Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/530/qeYJOaSfHQxOdAahUaMVz3UxA6E.roa
File:                     qeYJOaSfHQxOdAahUaMVz3UxA6E.roa (raw, json)
Hash identifier:          u94VBplszEYvhiiAu6StGUC8LluyQer1fzoGeIBeJnY=
Subject key identifier:   A9:E6:09:39:A4:9F:1D:0C:4E:74:06:A1:51:A3:15:CF:75:31:03:A1
Certificate issuer:       /CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
Certificate serial:       49
Authority key identifier: 40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/qeYJOaSfHQxOdAahUaMVz3UxA6E.roa
Signing time:             Thu 31 Oct 2024 01:29:58 +0000
ROA not before:           Thu 31 Oct 2024 01:29:58 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     59125
IP address blocks:        160.237.64.0/19 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/b2g-rjmhc4rmyT_fBB8RSOZTTfI.mft
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/b2g-rjmhc4rmyT_fBB8RSOZTTfI.cer
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.crl
                          rsync://rpki.apnic.net/repository/B3A24F201D6611E28AC8837C72FD1FF2/dAFlqA0QcZcKvAnAK3HBrHwdbg4.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/dAFlqA0QcZcKvAnAK3HBrHwdbg4.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 73 (0x49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=40D220B9E4A6358E03CD47864517D9D300B06FF0
        Validity
            Not Before: Oct 31 01:29:58 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=A9E60939A49F1D0C4E7406A151A315CF753103A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:d9:c9:46:6c:19:66:48:ab:eb:8f:fb:11:a6:
                    cf:18:90:5d:6f:eb:a3:ee:d9:95:08:d2:2b:eb:ee:
                    4b:97:6c:65:ad:22:66:84:be:51:9c:a2:74:9a:07:
                    78:34:60:cb:69:c6:4b:8d:63:b4:05:cb:69:c5:63:
                    44:55:58:10:13:64:e4:1f:f0:10:75:71:b8:32:a1:
                    d2:c9:64:36:b3:90:5e:4c:31:f1:fa:66:4f:70:9b:
                    f9:96:d1:21:b5:c3:26:da:4e:25:a8:f7:01:58:fa:
                    27:2e:dd:22:b2:76:95:b6:45:a2:8a:a0:69:6a:9d:
                    56:26:f6:c0:3a:b7:fe:d4:0a:24:fc:03:35:82:1a:
                    1d:4c:3b:91:1e:24:a2:48:c6:c9:8c:35:8d:c8:19:
                    f5:99:87:b6:4a:7c:d7:d4:a5:18:8b:d6:b4:58:cb:
                    ac:5c:22:bb:d9:db:5d:e3:f7:a2:0a:fb:11:45:0c:
                    68:fc:d2:ce:97:0c:06:92:1a:14:27:33:0e:d9:83:
                    b1:bd:5d:8a:c3:4b:51:40:ac:24:2a:c0:ce:4e:5d:
                    05:6d:73:f3:5f:6c:02:dc:ff:93:ab:ee:63:40:33:
                    5e:33:57:38:79:4a:5e:b8:d7:1a:9b:9e:b4:f1:26:
                    82:b1:ca:f2:4f:78:d5:a2:28:25:8f:c4:24:b7:9a:
                    a8:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E6:09:39:A4:9F:1D:0C:4E:74:06:A1:51:A3:15:CF:75:31:03:A1
            X509v3 Authority Key Identifier:
                keyid:40:D2:20:B9:E4:A6:35:8E:03:CD:47:86:45:17:D9:D3:00:B0:6F:F0

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/QNIgueSmNY4DzUeGRRfZ0wCwb_A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/QNIgueSmNY4DzUeGRRfZ0wCwb_A.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/530/qeYJOaSfHQxOdAahUaMVz3UxA6E.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.237.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         3a:39:31:81:71:7e:e0:3c:49:76:64:80:55:3a:97:d9:27:4f:
         43:97:18:28:49:74:3e:ee:97:ad:56:d7:95:93:e6:c7:05:69:
         52:05:7c:44:a5:26:a3:5c:c5:11:95:76:0e:7f:0d:d7:8e:f5:
         fc:40:11:ef:b9:e1:70:06:97:2c:34:dc:74:3a:3a:6a:10:56:
         61:5d:be:b8:f5:89:ea:25:4d:f7:bb:28:92:0a:9a:37:2e:2e:
         96:68:28:50:1f:60:0a:47:08:1e:95:59:41:ac:3f:68:1a:85:
         e7:a6:31:b0:72:e7:90:2c:0a:4e:6a:53:cd:3a:88:3b:aa:9c:
         25:97:52:6a:14:92:05:af:2c:14:0c:cb:b7:aa:3d:51:69:2f:
         bf:1a:16:a2:cd:77:e7:5e:5b:05:7b:d2:1e:66:b1:21:3a:09:
         31:f1:fd:f2:ad:e1:eb:1d:3a:4c:29:59:47:db:ed:15:1b:a0:
         ea:b7:eb:eb:cb:bf:c1:cc:ae:00:56:aa:42:79:6a:97:45:73:
         83:ad:54:d5:c2:1b:9b:fd:77:22:53:9c:1a:a7:be:5f:4c:a9:
         1d:0d:ae:de:7d:cf:91:7a:97:d0:d5:c3:e0:83:4d:77:e7:dc:
         23:9a:af:31:0b:4c:26:08:80:b0:d5:33:f2:8a:5c:c7:f5:27:
         b4:8b:13:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:36 2025 by rpki-client