Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/395/TbkLvDllmDraAEu8DSj0EO26gMk.roa
File:                     TbkLvDllmDraAEu8DSj0EO26gMk.roa (raw, json)
Hash identifier:          F9Vh0hbGAcMx4MrmRa8J38jY+apHkYAA6jqXGvO3D1s=
Subject key identifier:   4D:B9:0B:BC:39:65:98:3A:DA:00:4B:BC:0D:28:F4:10:ED:BA:80:C9
Certificate issuer:       /CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
Certificate serial:       3A
Authority key identifier: B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/TbkLvDllmDraAEu8DSj0EO26gMk.roa
Signing time:             Tue 31 Dec 2024 01:31:53 +0000
ROA not before:           Tue 31 Dec 2024 01:31:53 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     9619
IP address blocks:        211.125.140.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 20:50:11 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 58 (0x3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B333AEDA5B81A6B2F54FF714668F8D63E87B85A1
        Validity
            Not Before: Dec 31 01:31:53 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=4DB90BBC3965983ADA004BBC0D28F410EDBA80C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:18:07:b5:22:95:29:97:1c:91:eb:3c:5a:7e:
                    1f:43:cc:bb:54:8d:5f:94:78:6b:06:fa:36:ee:14:
                    02:dc:a4:5a:ba:6b:86:1b:5d:7c:bd:c0:e8:83:1f:
                    04:f8:8b:86:18:a3:e4:f8:32:8c:28:32:1f:79:29:
                    04:f5:bd:a0:81:16:c7:ae:12:48:c5:11:40:d4:38:
                    85:0d:be:b0:a5:52:5d:af:4d:76:03:d4:24:d5:28:
                    0d:74:1b:d1:35:20:02:49:65:27:a4:b0:bd:85:1a:
                    f6:b5:e5:18:56:0a:44:03:6b:6b:d7:c0:2a:30:a8:
                    90:e5:b3:6c:c9:de:41:d3:23:95:35:51:9b:40:9e:
                    ab:29:44:91:c3:7c:e4:f8:94:5d:f7:88:1c:81:c5:
                    c7:19:74:08:f3:af:a3:67:2f:7e:5c:8d:30:de:9a:
                    87:e1:5b:e0:83:ff:71:5b:ea:0f:d1:29:e4:e4:ba:
                    48:de:06:eb:ed:e4:6f:56:61:60:a9:69:cf:a5:fc:
                    79:50:ee:2a:52:6c:9f:60:4b:38:a0:11:4c:ea:2b:
                    87:9f:16:6f:ad:85:a5:da:d4:c6:1c:c5:c6:4a:0a:
                    b1:c1:25:86:06:12:7a:b8:43:bd:a9:4b:4d:33:07:
                    a0:29:de:46:3b:82:10:7d:b7:7b:bc:4b:e4:4e:fa:
                    7a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:B9:0B:BC:39:65:98:3A:DA:00:4B:BC:0D:28:F4:10:ED:BA:80:C9
            X509v3 Authority Key Identifier:
                keyid:B3:33:AE:DA:5B:81:A6:B2:F5:4F:F7:14:66:8F:8D:63:E8:7B:85:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/szOu2luBprL1T_cUZo-NY-h7haE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/szOu2luBprL1T_cUZo-NY-h7haE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/395/TbkLvDllmDraAEu8DSj0EO26gMk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  211.125.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c0:32:67:f3:0e:eb:78:31:d4:94:09:19:9c:ca:42:f5:55:41:
         12:26:6b:99:3b:f5:2b:6c:b1:4b:1d:09:65:76:c4:f0:e6:4c:
         e7:71:26:26:70:2b:d9:65:3e:ca:7e:2d:57:ed:45:a9:19:0c:
         bc:06:be:5f:04:55:b8:5e:cb:cb:f8:d8:b0:67:f5:e6:05:d5:
         e2:89:69:fb:88:df:ab:cc:86:1a:2b:f6:f6:85:09:5f:6a:b5:
         ba:1f:8b:5d:54:08:e6:26:ba:95:4b:2f:e0:ee:cd:47:4c:c4:
         8f:06:93:b8:90:24:53:2c:5d:3c:4f:21:69:2b:6c:a1:00:7b:
         9c:55:2c:a7:f2:30:1f:67:03:be:8a:f4:a5:c8:cc:69:64:92:
         6f:13:af:10:0a:10:1a:73:73:8c:bf:3d:8c:88:52:d8:e3:d5:
         09:5e:0c:d4:30:95:5e:c7:83:27:fb:6b:a1:15:a1:1c:ba:e1:
         9a:a1:56:a3:42:bd:e2:8c:5e:65:de:1e:1f:62:01:4b:46:5c:
         8c:ed:64:f3:2b:48:8f:a3:c5:3d:03:f3:2b:97:dc:e2:93:67:
         89:3b:da:eb:a6:03:e0:14:0e:9d:87:46:17:05:7a:2d:83:6e:
         c6:7b:a1:a7:d4:1e:49:4a:11:99:0a:ee:8d:5e:2e:b0:9b:6a:
         74:25:89:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:32:48 2025 by rpki-client