Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/6TPYnI3_WATnVhauDCASN9x5i7g.roa
File:                     6TPYnI3_WATnVhauDCASN9x5i7g.roa (raw, json)
Hash identifier:          239vOU+8SGT9cwO61GbdVVzF6/3JqjJkYzLf8V+pduY=
Subject key identifier:   E9:33:D8:9C:8D:FF:58:04:E7:56:16:AE:0C:20:12:37:DC:79:8B:B8
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       014C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6TPYnI3_WATnVhauDCASN9x5i7g.roa
Signing time:             Thu 31 Oct 2024 01:30:45 +0000
ROA not before:           Thu 31 Oct 2024 01:30:45 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        150.147.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 332 (0x14c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:30:45 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=E933D89C8DFF5804E75616AE0C201237DC798BB8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:d3:b2:c9:ff:cc:48:09:f6:76:37:b0:bd:88:
                    5f:bf:b5:b2:86:e8:74:5b:42:dc:96:9d:9f:0e:5d:
                    98:83:07:1d:cf:10:1b:fa:cf:c6:a0:fb:27:47:4f:
                    5f:b7:6d:2b:4d:2e:61:78:07:b8:ac:53:93:a6:ef:
                    7d:04:93:d0:3c:db:29:d3:67:2f:81:26:4e:52:0c:
                    97:e6:98:0e:7b:72:a0:72:11:6f:76:8f:0c:88:8b:
                    85:c1:56:da:36:44:c2:f1:8c:0e:4c:46:ef:fe:65:
                    fa:7f:09:96:c4:0a:06:85:31:e7:a0:09:3f:cd:cf:
                    c9:c2:cb:0a:08:e0:0e:5b:4b:47:dc:2a:a4:67:e0:
                    21:26:7a:ee:fd:6d:62:d4:ab:fb:4a:95:f5:3c:18:
                    a5:94:d3:f7:51:e8:89:44:e1:99:b4:28:99:77:44:
                    f1:c7:9b:90:d1:89:6c:88:66:ef:d5:26:24:34:f7:
                    c5:b3:2c:f9:0a:1d:da:04:83:82:d7:41:a6:32:ab:
                    5e:5f:2e:16:54:db:03:6e:90:5e:7c:15:8c:b0:60:
                    e7:48:e1:ea:db:44:b0:56:b2:97:7a:a6:0a:59:97:
                    06:82:0b:00:55:e4:62:e7:8d:37:3b:84:36:7a:40:
                    43:a6:31:12:4f:ba:04:9e:9a:fd:df:5d:65:18:3d:
                    09:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:33:D8:9C:8D:FF:58:04:E7:56:16:AE:0C:20:12:37:DC:79:8B:B8
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/6TPYnI3_WATnVhauDCASN9x5i7g.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.147.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         7a:c3:ea:1d:9e:75:4e:2f:b7:9d:4e:e4:93:7c:97:f3:56:bb:
         2b:93:85:04:22:a3:91:84:e0:ba:bd:b0:a1:f8:56:cd:5c:42:
         2a:25:b4:a8:dc:1f:1e:1d:13:75:02:b2:8a:42:c2:55:4a:35:
         05:f3:e7:01:8f:55:79:2e:41:cc:f2:6b:fd:e2:63:1f:f8:db:
         67:61:66:f1:69:b2:db:6a:24:87:31:7e:5c:f5:e2:aa:e4:6e:
         67:34:fc:cf:61:fd:a3:fd:37:4e:37:7b:56:bb:15:ce:4a:28:
         42:c0:4e:e1:9b:26:c7:fd:f2:1f:a0:28:a8:c8:f6:fb:0b:c9:
         73:66:0f:76:dc:f9:80:94:f9:ff:2d:ce:7e:40:7d:3b:97:2a:
         e1:57:c5:23:a0:99:ee:e3:a4:96:76:60:b7:85:df:bf:19:80:
         3f:e7:94:92:90:47:fb:8b:fd:4a:ba:ea:fc:5c:15:18:a2:90:
         ec:4d:19:d1:ce:ce:47:69:fb:1a:62:90:60:30:64:14:28:f1:
         21:f6:a2:74:49:0e:9a:43:0a:f8:30:3f:9d:5e:a9:56:53:b0:
         80:20:b9:5c:e3:69:d7:dc:23:7c:a1:dc:6e:d5:b8:d5:b7:a9:
         17:5e:01:f4:29:a7:de:67:f8:ea:08:20:a5:71:6d:c9:6b:ba:
         70:98:02:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:32:45 2025 by rpki-client