Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
File:                     wuPUPc9hhM1QkyDiHngmqb27XaI.roa (raw, json)
Hash identifier:          Bb3x/A1SokMora76iJI8N7DdOa5CurIuKVzGuPNx7iA=
Subject key identifier:   C2:E3:D4:3D:CF:61:84:CD:50:93:20:E2:1E:78:26:A9:BD:BB:5D:A2
Certificate issuer:       /CN=095A182FA18D458233284AA8DC88BD075E5D702D
Certificate serial:       016C
Authority key identifier: 09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
Signing time:             Thu 31 Oct 2024 01:34:22 +0000
ROA not before:           Thu 31 Oct 2024 01:34:22 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     2527
IP address blocks:        220.211.0.0/16 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 19 Mar 2025 20:25:21 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 364 (0x16c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=095A182FA18D458233284AA8DC88BD075E5D702D
        Validity
            Not Before: Oct 31 01:34:22 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=C2E3D43DCF6184CD509320E21E7826A9BDBB5DA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:0a:a9:62:90:6c:2f:93:8a:d9:a0:44:46:09:
                    fd:7c:aa:ba:5c:58:11:fd:d9:2b:09:d2:84:a4:2f:
                    84:4c:5a:af:de:eb:fa:3b:98:61:17:45:12:d6:76:
                    54:bd:56:9b:b3:82:88:31:cf:24:3d:ca:25:70:fa:
                    0c:ee:f8:c0:3b:1a:8a:40:1a:8b:17:d1:9c:68:d1:
                    34:d8:30:99:78:aa:49:68:bd:bc:d2:b8:58:0f:41:
                    e6:56:99:0b:71:63:88:ca:5f:9e:95:62:6c:c9:39:
                    8d:90:60:5e:22:c3:2a:2a:e4:8e:79:92:a4:a6:64:
                    24:3c:d6:7f:1b:9a:1a:fd:2b:7a:be:84:4f:c6:2d:
                    cf:ea:2c:fc:a4:65:cd:9d:e4:9e:2f:74:dd:90:c2:
                    f2:07:72:82:f8:a6:c8:ce:05:6b:2e:57:4d:f4:df:
                    68:78:79:1b:e3:8a:75:6e:e7:24:a9:3d:2d:3e:4c:
                    0e:6b:e3:2e:1b:ca:19:61:4a:8e:36:a5:59:0c:ea:
                    5f:81:ca:71:53:e2:c2:6f:83:02:af:ff:ef:79:bf:
                    99:ea:45:58:8c:b0:c8:ba:db:a9:4d:44:34:59:22:
                    8b:c3:c8:54:a2:17:1d:3a:b9:3e:3b:4f:4c:8f:e8:
                    fb:b5:67:d3:bf:a3:7d:7f:31:80:3d:d3:73:c4:bf:
                    68:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:E3:D4:3D:CF:61:84:CD:50:93:20:E2:1E:78:26:A9:BD:BB:5D:A2
            X509v3 Authority Key Identifier:
                keyid:09:5A:18:2F:A1:8D:45:82:33:28:4A:A8:DC:88:BD:07:5E:5D:70:2D

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/CVoYL6GNRYIzKEqo3Ii9B15dcC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/CVoYL6GNRYIzKEqo3Ii9B15dcC0.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/43/wuPUPc9hhM1QkyDiHngmqb27XaI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  220.211.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         74:b6:60:b9:0b:b2:93:b3:80:68:19:86:29:85:42:b7:e0:24:
         9e:16:fd:4c:0b:f9:a1:4b:e1:d9:6f:de:39:4b:53:cb:67:b8:
         10:bb:6a:5b:52:7e:77:aa:4e:e2:b8:54:7b:15:e1:1e:9e:de:
         15:bb:11:67:c5:82:65:86:8c:ec:ab:5a:37:d3:f2:9e:9e:fc:
         fe:d5:89:d2:c7:c5:14:92:a3:dd:b5:c8:ef:b0:ec:47:a7:2d:
         e2:5e:56:15:b0:70:fe:60:75:06:e4:eb:b6:a1:b2:f5:3d:b3:
         58:bb:36:09:12:bc:74:1e:10:c2:db:d7:71:2d:91:f8:38:a2:
         68:ec:2f:ca:b1:cd:87:26:13:a6:23:c0:8e:37:3e:98:6a:cf:
         e5:b1:21:13:4a:7a:7e:16:d2:87:9e:7e:8c:40:88:04:b5:cb:
         38:db:b3:fc:27:b8:60:b5:c3:8a:8c:a8:fe:de:4b:d8:4b:3d:
         09:28:39:dc:f3:0d:96:c0:0e:31:d0:3b:cb:47:37:f1:95:22:
         10:7a:ff:d9:bf:df:15:01:50:a0:7c:15:15:9e:86:19:8e:37:
         67:da:f1:18:28:9d:b5:32:f6:08:57:50:56:ac:6f:80:03:53:
         56:2c:86:e7:1b:55:a8:25:b7:3f:b0:1d:f2:31:fb:21:52:e4:
         98:47:ec:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 01:42:01 2025 by rpki-client