Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/Epfraw9yJ7Yz-mKjLfmB0pkwIcc.roa
File:                     Epfraw9yJ7Yz-mKjLfmB0pkwIcc.roa (raw, json)
Hash identifier:          1ZYqhSZYPWbBtZ3MlDhHEHLnN5jinmYDEBguKo6QxTM=
Subject key identifier:   12:97:EB:6B:0F:72:27:B6:33:FA:62:A3:2D:F9:81:D2:99:30:21:C7
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0336
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Epfraw9yJ7Yz-mKjLfmB0pkwIcc.roa
Signing time:             Wed 15 Jan 2025 01:11:36 +0000
ROA not before:           Wed 15 Jan 2025 01:11:36 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     10013
IP address blocks:        61.192.219.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 822 (0x336)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Jan 15 01:11:36 2025 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=1297EB6B0F7227B633FA62A32DF981D2993021C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:12:00:1a:e7:3c:89:85:e5:6c:60:d0:0e:01:
                    7d:35:2c:b6:1d:5d:71:e2:bf:b1:0d:6e:37:11:4d:
                    69:85:49:6f:1f:69:e3:d4:89:99:bf:b0:a9:63:b7:
                    2e:72:eb:cd:ba:96:7a:25:c4:4c:c0:40:7f:4a:9b:
                    78:06:a7:90:85:24:a0:fc:82:ed:48:4d:45:e1:ce:
                    7f:b0:26:03:56:32:3d:58:36:a9:bd:a3:27:05:16:
                    6e:ab:1f:e0:4a:c2:73:eb:55:9b:15:6a:ec:93:6c:
                    e4:d7:d4:9f:da:ec:08:e7:88:fe:0d:1f:14:92:61:
                    b2:89:02:7e:b2:95:3d:dc:20:ec:fb:6d:4e:44:0a:
                    5d:35:44:20:6d:4d:61:e7:08:a8:1a:35:e7:81:a8:
                    a0:93:cf:b0:78:04:08:bf:a1:3f:83:17:42:2a:93:
                    48:4c:de:99:c1:71:0f:cb:bd:71:4a:07:18:f4:63:
                    fe:58:63:17:56:94:3d:be:0f:ab:c6:7d:ed:71:4a:
                    37:20:8b:56:9e:1f:c2:91:9a:72:6e:bd:46:fe:ea:
                    ea:c8:ab:d0:91:b1:a4:3d:8a:c4:a1:b7:f2:0c:f5:
                    41:b2:46:a2:92:90:50:3e:40:d9:81:66:79:f2:03:
                    f7:8b:78:86:e7:f8:34:db:5b:79:d8:ff:2e:c5:f8:
                    f9:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:97:EB:6B:0F:72:27:B6:33:FA:62:A3:2D:F9:81:D2:99:30:21:C7
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/Epfraw9yJ7Yz-mKjLfmB0pkwIcc.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  61.192.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:a1:38:10:df:26:12:f1:f2:21:d2:f7:e0:a5:09:9d:5c:87:
         d8:5e:15:22:be:75:7f:45:0c:45:53:3f:d8:6a:3b:f9:ce:49:
         14:0e:ac:b3:3b:b3:2b:ef:ee:ce:9a:f0:44:5a:de:65:ab:c3:
         ff:b9:04:14:0d:e2:b2:76:67:ca:47:47:12:d7:e0:63:51:70:
         d9:26:5f:fa:55:c2:32:78:9d:53:54:29:79:6a:f0:2f:9d:cf:
         a3:45:0b:c6:0e:91:6b:b0:3f:55:d5:4a:91:49:c8:9b:6f:e9:
         19:7c:6f:d9:e1:b5:da:59:2f:fb:91:41:f5:bf:45:49:88:4c:
         e9:ee:30:ba:d6:00:a6:18:4b:53:04:8c:50:4f:94:bd:2e:34:
         80:cb:4f:3a:a3:10:7d:17:57:0a:5e:83:79:2b:d0:3a:ad:b0:
         0f:20:3e:a6:37:9d:ff:19:8d:a4:de:fb:f8:0a:f0:bc:55:01:
         35:e9:cf:62:fa:2a:c6:31:85:9c:09:4a:95:0e:2e:82:ea:6c:
         5b:f0:fc:3c:5e:bc:19:70:0d:8f:8a:0f:e9:da:b5:bf:e6:a7:
         9f:c5:21:7a:91:31:67:22:4d:14:fb:2a:b1:c8:8b:5a:cf:6c:
         07:eb:be:e8:2f:df:7a:c8:f1:44:d6:cc:a4:83:53:dc:a5:31:
         ba:37:63:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:44:46 2025 by rpki-client