:        210.143.122.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 44 (0x2c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6D1ED16D8C6D3BA40BF42CB3A29652ADAB76D061
        Validity
            Not Before: Oct 31 01:32:12 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=25A617995D5D45FF047900A9A588FB6DAE15A376
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:ac:94:c2:f9:1e:86:d2:c3:a5:4f:6e:c4:cc:
                    f3:cf:0b:d8:8f:c2:38:21:19:d4:8a:29:e3:f7:53:
                    b1:c6:e9:26:8b:8b:0a:f5:63:18:f3:d8:b6:bd:c2:
                    b8:30:7c:73:70:e8:37:bb:72:6e:92:1c:ff:4d:f0:
                    b0:e0:3a:30:4b:51:37:84:27:48:6c:2b:03:31:e8:
                    b2:b6:e8:b6:4b:f2:f5:ea:3b:95:33:44:f0:a5:ed:
                    43:03:52:4e:1c:01:a2:8d:49:74:d0:df:e2:4a:bc:
                    81:5f:c3:ed:79:10:af:f9:ea:cd:ca:41:23:db:58:
                    3d:87:c0:44:80:6d:05:3e:e1:77:6f:f6:67:39:71:
                    ce:e2:10:af:6a:a6:60:d8:e6:bd:04:95:f5:8a:52:
                    41:12:df:fc:ff:84:93:58:e2:27:6e:3f:a8:2b:9d:
                    a2:01:a7:02:fb:2f:a0:18:75:76:9f:ba:8e:74:5e:
                    16:c8:0e:a6:40:96:d9:b8:74:63:e1:8b:39:50:ca:
                    9b:db:15:60:8f:95:27:71:26:1b:0e:3a:73:b3:59:
                    74:19:01:74:29:27:66:8a:18:09:a6:28:bc:13:df:
                    e8:f1:6b:e4:f1:32:a2:f0:6d:a4:c3:ed:c8:8d:03:
                    ab:74:9e:61:3a:b6:39:09:fd:c8:56:10:15:a2:96:
                    4b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:A6:17:99:5D:5D:45:FF:04:79:00:A9:A5:88:FB:6D:AE:15:A3:76
            X509v3 Authority Key Identifier:
                keyid:6D:1E:D1:6D:8C:6D:3B:A4:0B:F4:2C:B3:A2:96:52:AD:AB:76:D0:61

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/bR7RbYxtO6QL9CyzopZSrat20GE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/bR7RbYxtO6QL9CyzopZSrat20GE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/307/JaYXmV1dRf8EeQCppYj7ba4Vo3Y.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.122.0/23

    Signature Algorithm: sha256WithRSAEncryption
         0d:8e:fd:bc:0d:db:46:27:a6:7b:f3:13:8e:91:50:e2:ca:d9:
         9a:87:db:47:2d:dc:ad:ad:cf:c9:1b:a8:7e:c5:26:b0:cf:f0:
         18:18:73:46:df:e1:c5:7d:0e:d4:80:14:97:f6:3e:e5:d2:a8:
         18:3a:7e:a3:f4:54:62:e3:69:0f:5a:79:d8:86:5c:b9:1e:22:
         75:d8:f4:9c:2d:e6:7b:27:6e:04:e7:ec:4a:c2:b5:ee:9c:36:
         6e:7b:1e:7d:b2:a1:60:63:c1:c7:84:cd:f2:89:06:29:aa:0e:
         84:a1:c5:6a:ce:69:99:a4:a0:dc:ec:7a:b9:65:50:05:a5:36:
         3e:7a:d7:70:3f:3f:5f:c6:d2:15:16:14:60:9a:08:95:5d:28:
         53:6c:70:ff:d9:f1:26:4e:07:18:5f:48:ba:ec:f4:1c:88:f1:
         53:ff:0f:1f:48:ab:89:b0:2d:78:ce:52:78:e1:bc:9d:53:9b:
         37:44:a5:d2:56:45:93:39:f5:c3:f8:a6:77:14:89:71:5c:dc:
         6d:fb:ec:9a:4e:6e:25:06:ff:27:2a:d6:b0:29:32:03:73:e5:
         ee:f1:e1:53:0a:cf:e8:f6:c0:54:f3:f2:78:18:07:92:b9:65:
         4b:ce:ba:a1:06:9c:7e:3a:f0:76:8f:5d:c2:d7:95:9c:a0:20:
         7f:fd:5d:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:23:22 2025 by rpki-client