Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/54VAS7cvaXDdl0AsJhM-4Aq_UhM.roa
File:                     54VAS7cvaXDdl0AsJhM-4Aq_UhM.roa (raw, json)
Hash identifier:          9lPNqvvwCn2k+XxD9Nrqu0ssnr1er4JDuf++KooOc7E=
Subject key identifier:   E7:85:40:4B:B7:2F:69:70:DD:97:40:2C:26:13:3E:E0:0A:BF:52:13
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0314
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/54VAS7cvaXDdl0AsJhM-4Aq_UhM.roa
Signing time:             Mon 21 Oct 2024 01:12:50 +0000
ROA not before:           Mon 21 Oct 2024 01:12:50 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        175.103.216.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 788 (0x314)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 21 01:12:50 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E785404BB72F6970DD97402C26133EE00ABF5213
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:63:15:a1:4e:a5:0f:e5:e3:ee:cc:98:66:6e:
                    43:f4:03:d7:5c:49:03:48:69:9b:12:a9:39:91:ac:
                    a3:41:99:e1:51:bf:a3:29:e7:77:45:fe:36:ea:61:
                    8f:b4:e3:37:46:7a:62:12:94:d5:87:fb:d4:9e:47:
                    39:3f:0f:32:89:2c:87:d3:58:c3:50:b6:3d:8e:2c:
                    43:cd:db:7b:e2:7e:0d:ac:0b:19:48:86:90:4a:18:
                    db:93:41:e4:ea:1c:08:52:b9:69:c0:f3:86:e3:48:
                    9f:ed:a4:40:13:ab:2b:a3:5b:c5:94:54:4e:37:8f:
                    4d:3e:a6:74:1c:0e:d1:45:17:39:03:83:fb:a6:16:
                    17:4b:ed:e9:8a:37:2f:77:17:50:55:cf:89:80:e9:
                    af:a7:54:48:fe:9a:6b:83:95:49:13:bf:cf:6c:0e:
                    97:83:c3:24:cc:19:67:7e:30:10:94:e5:ad:72:70:
                    fa:6c:f2:3a:16:d0:43:56:c9:be:35:30:cd:d7:02:
                    7e:2f:d9:fb:d3:ce:ac:a8:90:85:a6:f2:18:05:eb:
                    00:73:c9:4b:4a:6e:7e:12:da:a6:fe:2d:e7:1e:96:
                    97:b8:2a:b0:39:e9:ca:6e:9f:fc:99:be:16:2b:58:
                    ed:b7:2d:1c:1e:17:fe:32:88:eb:ad:7e:e4:41:a0:
                    b2:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:85:40:4B:B7:2F:69:70:DD:97:40:2C:26:13:3E:E0:0A:BF:52:13
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/54VAS7cvaXDdl0AsJhM-4Aq_UhM.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.103.216.0/21

    Signature Algorithm: sha256WithRSAEncryption
         5c:1c:fc:ca:4f:3f:89:e1:2b:81:68:d5:cd:2a:bd:2d:e6:25:
         aa:f0:e4:55:aa:14:6e:00:d4:02:73:d7:a2:a9:a9:e3:98:50:
         dc:64:94:f9:86:68:f2:9d:1d:50:19:57:4b:a0:22:1b:4b:88:
         f1:e0:50:94:0f:f1:a1:f6:0d:93:6d:1f:56:a1:c0:b5:ff:05:
         2d:49:fb:6c:e8:ea:02:cc:ab:33:07:d9:3a:75:a9:8f:7b:5d:
         fc:d1:d5:a3:ca:72:ff:c4:3d:2c:c5:ac:4c:26:b2:26:75:da:
         a6:79:91:9f:1a:f1:ef:fc:72:2b:fd:4f:40:1c:bc:26:8e:7e:
         73:15:45:01:0d:ba:59:9e:17:84:a3:f2:c3:d5:bf:84:d6:34:
         45:ad:56:81:85:71:9e:99:c4:c8:8b:28:57:d3:25:2e:b6:18:
         b9:04:09:df:ff:c6:94:be:59:91:49:44:3e:bd:11:b7:f0:ad:
         b4:2a:7a:f7:db:87:f4:f6:47:47:70:6c:b1:8d:11:d6:0c:b0:
         c6:b6:16:fe:b0:76:fe:43:33:f4:f0:e2:d7:f9:87:fc:e8:4a:
         7b:6d:85:95:10:a6:a1:ae:fc:80:86:9d:47:39:ab:a0:30:42:
         5c:c4:47:e4:a0:d1:24:ce:09:1f:0c:b2:f2:2f:a2:0a:51:65:
         b0:2b:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:34:39 2025 by rpki-client