Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/354/rRoyRHu5-qdPMNl12CJ70QFLET8.roa
File:                     rRoyRHu5-qdPMNl12CJ70QFLET8.roa (raw, json)
Hash identifier:          1VDKZrAJbMcfSevIl7JpTkTn432yuA09/SrCTR7dhcw=
Subject key identifier:   AD:1A:32:44:7B:B9:FA:A7:4F:30:D9:75:D8:22:7B:D1:01:4B:11:3F
Certificate issuer:       /CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
Certificate serial:       0118
Authority key identifier: 0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/rRoyRHu5-qdPMNl12CJ70QFLET8.roa
Signing time:             Fri 31 Jan 2025 01:31:08 +0000
ROA not before:           Fri 31 Jan 2025 01:31:08 +0000
ROA not after:            Thu 15 Jan 2026 01:30:03 +0000
asID:                     9607
IP address blocks:        211.14.30.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 280 (0x118)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A5ACAC2990BD8F8655C0C721BACFF030A59D1FC
        Validity
            Not Before: Jan 31 01:31:08 2025 GMT
            Not After : Jan 15 01:30:03 2026 GMT
        Subject: CN=AD1A32447BB9FAA74F30D975D8227BD1014B113F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:ce:bc:ce:b4:91:a5:8c:4b:04:b5:6a:4d:7b:
                    b0:67:ef:bb:ad:17:31:4e:95:e3:6b:ea:23:0d:ed:
                    cb:95:69:a6:00:f3:52:70:72:a9:07:73:51:02:88:
                    cd:20:df:c5:e6:85:e5:45:10:ac:e8:aa:12:2e:1f:
                    59:24:41:1d:58:45:0b:28:30:37:1e:a5:57:9a:44:
                    7e:54:81:01:57:39:c7:9b:8f:26:48:04:d2:cd:24:
                    d9:8f:45:0a:79:c3:41:a7:b6:9b:55:09:47:5d:ee:
                    e6:86:84:68:aa:ea:6a:4d:79:05:69:c2:8b:2a:e7:
                    87:36:a3:4d:d0:f2:6c:dc:f8:bf:23:0c:fa:29:c9:
                    86:43:bf:9e:7b:9e:5e:01:f6:02:f5:84:bc:a2:39:
                    a5:2d:91:5f:ff:9f:17:a7:bf:08:59:f0:0b:4d:46:
                    1d:b7:4e:11:1e:91:a5:68:41:9f:ea:9d:fd:2a:0e:
                    e0:3f:c4:9e:e4:50:be:e2:5e:82:72:42:97:40:99:
                    60:1b:4e:97:08:d5:70:4a:4a:e0:99:12:7c:e8:65:
                    8b:28:c9:35:b4:e0:d2:ed:f3:1f:44:eb:49:d3:c8:
                    bd:21:8a:72:dd:69:27:d4:31:7e:8e:16:01:f6:29:
                    88:94:bd:a8:50:99:b5:60:be:47:e0:6c:b3:20:0f:
                    78:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:1A:32:44:7B:B9:FA:A7:4F:30:D9:75:D8:22:7B:D1:01:4B:11:3F
            X509v3 Authority Key Identifier:
                keyid:0A:5A:CA:C2:99:0B:D8:F8:65:5C:0C:72:1B:AC:FF:03:0A:59:D1:FC

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ClrKwpkL2PhlXAxyG6z_AwpZ0fw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/354/rRoyRHu5-qdPMNl12CJ70QFLET8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.14.30.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bc:1c:fe:43:e3:6b:57:ca:79:08:b5:26:e1:77:c8:cc:eb:17:
         92:69:ae:9c:43:22:d7:f9:ef:e1:fd:72:30:b3:f2:29:36:a9:
         36:21:73:ea:70:6e:f2:a7:15:81:60:10:11:64:87:0f:15:68:
         de:ad:88:78:9a:ee:bc:c3:5e:d6:4a:a5:2b:8b:ea:e0:35:35:
         90:01:ac:b2:a5:3a:a8:74:e3:ce:53:96:01:c8:e9:a5:11:38:
         a5:a8:a2:cc:66:eb:42:8b:73:c3:6a:96:d2:56:79:52:08:44:
         85:87:3f:ef:e0:49:c6:29:eb:b4:15:aa:24:37:cc:55:da:3b:
         9e:b9:4d:be:6e:ae:9c:80:bf:ad:4f:18:23:78:4a:42:e0:79:
         9c:d4:02:8c:10:24:2a:0a:0a:f1:3a:31:b6:9a:f8:84:15:23:
         4a:00:b4:57:cc:93:80:3e:57:f1:0c:bc:e5:ac:75:e3:68:8b:
         a5:28:c8:7c:4a:83:dc:f2:fc:cf:82:08:e0:44:ca:d7:9f:df:
         0e:4a:fd:d2:3c:1c:1b:ca:05:63:f9:25:d0:25:a7:f9:c2:cc:
         74:6c:dd:f7:50:54:08:af:08:d0:c5:21:7f:94:53:39:67:fa:
         53:12:a5:81:f6:55:a6:8a:06:72:74:8d:7a:3f:ac:43:37:c1:
         75:66:7c:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:45:12 2025 by rpki-client