Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa
File:                     Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa (raw, json)
Hash identifier:          UUg9H2KIiTC6w7J2PWEZo25DEuxU4bKWhDTIMO0xoRo=
Subject key identifier:   32:AF:F0:39:FA:F8:E9:9C:BA:A2:1F:63:D5:8A:8C:65:05:90:1E:05
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0113
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa
Signing time:             Fri 31 Jan 2025 01:31:05 +0000
ROA not before:           Fri 31 Jan 2025 01:31:05 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        203.141.48.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan 31 01:31:05 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=32AFF039FAF8E99CBAA21F63D58A8C6505901E05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:25:27:7d:ad:44:df:ef:30:65:06:84:93:
                    f4:89:01:c7:f8:7b:50:d4:55:9c:ac:eb:62:1b:30:
                    26:d9:0f:de:11:12:f1:b0:19:62:39:46:2f:77:fb:
                    b1:1c:f2:bc:1e:98:bd:85:8e:be:70:bd:fd:ee:26:
                    c9:dc:26:c4:25:cf:98:14:88:b2:96:ea:3a:bb:2a:
                    38:6c:a7:ea:8e:ce:4a:ce:e2:c8:f1:75:eb:90:ac:
                    00:f1:d5:96:f8:4d:5a:04:fd:96:46:b9:ad:7b:68:
                    29:fb:42:21:bd:fb:10:16:72:e5:51:43:b1:ae:90:
                    13:4a:93:ed:10:5b:b5:5c:3e:93:5a:1b:28:40:9e:
                    fb:d0:43:d8:57:04:3c:0b:10:f6:bf:83:48:72:82:
                    5f:02:07:62:a1:35:6f:1d:10:c8:cd:d5:9c:cb:3b:
                    b3:1d:c6:9c:0d:07:44:32:28:0a:d3:ce:c7:8f:5b:
                    7c:8b:1a:3b:0f:a1:37:de:d7:5c:76:1c:da:d4:01:
                    26:88:2a:02:94:5b:bc:c1:97:82:35:46:de:50:a6:
                    76:d0:51:95:53:b3:ea:b1:25:46:62:8c:ca:63:6a:
                    db:20:eb:f1:f1:6c:a8:b7:0a:2c:6a:98:5c:93:88:
                    ac:39:b9:d4:79:66:c9:e2:27:1d:d1:22:03:47:a2:
                    e5:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:AF:F0:39:FA:F8:E9:9C:BA:A2:1F:63:D5:8A:8C:65:05:90:1E:05
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/Mq_wOfr46Zy6oh9j1YqMZQWQHgU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.141.48.0/22

    Signature Algorithm: sha256WithRSAEncryption
         8f:30:f9:70:d6:a7:eb:01:fe:d8:66:b4:6b:7e:5a:2b:ea:14:
         ad:60:83:62:21:28:ed:0b:34:22:68:64:3f:76:3d:e7:cd:b2:
         1e:be:5d:ba:9c:cb:b4:66:1f:81:01:94:85:57:10:3a:ba:4d:
         e2:f5:14:82:d2:b4:1e:18:b5:2a:7a:0e:bd:57:ea:fa:d3:a4:
         3e:41:75:5a:a0:bb:fb:6a:5c:4e:50:4a:20:29:d8:80:19:48:
         76:ce:cb:a4:51:76:3e:64:ec:fa:44:c2:2b:59:f3:8e:fb:08:
         19:21:51:4e:54:e7:68:6e:97:31:71:d3:7d:96:66:24:82:ca:
         88:f3:7b:f6:d8:bd:ad:ad:f0:12:87:d5:b0:a9:cc:5b:20:23:
         09:6f:d7:78:38:ec:cf:a9:20:f7:ef:76:f9:ef:59:c8:30:26:
         cf:2a:08:be:d7:64:e7:ae:1b:2f:1f:56:0c:c0:f1:5e:5d:ac:
         42:a8:10:32:d1:b1:13:af:04:00:41:5a:38:da:a2:f6:85:84:
         8f:d7:a8:e8:f0:c4:cb:e0:99:b9:f5:c6:12:72:21:7e:67:62:
         ad:2c:41:07:aa:e9:5d:ab:93:12:4d:c6:3e:3e:9b:e4:c8:dd:
         26:80:14:83:3f:dd:6e:fa:09:ed:ca:30:45:d6:e8:6f:fb:46:
         e9:09:0a:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:19 2025 by rpki-client