Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
File:                     BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa (raw, json)
Hash identifier:          wkp8jCWMGS/oET4RWCnYrWZiq8mVa0AwpzDk2vd50Nk=
Subject key identifier:   05:C3:13:26:3D:22:FD:BF:30:8B:AA:DB:51:9A:11:86:F8:6C:ED:BB
Certificate issuer:       /CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
Certificate serial:       8D
Authority key identifier: 04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
Signing time:             Thu 31 Oct 2024 01:30:49 +0000
ROA not before:           Thu 31 Oct 2024 01:30:49 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        207.65.128.0/17 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:10 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 141 (0x8d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=04CA7F35AF1A8F52575A9FEFFF21C4A47080DDFA
        Validity
            Not Before: Oct 31 01:30:49 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=05C313263D22FDBF308BAADB519A1186F86CEDBB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:13:f3:b6:19:6b:82:7d:36:15:a3:32:7a:21:
                    3a:ff:10:b5:b6:47:70:a3:c1:ec:3d:f1:98:21:81:
                    b4:f5:18:16:97:1a:47:4a:a5:15:ce:fb:8a:9f:79:
                    a3:ac:75:cf:9e:d7:c2:38:23:2e:18:7c:7c:70:82:
                    31:1d:7e:ba:02:17:07:8c:21:e6:ba:bd:f9:29:cb:
                    5f:5f:6a:a4:61:65:66:08:4b:81:f4:59:e5:83:c6:
                    c2:4e:27:8f:d8:c0:7e:66:24:e5:7a:d2:d0:10:e2:
                    56:11:9e:e1:f3:cf:1e:34:01:42:74:79:8e:58:88:
                    a0:4d:e2:a2:d5:55:c3:1e:d3:e4:c9:e0:f8:16:ea:
                    76:2d:53:0f:a8:b3:53:57:d1:e8:72:1c:40:e0:6a:
                    03:3b:67:04:17:95:9b:88:63:99:65:7c:31:8f:81:
                    8d:16:98:2e:98:c4:7c:5d:27:02:78:84:d2:26:08:
                    80:28:53:cd:e1:ae:13:f5:5f:6f:2f:05:5f:c2:f8:
                    15:56:22:b3:75:d5:52:97:a0:e6:79:5d:63:f2:89:
                    c4:30:45:f9:9a:65:f5:bc:bb:c2:9b:1d:f8:43:63:
                    ea:5a:af:b3:21:39:da:7d:80:33:fa:71:05:57:5d:
                    45:99:bc:ba:44:fb:17:57:06:52:9e:a9:ff:f5:44:
                    5b:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:C3:13:26:3D:22:FD:BF:30:8B:AA:DB:51:9A:11:86:F8:6C:ED:BB
            X509v3 Authority Key Identifier:
                keyid:04:CA:7F:35:AF:1A:8F:52:57:5A:9F:EF:FF:21:C4:A4:70:80:DD:FA

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BMp_Na8aj1JXWp_v_yHEpHCA3fo.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BMp_Na8aj1JXWp_v_yHEpHCA3fo.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/BcMTJj0i_b8wi6rbUZoRhvhs7bs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  207.65.128.0/17

    Signature Algorithm: sha256WithRSAEncryption
         01:57:9a:71:19:38:6b:c5:d9:7a:59:30:d1:84:2c:18:6c:9b:
         ee:c3:8d:5b:fc:eb:bb:26:1e:b3:63:86:56:1d:f9:1f:4e:b2:
         46:c7:53:36:fc:0c:67:f7:50:06:66:c4:6f:da:c1:5f:f5:be:
         89:c8:66:4f:4f:19:02:c4:91:90:2b:62:9a:27:9b:f2:9e:fd:
         e1:b1:b1:3b:8a:11:25:0b:de:cf:a8:eb:46:8f:9b:a9:d1:c9:
         40:f4:d7:00:ff:d8:31:d6:75:be:8e:71:f7:c7:ad:45:76:ab:
         20:40:5a:39:b2:02:ae:26:88:1e:f5:0f:1f:40:1c:27:85:79:
         6b:82:a0:f7:d2:4b:4e:1d:b9:50:60:f2:c1:1a:0e:8e:47:fa:
         3b:5a:14:21:22:27:33:e9:e1:fe:83:2a:49:c1:94:5f:ef:95:
         bd:19:3b:dc:01:58:09:5e:7e:4c:4f:49:96:dd:d9:3b:7c:ef:
         2d:80:ac:28:68:eb:0b:41:f0:b5:cb:a4:dc:06:1f:f0:7b:a6:
         56:39:d3:4d:95:e4:be:d0:97:27:e1:eb:5b:98:be:e6:dc:99:
         fd:1f:cc:84:8c:9d:02:29:03:64:98:61:3f:2d:fb:35:2d:2c:
         71:90:8d:24:a8:6a:0c:f7:cd:8d:7b:36:bf:e1:04:6f:74:12:
         3d:11:c1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:46:23 2025 by rpki-client