Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/309/-EgLLfH1NgCf3fLdrfBmVMe2J8s.roa
File:                     -EgLLfH1NgCf3fLdrfBmVMe2J8s.roa (raw, json)
Hash identifier:          P6RjlouiFIOry2AGqtnDYwbZf1OPHiuxgM3sRga69Qk=
Subject key identifier:   F8:48:0B:2D:F1:F5:36:00:9F:DD:F2:DD:AD:F0:66:54:C7:B6:27:CB
Certificate issuer:       /CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
Certificate serial:       4F
Authority key identifier: F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-EgLLfH1NgCf3fLdrfBmVMe2J8s.roa
Signing time:             Sun 30 Jun 2024 01:44:23 +0000
ROA not before:           Sun 30 Jun 2024 01:44:23 +0000
ROA not after:            Tue 24 Jun 2025 10:46:45 +0000
asID:                     9605
IP address blocks:        157.112.0.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 79 (0x4f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89E0F15C1E20E191AAF17288F6E30FF01869A6E
        Validity
            Not Before: Jun 30 01:44:23 2024 GMT
            Not After : Jun 24 10:46:45 2025 GMT
        Subject: CN=F8480B2DF1F536009FDDF2DDADF06654C7B627CB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:a9:95:5e:24:40:93:c8:8d:80:05:3b:cb:43:
                    41:d1:2b:48:7c:a4:bb:ba:c2:19:68:1c:5e:22:a5:
                    70:43:5f:54:23:d1:8b:df:e6:5c:c8:e7:4f:ab:05:
                    ca:f4:d5:02:1f:fb:16:5a:1f:f0:f4:82:04:ce:67:
                    62:4c:6b:2d:22:34:f6:5d:8a:6e:f8:5e:96:e2:7d:
                    50:9c:64:b6:1a:2b:f0:1f:28:b5:fb:49:fe:30:ab:
                    72:94:59:14:7b:97:b5:0e:da:b0:fb:e5:6d:ab:50:
                    3b:c3:c8:d9:ef:9a:17:3a:f1:40:bc:40:4a:1d:a4:
                    c4:90:28:fc:eb:26:98:a4:0e:11:da:ca:1a:11:65:
                    17:41:85:47:ba:4d:2f:9d:da:e2:39:90:be:59:f8:
                    94:83:c7:d8:54:ac:72:47:6e:d6:b3:bc:c7:c7:c3:
                    f7:b3:af:25:ba:c8:65:b2:82:6b:f5:a2:11:63:66:
                    ad:d7:be:15:96:00:81:5a:b2:ba:fe:56:7a:be:05:
                    d1:02:ef:12:83:cc:e7:0f:3b:ff:ec:03:d0:07:12:
                    37:6a:d1:19:71:00:5f:50:76:87:a7:49:18:8c:b4:
                    83:1f:ea:56:d4:e1:df:19:ab:e8:06:d7:b5:0b:8e:
                    9c:46:1e:a0:47:d5:9b:87:8a:af:a2:1b:24:d0:3a:
                    42:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:48:0B:2D:F1:F5:36:00:9F:DD:F2:DD:AD:F0:66:54:C7:B6:27:CB
            X509v3 Authority Key Identifier:
                keyid:F8:9E:0F:15:C1:E2:0E:19:1A:AF:17:28:8F:6E:30:FF:01:86:9A:6E

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-J4PFcHiDhkarxcoj24w_wGGmm4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/-J4PFcHiDhkarxcoj24w_wGGmm4.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/309/-EgLLfH1NgCf3fLdrfBmVMe2J8s.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.112.0.0/19

    Signature Algorithm: sha256WithRSAEncryption
         a6:eb:7c:30:8a:27:22:c9:f8:f4:1f:75:db:f1:02:50:5d:da:
         f0:07:86:60:67:3a:f2:5a:2c:0d:7c:c1:e1:1f:fd:59:05:2f:
         3d:5c:31:1b:66:44:b8:74:eb:a5:55:7a:17:7d:54:f3:fe:2b:
         4d:6e:8f:7c:2c:25:9a:86:a4:c0:4b:f5:eb:c4:fd:61:c9:f7:
         ce:90:b9:be:b7:dc:5f:ee:6b:45:f0:9f:ff:56:16:3c:72:fe:
         d6:8a:dc:12:4b:0a:18:26:f8:87:c3:37:51:da:04:63:fc:21:
         df:80:fd:7d:07:04:f1:73:6a:bc:01:cf:32:13:52:69:e9:20:
         28:5e:5d:3d:99:84:70:ca:00:96:95:e3:56:14:68:d6:15:f4:
         da:be:7c:05:38:92:0a:70:0a:90:c8:27:f5:be:c8:97:fd:e5:
         f3:82:bd:31:91:1d:6e:2f:ef:94:3a:e4:aa:c2:c8:ef:d6:3d:
         e8:1a:bb:bd:fe:c6:57:28:98:de:ae:96:df:d8:5e:63:fb:63:
         68:6b:0c:4b:00:0c:7f:be:34:bb:8b:e4:0d:86:2f:cf:e0:d9:
         6a:49:0e:98:d6:2d:ff:32:9f:16:09:6d:81:11:21:71:fa:3b:
         13:c7:1a:95:90:ce:15:0c:41:b0:1f:0d:da:5c:76:b3:2c:5a:
         b0:82:70:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:58 2025 by rpki-client