Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/469/O25_Xg-_ropE4JFuoYsovIfcoXA.roa
File:                     O25_Xg-_ropE4JFuoYsovIfcoXA.roa (raw, json)
Hash identifier:          8l8HVxec9D4FIr6hKcv8wnTALVl8er8y8V4TPfNxb4Y=
Subject key identifier:   3B:6E:7F:5E:0F:BF:AE:8A:44:E0:91:6E:A1:8B:28:BC:87:DC:A1:70
Certificate issuer:       /CN=40610DA68E93ED538A48A46C5214024ED54D07F6
Certificate serial:       0113
Authority key identifier: 40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/O25_Xg-_ropE4JFuoYsovIfcoXA.roa
Signing time:             Sat 31 Aug 2024 01:29:24 +0000
ROA not before:           Sat 31 Aug 2024 01:29:24 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     10021
IP address blocks:        110.50.76.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 275 (0x113)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40610DA68E93ED538A48A46C5214024ED54D07F6
        Validity
            Not Before: Aug 31 01:29:24 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3B6E7F5E0FBFAE8A44E0916EA18B28BC87DCA170
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:d7:92:3d:ac:52:34:ea:8c:df:f0:2d:ed:23:
                    88:70:5f:e2:4f:15:20:b4:cf:a8:b0:d7:1f:74:81:
                    72:ff:42:fc:a2:16:a1:1a:8e:dc:88:ea:9e:e2:10:
                    4a:c3:df:2a:2e:9d:eb:01:3f:a8:e4:7e:15:74:84:
                    79:8d:d4:09:38:48:ee:14:19:74:73:35:ab:d2:aa:
                    b2:40:52:14:5c:70:65:31:2a:aa:47:4e:e6:b9:f3:
                    bd:7f:91:3e:b9:e6:b5:79:7c:65:5c:92:cf:62:9c:
                    b4:c9:fe:57:2f:0c:21:49:13:ef:1b:b4:fd:a3:0d:
                    a7:04:ed:71:a9:1b:7c:24:51:09:31:9d:c9:d2:8d:
                    7d:97:ab:15:dc:d4:60:03:69:4d:0c:90:73:29:c2:
                    6f:b2:3f:43:76:67:8f:27:14:2b:88:06:e2:cd:0f:
                    f0:c5:e8:f8:49:19:45:e9:47:c6:2f:7d:d5:c3:fb:
                    31:66:67:fb:80:78:89:c7:94:1c:98:bb:27:45:28:
                    58:d5:89:07:ce:44:db:d3:16:2f:b6:7b:92:fb:45:
                    60:33:59:28:1a:d1:37:80:2d:89:fb:54:c6:c6:1e:
                    e8:55:b7:57:ad:33:46:3f:ba:3e:cf:bc:f3:37:9d:
                    d3:bd:46:15:87:76:9b:20:b9:e7:d9:b4:b2:c5:ad:
                    53:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:6E:7F:5E:0F:BF:AE:8A:44:E0:91:6E:A1:8B:28:BC:87:DC:A1:70
            X509v3 Authority Key Identifier:
                keyid:40:61:0D:A6:8E:93:ED:53:8A:48:A4:6C:52:14:02:4E:D5:4D:07:F6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/QGENpo6T7VOKSKRsUhQCTtVNB_Y.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QGENpo6T7VOKSKRsUhQCTtVNB_Y.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/469/O25_Xg-_ropE4JFuoYsovIfcoXA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.50.76.0/23

    Signature Algorithm: sha256WithRSAEncryption
         b0:31:84:fa:ff:65:3d:18:66:99:c2:36:cc:cc:0e:73:d6:ba:
         04:3c:1d:b3:0c:5c:a9:3e:49:2b:6d:47:40:0a:66:c9:38:05:
         fe:66:5f:8a:e3:e8:e7:df:10:6c:8f:9c:54:f4:c2:95:7b:3a:
         e8:b1:9f:ed:fd:23:06:7a:f9:16:6c:51:42:42:72:94:e0:80:
         e4:c7:3a:79:07:f3:99:29:8c:59:48:a4:81:15:6e:a8:6d:31:
         9d:ba:c8:3f:97:8a:ad:24:5c:5f:06:4c:7c:69:f1:e0:2c:17:
         de:7d:ab:66:a7:8c:a4:95:7b:7b:94:2a:2a:12:4e:a1:0d:70:
         90:ec:83:6d:3f:10:41:95:19:b0:74:45:d5:39:45:1c:d3:94:
         18:a4:a7:df:9d:28:18:38:fb:9c:e5:e6:cf:8b:0c:3c:85:36:
         d9:f9:ae:ef:67:54:ae:d5:84:e1:9a:58:df:8a:bd:c0:3c:c0:
         cb:41:3f:ee:59:93:a4:43:e1:34:e6:54:88:ab:02:bf:14:d1:
         70:db:7c:ce:f1:83:60:7b:38:fe:4b:a6:04:53:e8:62:cc:01:
         d9:45:ce:8b:5d:79:9b:b7:bd:70:56:c5:78:91:21:9a:f4:15:
         40:37:3b:c0:1d:52:2b:01:94:0a:a9:82:3b:ae:20:24:9d:6a:
         bf:78:c5:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:19 2025 by rpki-client