Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/I-A5Tojl4UI4htwOhbXPJ-smHy8.roa
File:                     I-A5Tojl4UI4htwOhbXPJ-smHy8.roa (raw, json)
Hash identifier:          hPzXbgDZX7rLMxc9ZkuuKfRag5mMlbyAUEug/KAn3as=
Subject key identifier:   23:E0:39:4E:88:E5:E1:42:38:86:DC:0E:85:B5:CF:27:EB:26:1F:2F
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       47
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/I-A5Tojl4UI4htwOhbXPJ-smHy8.roa
Signing time:             Tue 31 Dec 2024 01:31:59 +0000
ROA not before:           Tue 31 Dec 2024 01:31:59 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     9619
IP address blocks:        211.125.139.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 71 (0x47)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec 31 01:31:59 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=23E0394E88E5E1423886DC0E85B5CF27EB261F2F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ed:b7:77:3e:d9:b8:44:29:31:68:16:bd:24:
                    f9:a7:6a:e9:18:d1:f7:44:b7:79:ba:d7:51:15:17:
                    82:d0:c5:fb:e8:46:d6:f8:d8:00:4f:d1:85:a5:34:
                    b2:1f:cd:82:1b:7d:60:b7:d6:2d:a8:c3:cf:c6:da:
                    3e:dd:cb:c7:c1:fa:02:b8:b3:3e:c7:8f:00:fc:99:
                    83:a4:a5:b1:74:a2:f5:0e:04:46:ca:c6:3b:9a:0e:
                    a9:f6:77:3d:e7:5e:81:be:86:9f:a6:18:90:19:d1:
                    03:19:a4:58:f2:f9:45:d8:a5:c6:1d:21:b0:03:75:
                    b9:bd:4a:11:4c:33:1b:4e:60:16:79:ad:00:07:6b:
                    b2:1e:f5:ed:62:c4:b0:cd:7c:73:f9:aa:80:f1:69:
                    77:2b:6f:7b:60:48:6f:c4:b8:b0:d6:a6:c3:ec:c9:
                    5f:26:e9:66:24:23:39:eb:01:d2:df:3c:cf:2b:90:
                    9b:e5:d4:da:91:e3:69:25:ee:b7:bb:d8:02:7b:e5:
                    f2:1d:74:ee:1a:8b:ce:ad:bc:da:a5:a9:aa:3a:23:
                    1c:d3:f2:89:e9:e7:f9:7a:43:de:65:f7:fb:44:fc:
                    4f:23:a6:cd:53:08:fb:9a:b0:56:61:dc:98:76:f4:
                    64:ed:e8:a3:8b:a5:9e:c2:47:e7:05:cd:12:d4:fd:
                    e9:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:E0:39:4E:88:E5:E1:42:38:86:DC:0E:85:B5:CF:27:EB:26:1F:2F
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/I-A5Tojl4UI4htwOhbXPJ-smHy8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         4d:cc:8c:cf:3c:2d:76:24:4d:cc:4c:ab:67:01:86:cb:e4:a7:
         b6:34:42:15:6a:9b:dc:6f:51:1d:b1:4b:96:e7:63:26:c0:01:
         97:e6:f7:21:6a:02:b9:64:e0:36:90:9b:27:14:62:8b:b2:d1:
         5b:68:93:21:8a:a2:26:64:94:dc:44:b0:bb:a3:84:bd:23:86:
         64:b0:74:ae:40:03:da:77:4f:31:f1:8e:36:bc:ed:0a:24:57:
         d8:ae:33:cf:bc:d2:48:74:fa:4a:05:6a:88:e9:13:c6:fc:69:
         04:04:61:72:6a:3c:45:a3:2b:27:14:a3:c2:d8:35:33:b2:8f:
         88:b3:c3:fd:9b:ed:67:2f:ba:5a:d7:9b:16:8b:50:75:0a:96:
         d2:e1:cc:41:97:a1:bb:5c:32:ba:06:21:06:3e:c2:cc:bb:80:
         cf:cc:61:77:6f:76:24:68:3b:f5:d9:08:24:d3:20:6f:38:93:
         98:02:27:e0:11:f4:4b:e2:1a:bb:9e:89:7e:35:1a:a6:c3:c6:
         bc:e6:04:49:83:b3:aa:d0:0e:73:31:24:d6:ed:f7:b4:4e:31:
         bb:93:d4:0c:ec:45:9c:ca:f8:da:d9:b8:e0:39:0e:c0:28:6f:
         73:65:d6:ca:33:74:a4:ea:35:d9:e6:d8:1c:e5:70:a5:2f:fb:
         00:20:c0:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:30:43 2025 by rpki-client