Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/394/U-KL7NW6q0VlRCpIi2SFlcWunzA.roa
File:                     U-KL7NW6q0VlRCpIi2SFlcWunzA.roa (raw, json)
Hash identifier:          P6RV2a+yhwhxLPaRmTqWzkImqCEusEfSw29HNWHTvug=
Subject key identifier:   53:E2:8B:EC:D5:BA:AB:45:65:44:2A:48:8B:64:85:95:C5:AE:9F:30
Certificate issuer:       /CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
Certificate serial:       0317
Authority key identifier: 0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U-KL7NW6q0VlRCpIi2SFlcWunzA.roa
Signing time:             Mon 21 Oct 2024 01:12:51 +0000
ROA not before:           Mon 21 Oct 2024 01:12:51 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     10013
IP address blocks:        175.28.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 791 (0x317)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0D7125AE4CEAE1335FE5D429AA030CE9070DF19C
        Validity
            Not Before: Oct 21 01:12:51 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=53E28BECD5BAAB4565442A488B648595C5AE9F30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:99:5a:da:cb:81:d1:c4:bf:29:3e:33:65:ca:
                    f3:77:3b:07:4e:89:17:77:49:76:9f:06:34:d1:af:
                    d1:2e:8a:8c:36:28:e2:77:27:14:67:5f:62:ea:53:
                    45:0c:54:d6:0d:26:98:9c:27:e7:78:e2:b6:38:42:
                    26:14:ea:08:fe:34:82:7d:62:b9:b3:3e:b2:5a:4a:
                    23:15:d6:9f:36:8a:ce:fa:6b:ce:e7:90:40:73:39:
                    4e:87:fa:76:e3:a6:4e:18:33:97:be:40:ee:9c:68:
                    24:04:d5:e3:15:c9:4d:b8:a2:aa:20:02:6b:b5:f2:
                    11:4b:69:a3:b9:0b:ac:88:19:b2:78:fd:c5:d0:99:
                    4d:57:1b:93:88:4d:05:ec:18:31:8a:6a:7e:af:8c:
                    d3:eb:6d:21:29:ce:1c:55:16:0c:37:62:6a:7f:3e:
                    48:d2:e2:6c:8c:68:ec:f4:a3:8b:61:ef:62:36:a0:
                    e0:97:7c:15:f4:bf:d0:36:1e:71:63:b7:99:84:5c:
                    85:05:d9:e8:aa:e0:bb:c4:f3:b8:52:3d:c2:37:a1:
                    63:17:2d:ea:07:40:0a:28:7b:f7:34:42:bd:99:b7:
                    09:83:0f:4a:4b:fe:01:ef:98:f1:b9:f0:ec:4f:e6:
                    4c:4e:37:71:5f:c9:9f:11:4e:29:cc:24:d4:23:1e:
                    a6:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:E2:8B:EC:D5:BA:AB:45:65:44:2A:48:8B:64:85:95:C5:AE:9F:30
            X509v3 Authority Key Identifier:
                keyid:0D:71:25:AE:4C:EA:E1:33:5F:E5:D4:29:AA:03:0C:E9:07:0D:F1:9C

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/DXElrkzq4TNf5dQpqgMM6QcN8Zw.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/DXElrkzq4TNf5dQpqgMM6QcN8Zw.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/394/U-KL7NW6q0VlRCpIi2SFlcWunzA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  175.28.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         10:71:d2:2a:49:35:a6:85:0e:9e:4c:02:45:cc:80:6f:58:6b:
         5a:dc:a5:b0:6d:50:c8:60:29:e9:74:66:58:e0:27:ad:fd:4d:
         e7:00:22:bb:fc:7d:d6:bc:76:eb:89:4d:99:84:fa:a1:38:49:
         2c:90:32:77:e6:84:7a:7b:46:ff:11:00:25:f5:e7:ea:73:24:
         92:73:50:5b:b4:14:cf:55:e7:b4:a7:4e:d1:b6:d9:c5:8f:c6:
         f8:81:8e:42:17:fe:ec:17:a4:58:d0:8a:53:91:7e:93:71:85:
         99:77:f4:c3:ee:4d:0e:39:3d:19:c4:ff:42:f7:ac:7e:87:2f:
         72:d3:f2:6d:23:64:a1:9a:e7:25:0b:3f:03:29:f0:0e:41:13:
         08:79:76:c6:00:03:3e:04:7b:56:af:91:a6:23:fe:a3:c2:95:
         e7:a7:3b:06:dd:88:ea:c0:41:8e:68:fd:dc:e2:48:b0:9a:81:
         f6:05:8e:bf:ec:ab:b9:b6:fe:3f:05:4d:88:70:e8:98:d3:99:
         16:c6:36:01:3a:64:18:fe:b7:e5:3e:e6:19:e6:9d:34:6d:e5:
         53:48:3f:af:84:63:b9:31:8a:86:c3:e7:01:f0:ce:e2:a5:9b:
         54:30:25:70:2f:52:e0:74:a0:6c:98:17:8d:8c:b4:27:6b:69:
         11:5c:3d:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:25:00 2025 by rpki-client