Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
File:                     5u3rw1GQyWIz0eojHBEnuas7eG4.roa (raw, json)
Hash identifier:          PYXJQ1C9TqHNcF6BOU+B+JGNiZOiqezJTiMu6/cE3bI=
Subject key identifier:   E6:ED:EB:C3:51:90:C9:62:33:D1:EA:23:1C:11:27:B9:AB:3B:78:6E
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       90
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
Signing time:             Thu 31 Oct 2024 01:30:54 +0000
ROA not before:           Thu 31 Oct 2024 01:30:54 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        143.189.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 144 (0x90)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:30:54 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E6EDEBC35190C96233D1EA231C1127B9AB3B786E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:be:88:09:4d:50:b1:f2:98:0e:4b:b6:e1:54:
                    ab:75:78:c4:0e:ac:38:6e:e7:ba:dc:66:11:1c:37:
                    55:68:cb:c1:1b:9e:c6:c8:0d:74:f1:09:4e:0b:46:
                    a6:64:16:9c:3a:b0:ad:2f:e9:08:ec:ab:d9:75:29:
                    34:08:ba:38:f8:89:9f:be:dd:b5:1e:81:e4:6b:7c:
                    bc:62:90:90:af:0d:bd:74:21:26:3f:e0:ba:15:fc:
                    3a:83:08:9b:fe:94:ad:d3:16:d2:46:84:11:61:36:
                    45:98:f6:83:92:96:0b:22:c9:1c:ae:83:cc:c2:39:
                    4b:0e:cd:48:17:b7:dc:46:e2:a5:db:9c:c6:c7:2a:
                    6f:ee:57:7d:ae:cc:b2:33:d1:59:23:e4:fe:85:41:
                    19:00:2d:ee:11:54:e5:ee:eb:1b:08:27:d4:bd:9e:
                    d7:9b:7f:f5:03:38:1c:57:4c:61:31:e5:66:60:f2:
                    23:fe:8b:b4:46:6e:5b:bc:9c:fe:4b:59:37:61:22:
                    ec:54:94:69:f1:b8:cf:a3:ea:ca:49:4d:fd:ed:e0:
                    25:da:db:1f:e5:05:e1:4c:dc:bc:34:93:84:d2:e3:
                    e5:78:6c:f2:0f:f2:77:6e:b0:a4:b5:f3:85:be:61:
                    83:de:a8:ed:0e:63:ee:99:8d:9c:c5:80:fc:e9:3f:
                    5a:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E6:ED:EB:C3:51:90:C9:62:33:D1:EA:23:1C:11:27:B9:AB:3B:78:6E
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/5u3rw1GQyWIz0eojHBEnuas7eG4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.189.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         a5:b8:02:1f:23:19:00:41:3f:50:67:7a:c3:03:b0:4b:87:1d:
         a9:6b:d1:17:50:fb:c7:89:e9:c1:40:ae:a2:00:29:27:78:5b:
         f5:d8:cd:1c:e6:e7:31:77:d8:22:a1:68:27:44:ac:b3:c1:f0:
         35:5d:29:37:9e:b2:39:3d:6e:6d:3e:81:8c:42:99:10:41:ba:
         f1:78:7a:c8:92:fe:f3:c0:ca:b3:2d:15:97:66:b9:b8:cc:f6:
         15:e4:19:f2:1f:94:f9:99:54:46:03:b1:1b:18:7c:a9:b8:4a:
         64:a6:ca:76:1d:42:fa:8c:15:8b:cd:26:d0:08:ac:bf:47:a7:
         8e:ae:cd:78:f4:54:05:4c:06:2c:2f:b9:ad:96:c2:1f:25:b8:
         ec:11:80:dc:da:da:b2:45:39:3a:c3:37:e4:24:51:f7:99:7d:
         4d:37:2c:74:f7:cb:7e:0c:b7:1d:95:17:90:cd:12:7b:93:f2:
         0d:10:11:3f:d6:d1:8f:96:38:ea:8e:fb:d7:61:92:d9:0a:b5:
         c4:17:09:bc:05:3d:a3:c2:97:0c:6e:ce:17:21:0c:50:6a:47:
         ff:88:82:6a:0f:4c:00:46:08:e9:21:86:9e:96:ee:bc:53:b4:
         f0:2e:9d:83:ba:44:a2:ee:47:01:a0:c8:47:a1:09:d2:3b:09:
         47:e4:e8:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:26:39 2025 by rpki-client