Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/506/z8w5w4oOLx5Q6GimGYVJoiTGIJk.roa
File:                     z8w5w4oOLx5Q6GimGYVJoiTGIJk.roa (raw, json)
Hash identifier:          fSfdcMC5OGUCmOD/CfrzSsE57m+vvr5lVOhGfO0v7tE=
Subject key identifier:   CF:CC:39:C3:8A:0E:2F:1E:50:E8:68:A6:19:85:49:A2:24:C6:20:99
Certificate issuer:       /CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
Certificate serial:       45
Authority key identifier: 4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/z8w5w4oOLx5Q6GimGYVJoiTGIJk.roa
Signing time:             Fri 02 Aug 2024 08:36:44 +0000
ROA not before:           Fri 02 Aug 2024 08:36:44 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     16509
IP address blocks:        103.23.5.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 69 (0x45)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4BEA6BD8A9C7848829141999A016A0C9D19912AF
        Validity
            Not Before: Aug  2 08:36:44 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=CFCC39C38A0E2F1E50E868A6198549A224C62099
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:13:68:3b:66:8c:0d:7c:2f:5b:85:8f:8b:26:
                    08:d1:17:b5:42:d3:89:e8:6c:10:e7:45:62:12:ed:
                    b6:63:b4:d6:fd:57:a5:df:af:fe:73:9e:b0:74:e0:
                    7f:4b:f3:2e:ac:6d:8d:62:31:fa:32:20:90:11:d4:
                    97:03:59:8a:3a:87:08:96:cc:a2:2d:b2:39:90:95:
                    60:fe:19:22:9f:56:ae:f7:a7:5c:64:4e:cd:86:b4:
                    cb:c6:d5:16:b5:4e:fa:db:17:46:d7:4d:67:d5:85:
                    15:b2:f1:3d:06:91:9e:bc:10:d5:02:65:6c:85:ad:
                    72:86:69:6b:6f:df:99:6f:6b:8c:73:8d:97:e0:4a:
                    a3:a0:3e:39:6a:f3:9d:d8:46:b8:30:4b:1f:73:ad:
                    d4:28:5e:4f:75:a3:b1:7e:d0:98:ac:af:fc:be:e1:
                    2d:cc:7a:12:cc:b5:cc:36:f1:7f:8e:71:fb:08:b7:
                    9a:1f:45:d4:c4:d7:a7:4e:ce:d9:c1:f4:25:2c:6b:
                    61:00:66:c6:5f:58:3f:24:44:87:98:19:ff:b1:38:
                    ba:36:92:16:49:b4:5f:1d:aa:11:12:a4:d3:95:2b:
                    b2:a4:98:67:8e:1d:af:7b:ec:2a:4f:b5:92:c9:f3:
                    65:49:5d:f0:67:a1:97:f3:49:41:10:79:d4:54:bc:
                    fd:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:CC:39:C3:8A:0E:2F:1E:50:E8:68:A6:19:85:49:A2:24:C6:20:99
            X509v3 Authority Key Identifier:
                keyid:4B:EA:6B:D8:A9:C7:84:88:29:14:19:99:A0:16:A0:C9:D1:99:12:AF

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/S-pr2KnHhIgpFBmZoBagydGZEq8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/S-pr2KnHhIgpFBmZoBagydGZEq8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/506/z8w5w4oOLx5Q6GimGYVJoiTGIJk.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.23.5.0/24

    Signature Algorithm: sha256WithRSAEncryption
         08:ff:06:5e:b9:73:fd:3d:e1:7a:e3:c1:b2:1f:2d:2b:c2:7c:
         d2:25:63:62:11:10:64:8e:b0:ac:59:09:4a:7c:5a:29:49:0d:
         f3:12:47:39:e6:4c:86:3b:c4:90:8f:da:66:f0:4c:af:0e:8c:
         69:00:dd:5f:c5:ba:7f:31:5b:48:05:fd:9b:b7:a0:ad:69:e1:
         1b:ff:cf:5e:5c:c4:3f:af:59:2c:9b:50:b4:7d:ef:15:b6:5f:
         cc:ae:5d:00:ce:4c:74:fb:5c:aa:e0:2f:e6:d1:e6:21:e2:d5:
         ef:c9:33:22:dd:f6:17:64:61:3c:3b:74:6a:19:c8:8d:2a:be:
         79:63:18:e8:10:00:cd:3f:ef:a1:8d:3b:e5:8d:2d:29:a3:39:
         a2:6c:79:b7:81:de:c3:4d:69:b2:80:05:d3:00:f8:50:5f:92:
         b1:e4:b1:b2:32:91:2e:30:58:55:35:bb:45:66:12:33:67:8b:
         8f:c6:03:6d:ed:2e:eb:f7:19:74:33:42:dd:43:e8:77:d4:b2:
         74:55:9f:10:51:e1:ab:6d:64:b7:e1:40:87:4c:f1:ae:dd:92:
         43:c4:d0:7b:11:07:c4:de:23:2a:08:38:05:da:d9:8d:11:7d:
         36:e7:d0:07:95:a0:9d:cc:4a:dd:59:e0:89:8f:16:e6:4b:45:
         87:6e:3f:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:42:20 2025 by rpki-client