Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/675/_3fKKrxoJFiGw3gInSfFwoy-wcg.roa
File:                     _3fKKrxoJFiGw3gInSfFwoy-wcg.roa (raw, json)
Hash identifier:          KUItZO04gwjHlkBGdA2UvNufL/L82fN4/M6Di6oespw=
Subject key identifier:   FF:77:CA:2A:BC:68:24:58:86:C3:78:08:9D:27:C5:C2:8C:BE:C1:C8
Certificate issuer:       /CN=041FC867F39C53644D0C5C50994B55111BD76CA3
Certificate serial:       05
Authority key identifier: 04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/_3fKKrxoJFiGw3gInSfFwoy-wcg.roa
Signing time:             Mon 23 Dec 2024 02:56:03 +0000
ROA not before:           Mon 23 Dec 2024 02:56:03 +0000
ROA not after:            Fri 19 Dec 2025 12:41:20 +0000
asID:                     14618
IP address blocks:        218.223.15.0/24 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 12 Feb 2025 04:51:57 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 5 (0x5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=041FC867F39C53644D0C5C50994B55111BD76CA3
        Validity
            Not Before: Dec 23 02:56:03 2024 GMT
            Not After : Dec 19 12:41:20 2025 GMT
        Subject: CN=FF77CA2ABC68245886C378089D27C5C28CBEC1C8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:7c:fc:3a:52:c8:16:a2:e4:78:07:e2:a0:32:
                    ae:4b:29:d9:19:12:94:60:74:48:ee:9f:88:32:9d:
                    0d:b0:2c:50:31:99:54:25:e8:65:58:09:fe:bf:65:
                    d7:e9:60:d9:4b:e7:a8:f9:4f:da:93:de:97:b0:97:
                    17:9a:24:08:54:30:2d:58:55:6b:ba:2a:07:d8:21:
                    54:30:a0:e9:3a:c3:ff:ec:c7:e0:4f:3b:78:93:6b:
                    3f:a9:c7:10:95:cb:af:7c:77:18:3c:48:7f:97:37:
                    1b:aa:6b:33:be:4a:14:d5:76:34:7c:c8:c0:6b:58:
                    cf:4c:e3:ab:fc:a1:66:a6:71:bf:de:a8:ef:3a:56:
                    c9:f6:6f:5d:c2:ad:38:88:30:bb:0f:46:e0:71:61:
                    8c:3c:db:93:26:a6:fb:d3:d3:d5:04:9d:ab:e6:7b:
                    db:4d:0a:da:e4:17:ba:c1:bc:1d:ef:10:f5:10:ee:
                    89:4e:d6:59:98:b4:ae:4a:df:2a:3f:6f:4f:d9:f2:
                    27:5b:f6:32:1e:fc:11:db:cb:81:8f:7d:7b:17:81:
                    c8:5e:9b:ff:dd:e0:cc:81:58:d6:a2:1b:5b:3b:84:
                    85:5d:b5:52:53:11:58:b1:a4:f9:fc:05:da:65:f3:
                    39:55:3e:4d:c7:fc:91:3f:bd:e6:b4:81:0b:82:13:
                    d6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:77:CA:2A:BC:68:24:58:86:C3:78:08:9D:27:C5:C2:8C:BE:C1:C8
            X509v3 Authority Key Identifier:
                keyid:04:1F:C8:67:F3:9C:53:64:4D:0C:5C:50:99:4B:55:11:1B:D7:6C:A3

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/BB_IZ_OcU2RNDFxQmUtVERvXbKM.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/BB_IZ_OcU2RNDFxQmUtVERvXbKM.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/675/_3fKKrxoJFiGw3gInSfFwoy-wcg.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  218.223.15.0/24

    Signature Algorithm: sha256WithRSAEncryption
         89:1e:a8:28:3f:f4:36:77:7a:21:78:32:07:a8:58:0d:4f:da:
         8d:91:7e:ae:dd:d5:d8:62:62:f7:0f:ed:eb:5b:16:22:74:bb:
         c6:35:a3:e8:02:16:b1:34:93:03:e9:a1:25:50:19:61:5b:d5:
         86:6b:fe:1c:e4:f9:e3:29:68:af:ee:22:4e:41:19:d4:36:9f:
         08:62:3a:74:ea:a8:39:8b:5b:b5:fc:e6:af:11:b2:39:27:96:
         d7:c0:ba:e1:45:59:b7:04:ab:c6:be:19:52:12:94:41:41:b0:
         bb:4e:ee:7c:c3:8c:df:db:b5:7f:b5:6d:f9:57:ad:dd:70:1c:
         f9:03:59:de:12:58:c6:87:b5:ec:08:9f:7e:c8:64:91:43:25:
         ea:cf:f9:7c:58:9b:c8:50:8a:b7:ee:8b:e3:de:3e:bb:9a:39:
         bc:f9:6e:b5:0f:28:73:97:fd:56:31:df:af:88:f2:9d:c6:63:
         4e:53:e2:2f:c1:16:2e:31:2f:b7:a9:36:94:1d:e7:9b:bb:26:
         17:a9:27:5f:6c:70:63:82:e5:8d:f2:90:c1:70:af:d8:c6:01:
         8f:61:28:26:11:93:1b:c7:20:38:1b:19:e0:46:8f:d7:26:59:
         be:d4:f3:83:36:d6:05:48:2f:72:82:0c:4a:8b:8d:de:97:f9:
         50:57:9f:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 5 09:37:48 2025 by rpki-client