Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/54/LG-Nf37VmFxoLd-7An4qrmue15k.roa
File:                     LG-Nf37VmFxoLd-7An4qrmue15k.roa (raw, json)
Hash identifier:          uIZYviYs0Ev8Jl99IfGD4f5sMkahihUjHNq9wQ3iHi0=
Subject key identifier:   2C:6F:8D:7F:7E:D5:98:5C:68:2D:DF:BB:02:7E:2A:AE:6B:9E:D7:99
Certificate issuer:       /CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
Certificate serial:       14
Authority key identifier: 5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/LG-Nf37VmFxoLd-7An4qrmue15k.roa
Signing time:             Sat 31 Aug 2024 01:32:17 +0000
ROA not before:           Sat 31 Aug 2024 01:32:17 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     4695
IP address blocks:        202.231.128.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 20 (0x14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5D8F48F99C5B0745B77F8BCA754E63885CADC418
        Validity
            Not Before: Aug 31 01:32:17 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=2C6F8D7F7ED5985C682DDFBB027E2AAE6B9ED799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a0:36:14:5b:12:c1:4c:35:bd:f7:60:e8:b3:
                    1f:9c:11:38:71:b9:04:d2:3e:90:aa:df:92:76:f2:
                    43:06:e2:40:73:e7:15:a7:d2:f1:cf:7c:43:bd:80:
                    b5:05:5d:54:e2:41:83:82:68:56:f8:3f:9d:0b:c7:
                    9f:c4:45:a2:3d:6a:1a:0c:5f:58:f9:e3:9e:7a:ef:
                    47:66:1e:2b:17:af:c3:bd:4f:6f:0d:44:b4:d1:ac:
                    27:c4:72:82:24:7f:c6:a2:bf:d3:1b:29:40:a6:2c:
                    28:64:51:b8:13:2a:d6:1e:14:45:3f:04:58:d2:f9:
                    e3:e8:a6:55:de:51:bc:9d:bc:a5:06:9a:2f:18:62:
                    a6:cc:31:09:d0:d1:63:77:af:f8:f7:16:0b:5d:30:
                    9f:91:d9:9f:b3:98:ad:8b:a9:4a:19:e4:ad:02:63:
                    c7:82:77:e9:94:34:4d:bf:9a:57:6d:54:3f:88:ea:
                    9d:df:c7:10:87:a0:f7:ad:91:dc:f6:5c:5f:d4:76:
                    00:5c:dd:3e:4f:3e:ed:ca:f8:69:9c:6d:fe:fd:a7:
                    e5:d6:3c:f3:06:6c:94:d0:bf:9b:8d:7c:63:ec:ec:
                    2f:85:06:82:5a:79:5f:e4:6f:21:e2:08:c6:a1:df:
                    e0:17:bd:7f:1d:cd:f8:2c:d5:81:11:ae:c7:34:52:
                    f7:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:6F:8D:7F:7E:D5:98:5C:68:2D:DF:BB:02:7E:2A:AE:6B:9E:D7:99
            X509v3 Authority Key Identifier:
                keyid:5D:8F:48:F9:9C:5B:07:45:B7:7F:8B:CA:75:4E:63:88:5C:AD:C4:18

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/XY9I-ZxbB0W3f4vKdU5jiFytxBg.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/XY9I-ZxbB0W3f4vKdU5jiFytxBg.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/54/LG-Nf37VmFxoLd-7An4qrmue15k.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.231.128.0/19

    Signature Algorithm: sha256WithRSAEncryption
         6c:34:8d:27:19:a8:d9:90:70:fd:ee:43:81:3c:81:a3:c2:41:
         5a:00:46:cb:53:ba:05:0a:c2:4a:48:03:84:3e:eb:1a:34:6f:
         64:97:78:00:ed:44:6f:4d:96:f8:6b:cd:d0:00:dc:c8:32:58:
         ca:51:fb:f5:d6:2c:b1:f5:9d:df:5c:30:07:ec:34:d1:c9:19:
         f1:de:d4:6a:fe:56:f7:8d:b2:9f:90:4c:24:e8:3b:07:28:78:
         b1:2e:16:d7:fd:14:96:ee:69:48:b5:07:87:cc:10:b4:37:06:
         a5:1c:db:af:db:8d:15:2f:32:a0:8a:f8:6e:34:ee:41:a8:0f:
         a0:55:37:0f:37:0e:77:ca:7e:d9:de:9d:b7:8a:78:9f:a6:ab:
         f2:bc:f7:38:6e:2e:b7:d0:22:3a:d1:d0:3a:b6:db:ee:08:7e:
         c0:6f:05:8f:a8:47:27:59:04:01:e9:b0:2f:68:ce:66:eb:82:
         b2:54:37:e6:ab:dd:ac:c7:44:86:c0:ad:15:71:95:b3:2a:d5:
         6d:0a:8e:f5:b8:7c:ee:fa:e6:36:34:ee:2b:aa:14:73:a8:c7:
         ae:e2:9b:53:4a:74:fb:79:48:85:11:a6:42:1e:a4:d1:b4:80:
         dd:68:ee:2c:40:3e:09:66:cb:a5:af:de:7b:0b:c5:c9:84:ef:
         d0:0c:b9:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:04:11 2025 by rpki-client