Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTlDQn2JLBsLO2KcgYaXZqiD-Ac.roa
File:                     jTlDQn2JLBsLO2KcgYaXZqiD-Ac.roa (raw, json)
Hash identifier:          /jk4W6Voq8+ILswDdVUVpRrJt7ryNtyywAZEzLESzdg=
Subject key identifier:   8D:39:43:42:7D:89:2C:1B:0B:3B:62:9C:81:86:97:66:A8:83:F8:07
Certificate issuer:       /CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
Certificate serial:       0195
Authority key identifier: 29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTlDQn2JLBsLO2KcgYaXZqiD-Ac.roa
Signing time:             Mon 30 Sep 2024 01:30:16 +0000
ROA not before:           Mon 30 Sep 2024 01:30:16 +0000
ROA not after:            Mon 15 Sep 2025 01:30:03 +0000
asID:                     32787
IP address blocks:        210.130.224.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 405 (0x195)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2983CFD5F8CAFA0068D2EBA25ED0F701244B12F9
        Validity
            Not Before: Sep 30 01:30:16 2024 GMT
            Not After : Sep 15 01:30:03 2025 GMT
        Subject: CN=8D3943427D892C1B0B3B629C81869766A883F807
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:55:10:ac:c3:9e:c2:8f:b7:49:f9:ed:5f:7a:
                    25:3b:c9:3c:79:bf:cd:ac:72:b6:46:70:31:c0:a8:
                    d6:f8:2d:03:80:b4:c2:ea:2b:bb:31:73:a9:3c:5c:
                    05:ac:7f:fd:1d:50:84:d1:9e:e0:5e:48:3b:aa:db:
                    dd:d3:26:a5:d3:dc:42:95:a2:3e:83:06:fe:8e:88:
                    95:79:2c:6e:2c:aa:b6:b4:5c:aa:ef:fb:e3:ad:92:
                    f9:da:49:34:7e:81:0e:a2:24:3a:1c:b4:74:b7:7c:
                    5c:8a:67:44:af:28:f8:f9:a6:a5:67:7b:75:22:65:
                    f4:0e:8a:ff:84:bc:8f:9e:9f:b6:60:d9:1a:24:68:
                    68:83:01:7e:aa:e0:1a:37:e6:7f:07:a5:80:bf:50:
                    6e:b6:d3:ca:9f:e2:de:d2:eb:20:01:bf:6d:18:6b:
                    c4:51:02:fb:77:e3:7f:0f:3f:3f:df:11:39:64:16:
                    6a:b9:64:aa:1e:89:63:e4:de:ec:11:4e:68:e1:f2:
                    55:9a:0b:bf:9c:7c:0f:8e:fc:76:e0:a3:8e:bb:e0:
                    c6:97:84:54:09:f2:cf:d9:54:4d:05:f9:5b:a0:e8:
                    83:e3:08:6d:f6:02:57:48:7b:d7:77:d6:5f:2b:06:
                    34:6c:8d:21:a6:49:9c:63:d8:19:13:af:d7:5a:6d:
                    32:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8D:39:43:42:7D:89:2C:1B:0B:3B:62:9C:81:86:97:66:A8:83:F8:07
            X509v3 Authority Key Identifier:
                keyid:29:83:CF:D5:F8:CA:FA:00:68:D2:EB:A2:5E:D0:F7:01:24:4B:12:F9

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/KYPP1fjK-gBo0uuiXtD3ASRLEvk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/KYPP1fjK-gBo0uuiXtD3ASRLEvk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/6/jTlDQn2JLBsLO2KcgYaXZqiD-Ac.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.130.224.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:89:a3:bc:06:19:8e:ac:4b:a6:aa:c4:86:ee:a3:e3:04:72:
         b0:c0:4c:0b:97:9a:99:c3:53:60:eb:90:75:1c:58:c4:68:81:
         b8:4a:8f:25:9d:61:b2:a7:3e:de:0a:bc:90:58:95:e0:b9:51:
         31:95:1b:04:86:cf:98:ba:4b:0d:62:e2:03:5c:ff:07:c6:c5:
         b8:1b:69:94:70:e8:f7:6f:72:fc:4b:83:3d:51:7a:e4:b9:3f:
         45:e9:98:65:af:1a:a7:05:42:cf:66:2e:fd:51:d8:de:c8:9e:
         7b:3c:e2:c2:62:fd:db:a9:44:50:73:db:b9:aa:fc:ad:16:2b:
         34:f0:60:86:a1:88:44:14:cf:99:08:18:dc:83:10:92:0c:93:
         e8:4f:d5:45:d0:bb:ef:b3:c9:d3:af:31:0f:96:5d:c7:cf:d1:
         95:a8:99:77:29:67:3c:32:0f:16:17:99:7d:d4:80:cc:f6:e9:
         30:ea:c9:54:f7:2e:52:8a:05:c4:a4:80:d6:27:04:92:8d:61:
         62:6b:eb:84:1e:66:9b:02:cd:ff:20:20:6a:9e:0b:70:6c:71:
         25:d9:ec:fa:8d:75:70:c0:3f:ff:84:07:f2:56:54:eb:32:62:
         ab:7e:5a:36:3a:0b:3a:56:18:a8:dd:ca:53:58:97:7b:41:3c:
         67:e9:c8:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 15:12:06 2025 by rpki-client