Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/CJjdJ4n_cqS5GQZRS1R5v-k4SzA.roa
File:                     CJjdJ4n_cqS5GQZRS1R5v-k4SzA.roa (raw, json)
Hash identifier:          iy/Jl3ntmYApcenK+e2g/PfFe/3+lbPGYcyDfLMbApg=
Subject key identifier:   08:98:DD:27:89:FF:72:A4:B9:19:06:51:4B:54:79:BF:E9:38:4B:30
Certificate issuer:       /CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
Certificate serial:       49
Authority key identifier: 0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CJjdJ4n_cqS5GQZRS1R5v-k4SzA.roa
Signing time:             Thu 31 Oct 2024 01:30:52 +0000
ROA not before:           Thu 31 Oct 2024 01:30:52 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        92.202.0.0/15 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/0ZV-xYwI81uqa_535FqXQLpHH54.mft
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/0ZV-xYwI81uqa_535FqXQLpHH54.cer
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.crl
                          rsync://rpki.apnic.net/repository/B322A5F41D6611E2A3F27F7C72FD1FF2/DPzneFf88B852ZpitKpi5hWedvg.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DPzneFf88B852ZpitKpi5hWedvg.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FEDD4D310C95068C87E2DE6BF0719BAD9AC0A43
        Validity
            Not Before: Oct 31 01:30:52 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=0898DD2789FF72A4B91906514B5479BFE9384B30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:a4:f6:43:74:e3:b5:12:04:48:38:4b:94:2d:
                    8a:d4:17:0c:a0:b4:ad:a8:7c:da:43:15:7b:10:2f:
                    f0:1a:78:bf:ba:01:43:5b:2c:2c:3f:36:21:f5:e6:
                    b5:4d:5a:18:f4:3f:58:31:b1:14:f4:21:30:63:be:
                    2c:d0:73:10:fd:e1:21:8f:be:19:c4:68:9a:a2:3a:
                    61:9e:ae:fd:c8:46:64:2e:f2:a6:85:02:28:11:30:
                    89:60:e9:7b:17:a8:75:1a:41:f7:01:db:21:d7:58:
                    e0:00:40:03:41:98:6c:73:84:c2:ce:94:3e:50:69:
                    35:c9:5f:02:69:45:62:fd:7c:aa:b4:41:bc:f0:2b:
                    54:88:28:91:74:d7:e2:24:d1:12:58:f7:48:b6:e5:
                    0e:a5:df:28:e2:c0:de:d6:a4:23:2f:d9:ca:a0:cb:
                    fa:f6:37:bb:ce:ed:7b:38:e4:77:ff:6c:19:a5:fd:
                    9e:44:d1:ca:af:e9:e7:f6:1c:40:14:3d:e3:85:bc:
                    8f:af:51:2e:73:ed:c9:fb:e3:91:a7:4b:bf:fb:75:
                    a2:8d:1d:21:16:4f:8e:71:7e:b1:d5:ff:98:27:04:
                    6d:fe:10:48:83:ad:a3:e3:0c:9a:2b:d6:46:a7:d4:
                    48:ab:60:94:b6:89:a1:52:ac:ba:28:3d:85:1b:6c:
                    bf:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:98:DD:27:89:FF:72:A4:B9:19:06:51:4B:54:79:BF:E9:38:4B:30
            X509v3 Authority Key Identifier:
                keyid:0F:ED:D4:D3:10:C9:50:68:C8:7E:2D:E6:BF:07:19:BA:D9:AC:0A:43

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/D-3U0xDJUGjIfi3mvwcZutmsCkM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/D-3U0xDJUGjIfi3mvwcZutmsCkM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CJjdJ4n_cqS5GQZRS1R5v-k4SzA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  92.202.0.0/15

    Signature Algorithm: sha256WithRSAEncryption
         d9:f4:1f:16:fe:82:b5:6b:49:f3:de:bf:54:77:54:8d:e3:32:
         3a:2e:fe:b9:6c:67:23:60:48:74:6c:89:5e:8f:c7:5c:ac:92:
         d3:63:aa:a8:cc:d0:aa:af:87:a6:c2:b5:d0:6c:a6:1f:b9:e4:
         90:b2:86:35:e9:b2:63:50:38:1f:6f:15:92:a2:20:f8:41:a7:
         a0:e0:f9:b1:18:e2:74:f7:ac:e1:04:9d:32:9b:8a:18:88:06:
         50:8e:51:84:59:7d:0a:b2:f1:2f:48:d7:41:91:b1:ff:2a:04:
         d2:b8:38:ff:53:f1:82:9d:c3:2d:f7:de:0c:fb:0f:27:92:36:
         f2:4b:f1:68:bd:1b:ce:3d:3e:ac:52:72:22:59:7e:24:12:b5:
         d0:a7:1e:c7:c5:6c:a4:91:b9:8f:f1:af:17:e5:4a:37:97:dd:
         98:8c:c2:94:7b:33:10:ca:e1:4a:dd:a2:a7:8a:71:33:b5:b7:
         c5:ce:d6:d4:21:d9:6b:7f:48:b2:4d:33:fb:22:27:65:4f:bd:
         2e:fa:5f:86:1a:7f:d3:a8:dd:67:04:c1:3a:47:78:c2:01:48:
         2f:6c:de:d2:01:78:bf:7f:da:2b:f2:63:02:e5:cf:c0:7f:47:
         17:63:d3:0d:7e:3f:d8:21:1f:ea:db:2a:80:e8:9c:0a:0c:f5:
         3e:8f:58:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:24:17 2025 by rpki-client