Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/539/cedvPFFIJI7dax7g4aRu34vaDbw.roa
File:                     cedvPFFIJI7dax7g4aRu34vaDbw.roa (raw, json)
Hash identifier:          yfquc7AZ3BRIydy5oy8S7LkHb3wtQqpF2Hz37VsrK94=
Subject key identifier:   71:E7:6F:3C:51:48:24:8E:DD:6B:1E:E0:E1:A4:6E:DF:8B:DA:0D:BC
Certificate issuer:       /CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
Certificate serial:       72
Authority key identifier: 5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/cedvPFFIJI7dax7g4aRu34vaDbw.roa
Signing time:             Wed 31 Jul 2024 01:28:04 +0000
ROA not before:           Wed 31 Jul 2024 01:28:04 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     55900
IP address blocks:        202.171.224.0/21 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 114 (0x72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5B0D72F9F430B7D4003375F10D5025B9E5C00437
        Validity
            Not Before: Jul 31 01:28:04 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=71E76F3C5148248EDD6B1EE0E1A46EDF8BDA0DBC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:c6:f8:60:d3:d2:a0:f9:a2:02:ba:7b:92:72:
                    f8:7e:ea:4c:50:d8:ea:f4:57:18:31:9f:68:12:5b:
                    0c:52:80:2a:bf:f7:37:f8:88:39:15:a0:31:35:85:
                    81:74:aa:9b:21:b3:1a:ab:67:51:ec:7c:f3:21:c0:
                    bf:ca:99:a1:45:f7:6e:56:33:53:a5:88:96:99:a4:
                    97:1f:18:64:6d:15:b3:dc:15:1d:29:36:e8:74:b4:
                    5f:35:87:58:8d:c1:ff:6a:f7:e3:68:e0:f0:80:44:
                    02:0b:5d:b5:64:e5:8a:cc:2e:2b:0f:c0:ee:53:47:
                    b8:77:4f:3e:6e:58:73:87:8c:27:55:51:0c:eb:9b:
                    10:bc:e2:1d:7c:cd:db:5c:93:12:e9:24:95:e4:3c:
                    5c:16:2a:6e:83:57:97:9a:3d:aa:3e:f5:d0:17:2a:
                    81:9d:7b:b7:07:40:06:8e:67:b6:8a:68:db:94:1b:
                    64:e2:1d:1d:ac:0e:79:c2:de:09:6a:c6:10:71:5c:
                    41:23:17:e4:7e:a0:46:93:f9:66:7d:f6:68:a9:03:
                    e3:4b:b9:56:e6:ee:68:eb:6d:81:9f:5e:67:52:06:
                    3b:6e:6f:7e:95:d9:bc:c2:14:96:4b:be:cd:59:7b:
                    1d:63:ca:ec:c6:2a:28:5d:13:90:39:b7:b6:0b:04:
                    a7:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:E7:6F:3C:51:48:24:8E:DD:6B:1E:E0:E1:A4:6E:DF:8B:DA:0D:BC
            X509v3 Authority Key Identifier:
                keyid:5B:0D:72:F9:F4:30:B7:D4:00:33:75:F1:0D:50:25:B9:E5:C0:04:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/Ww1y-fQwt9QAM3XxDVAlueXABDc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Ww1y-fQwt9QAM3XxDVAlueXABDc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/539/cedvPFFIJI7dax7g4aRu34vaDbw.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.171.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         9e:77:62:9d:f8:e8:94:6a:8e:f8:ac:b3:10:ed:2a:c0:9e:37:
         ad:4c:9a:e6:c8:c0:98:74:9a:37:e4:fc:75:ec:13:eb:68:17:
         b5:44:5c:9d:7a:4e:e4:e2:a7:0b:67:bb:9d:90:60:c3:32:7b:
         bd:53:9d:cf:32:53:78:f6:29:73:68:2e:49:df:27:47:e9:10:
         2c:75:7d:e7:7d:a6:ce:a9:19:6d:fb:db:3d:99:7e:34:8a:51:
         3c:f7:a3:77:df:4a:f6:12:78:b7:8d:b9:14:11:53:3e:6b:9e:
         30:15:e7:6f:f1:c7:f6:38:68:e5:fb:99:5e:7d:db:fc:49:43:
         11:bf:63:e6:d6:30:38:07:19:9f:15:4f:d5:0c:9f:aa:2f:d4:
         4f:f0:60:d6:f1:40:90:d0:d2:94:95:51:05:73:e4:34:df:73:
         1d:72:85:8a:4a:75:f3:e0:b7:ff:b6:2d:3f:59:a3:a5:30:5c:
         32:49:62:1f:45:58:e2:4a:da:c4:16:74:bb:e7:94:67:55:5c:
         bd:82:3b:1a:d9:fa:09:0b:d4:9a:4d:d6:cc:ca:ec:6e:c5:cf:
         2e:f6:aa:93:a3:e2:a0:85:f8:ce:30:3f:8a:63:5f:9c:62:c0:
         4b:d6:4a:49:ea:4a:8e:49:3e:b4:a9:5c:a1:33:9d:f9:43:15:
         63:cd:0c:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:08:16 2025 by rpki-client