Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/1It-xLuueafcmnW94iW8krWlEXs.roa
File:                     1It-xLuueafcmnW94iW8krWlEXs.roa (raw, json)
Hash identifier:          jfxcTcw7ylWsQdFoOIb/f9qk5eyJlxjehN5BLf3NgN8=
Subject key identifier:   D4:8B:7E:C4:BB:AE:79:A7:DC:9A:75:BD:E2:25:BC:92:B5:A5:11:7B
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       57
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/1It-xLuueafcmnW94iW8krWlEXs.roa
Signing time:             Sat 31 Aug 2024 01:31:51 +0000
ROA not before:           Sat 31 Aug 2024 01:31:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        210.141.32.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 87 (0x57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=D48B7EC4BBAE79A7DC9A75BDE225BC92B5A5117B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:2f:ed:c6:e2:76:09:eb:f5:f6:0c:5a:5d:e0:
                    b7:0c:9f:b7:e4:5d:9e:1e:08:41:aa:6a:18:99:79:
                    a4:ca:e9:94:f7:1a:49:e3:fa:ac:d4:e7:eb:a6:ba:
                    df:91:f2:2c:c4:5f:13:d0:6e:dd:b6:24:b7:3d:98:
                    46:ed:05:76:29:f9:c5:cc:d5:77:35:9a:aa:2a:57:
                    41:46:da:87:f7:00:25:01:77:bb:90:04:ff:04:01:
                    c5:8b:73:e6:ae:9d:ee:a1:2d:1e:0e:03:30:57:f8:
                    2c:79:db:0e:1a:99:01:04:e7:da:52:1e:bc:30:80:
                    32:18:71:15:fb:ed:3b:00:7f:ec:0c:b9:22:b1:34:
                    15:19:7f:af:60:d5:e9:d7:c7:a4:e7:95:49:c7:5e:
                    be:db:ca:2d:c5:0a:d7:de:d1:7b:4f:d4:b6:a8:37:
                    93:dd:8c:89:68:c3:2e:46:52:d3:de:7f:d4:e5:1f:
                    58:86:9a:bb:a1:8e:26:7a:18:b7:9f:93:8b:16:3b:
                    5c:c5:91:f2:de:d5:5e:b2:06:b6:44:f4:e5:75:8e:
                    7f:33:ce:62:09:dc:e1:9d:9a:f1:42:f8:b9:23:c5:
                    58:3e:6e:7c:56:c1:81:75:e9:64:d0:82:20:13:65:
                    4a:9d:d5:4f:c7:c0:9a:72:5f:cc:f3:b0:26:6d:b4:
                    77:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:7E:C4:BB:AE:79:A7:DC:9A:75:BD:E2:25:BC:92:B5:A5:11:7B
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/1It-xLuueafcmnW94iW8krWlEXs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.141.32.0/19

    Signature Algorithm: sha256WithRSAEncryption
         50:d2:ab:7f:77:7b:68:a4:84:f7:55:c8:19:e7:bf:77:d9:79:
         c1:9e:5c:1c:5a:97:bc:12:a1:bc:6f:19:01:6b:3c:c9:b4:92:
         f6:ab:36:61:32:f4:df:3c:cb:56:06:1a:13:f5:a2:a6:51:f1:
         33:b5:42:cd:28:52:f8:d8:1d:31:88:d2:c2:7a:1d:b7:b1:4e:
         b4:12:ff:fe:8a:fc:bd:fd:fd:72:d8:88:0e:3f:be:c8:31:7a:
         f4:07:67:1d:a2:16:34:c7:54:5f:d7:21:e0:67:99:df:6a:f6:
         15:f4:d5:dd:ef:ea:f8:d1:fd:6c:61:fb:fb:64:78:cc:5f:14:
         16:a0:26:f3:19:90:95:7e:e7:da:dc:f3:3b:8c:e7:d0:ed:f0:
         44:39:b8:57:ae:e2:e1:de:eb:36:db:42:a6:bb:a4:5f:2a:6f:
         c7:25:d4:32:cf:61:55:5e:05:c4:ae:a0:52:91:59:92:3d:df:
         dc:7e:9b:bc:b3:19:87:68:84:ce:2c:04:84:84:d5:3c:27:18:
         ca:d5:87:e7:4e:bd:16:76:b9:ae:2e:c8:d6:9f:64:b6:0c:af:
         98:98:02:fb:d8:57:e2:c3:a9:97:d4:65:97:54:ce:1d:e6:fb:
         97:be:5a:18:b5:ef:cc:6d:77:35:22:0d:46:3c:08:cc:16:45:
         63:ab:ae:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:09:14 2025 by rpki-client