Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/50/PGFvIODHcMiUxvisdB99v8ms10Q.roa
File:                     PGFvIODHcMiUxvisdB99v8ms10Q.roa (raw, json)
Hash identifier:          iiy9yvBphWII1QoyfxieVLhqetE7o1dztNDKmRGSg34=
Subject key identifier:   3C:61:6F:20:E0:C7:70:C8:94:C6:F8:AC:74:1F:7D:BF:C9:AC:D7:44
Certificate issuer:       /CN=D405A6909AB9956CF7393D0E312A269A804005EF
Certificate serial:       22
Authority key identifier: D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PGFvIODHcMiUxvisdB99v8ms10Q.roa
Signing time:             Sat 31 Aug 2024 01:34:06 +0000
ROA not before:           Sat 31 Aug 2024 01:34:06 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4685
IP address blocks:        157.107.0.0/16 maxlen: 16
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 34 (0x22)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D405A6909AB9956CF7393D0E312A269A804005EF
        Validity
            Not Before: Aug 31 01:34:06 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3C616F20E0C770C894C6F8AC741F7DBFC9ACD744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:59:72:40:81:3b:cf:78:25:24:a0:94:4f:9e:
                    7b:e6:76:eb:ce:49:1b:13:46:79:28:35:0c:61:b6:
                    77:1a:68:91:fa:83:de:ed:48:de:d2:14:64:dc:e6:
                    7c:2d:20:3b:fb:47:ee:68:b5:c1:eb:ac:12:48:44:
                    48:66:3f:1f:fa:10:1f:17:6e:ad:1c:3c:3a:51:3f:
                    8c:cb:c4:13:38:d7:b8:74:48:33:0f:5b:69:1d:76:
                    89:8b:33:00:19:f2:95:23:e8:67:17:ae:ba:a2:21:
                    38:0b:b4:3e:c6:9a:c6:8d:34:5d:a9:35:81:03:47:
                    98:43:10:e9:65:50:ab:9e:24:28:74:d5:87:35:9c:
                    19:86:c7:bf:8a:66:82:42:7d:55:db:55:1f:eb:6c:
                    27:d7:f7:bf:f1:41:c8:31:7e:4f:3e:94:e7:3a:9b:
                    f2:15:8f:bf:57:b3:ac:3c:48:82:44:e3:d0:e9:29:
                    63:3b:fc:f7:d5:14:49:3a:27:0e:ac:e7:cc:aa:1a:
                    ba:18:5e:3f:c9:45:5f:48:40:d4:6c:ed:bc:c4:9d:
                    bc:b4:4f:b3:46:0b:35:6b:6e:07:64:dc:d9:67:1b:
                    16:7f:a7:7c:2c:84:5a:73:d8:f6:a8:78:2a:a0:d7:
                    3d:6d:94:ef:36:0a:b4:ff:56:5f:38:e0:1c:8d:7e:
                    ca:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:61:6F:20:E0:C7:70:C8:94:C6:F8:AC:74:1F:7D:BF:C9:AC:D7:44
            X509v3 Authority Key Identifier:
                keyid:D4:05:A6:90:9A:B9:95:6C:F7:39:3D:0E:31:2A:26:9A:80:40:05:EF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/1AWmkJq5lWz3OT0OMSommoBABe8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/1AWmkJq5lWz3OT0OMSommoBABe8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/50/PGFvIODHcMiUxvisdB99v8ms10Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  157.107.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         54:e7:14:a8:0d:cb:71:27:84:01:50:cf:37:11:d5:28:d1:6f:
         07:87:28:6a:25:93:6a:ac:9e:af:0c:c1:f0:54:f6:b3:54:de:
         65:9e:f9:60:48:24:5f:ea:b8:66:b1:a1:36:23:ee:a5:f7:92:
         53:fe:9b:91:c3:a7:7c:e3:86:c2:c3:ae:2f:a7:62:65:d3:57:
         e1:20:99:15:bf:1a:92:ef:99:d4:75:b6:0b:3e:1b:90:1c:d7:
         e3:74:03:c8:97:54:3c:a0:bf:b7:64:71:37:be:29:6b:cf:0d:
         dd:9c:44:ff:e3:6c:eb:0a:63:a0:61:31:34:2f:9d:e4:8c:46:
         52:e1:98:81:b6:49:a7:ae:7f:bd:85:4b:bb:6e:2c:eb:23:8f:
         92:9d:42:f0:a7:df:92:ce:a5:d1:84:a2:13:3c:68:f8:01:30:
         1a:e6:09:c0:75:a1:b5:fe:cb:1d:c1:c8:7e:a3:aa:16:40:52:
         8d:14:ce:62:40:32:01:5a:5a:9d:0d:6b:ab:4a:e1:f7:25:69:
         b1:c5:d9:6a:dd:5f:5e:42:17:93:ed:0b:27:5f:fa:05:27:66:
         26:c5:0d:2d:22:ce:ae:15:25:0c:77:bb:a7:8b:73:01:8b:f7:
         75:59:57:62:f7:76:4c:df:63:43:94:b9:11:92:9a:fc:92:57:
         7b:fa:e2:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:54 2025 by rpki-client