Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/OULRgt9lzPl4nE9Re2rFj_Qpgio.roa
File:                     OULRgt9lzPl4nE9Re2rFj_Qpgio.roa (raw, json)
Hash identifier:          N/RQzpyWdjgmh3FhF30TdjUh/bJV6Zkm+tLqtGhTonc=
Subject key identifier:   39:42:D1:82:DF:65:CC:F9:78:9C:4F:51:7B:6A:C5:8F:F4:29:82:2A
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       58
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/OULRgt9lzPl4nE9Re2rFj_Qpgio.roa
Signing time:             Sat 31 Aug 2024 01:31:51 +0000
ROA not before:           Sat 31 Aug 2024 01:31:51 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        210.199.96.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:51 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=3942D182DF65CCF9789C4F517B6AC58FF429822A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:15:47:02:77:e9:5c:e5:d9:5e:6a:a9:83:d4:
                    b8:fd:8d:2b:c9:e9:8c:fa:79:d1:c3:90:70:d6:6c:
                    0f:18:72:77:e9:da:2c:2c:fd:66:ce:ea:bd:3b:08:
                    56:59:89:91:73:8c:ef:9f:55:01:50:55:c5:4c:cd:
                    36:e8:2b:88:1f:b7:35:8d:2b:43:5d:0e:26:32:e1:
                    c9:ed:77:79:a2:8f:92:3d:f4:82:ec:9b:7d:e2:aa:
                    66:b7:4d:06:30:9e:f6:f3:19:59:12:ec:ce:3c:1a:
                    27:cd:5d:1f:dd:27:ae:6a:ca:97:a4:00:17:3f:9d:
                    57:f2:a8:cd:6a:3a:af:9a:93:87:43:e4:7b:28:eb:
                    ad:f7:f7:02:a6:ee:f1:80:2c:5e:ce:d8:9e:4e:dd:
                    63:89:5a:10:08:18:14:5d:9e:09:d2:55:a1:09:f8:
                    96:5d:1c:be:da:f4:51:c4:e4:b0:14:41:3b:d4:59:
                    f4:76:8b:65:6d:d1:1e:0f:d2:6d:74:f2:eb:52:9e:
                    84:a7:71:32:27:51:ba:cd:90:63:f3:82:4e:e2:af:
                    74:1c:e6:ee:aa:d3:7f:d5:90:f3:5b:a1:2c:ac:20:
                    28:54:8c:bd:9b:70:a3:8c:ba:0e:93:cd:42:ed:b9:
                    4f:5c:ad:91:19:52:b3:57:80:a4:6a:9d:bd:99:b8:
                    8a:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:42:D1:82:DF:65:CC:F9:78:9C:4F:51:7B:6A:C5:8F:F4:29:82:2A
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/OULRgt9lzPl4nE9Re2rFj_Qpgio.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.199.96.0/19

    Signature Algorithm: sha256WithRSAEncryption
         47:c4:b2:99:c2:01:87:df:a3:02:7b:73:29:96:87:67:8e:b4:
         bb:ea:f6:b6:0c:ce:37:a6:f7:4a:be:92:98:7d:92:f7:07:a4:
         8b:2c:e5:19:3b:73:78:29:72:bb:ae:3e:da:3f:5b:61:3c:2d:
         ac:2e:69:b4:e2:fe:f0:70:44:34:0d:7e:56:e3:7c:c8:33:ad:
         fa:07:7c:8f:cb:01:2f:76:a1:36:fc:55:ef:63:1a:24:2d:89:
         6a:6c:d6:6e:95:ba:f6:d2:9d:b2:91:02:56:f7:13:11:1d:e5:
         aa:7c:2a:9e:40:e0:c1:25:ee:97:3d:0b:04:c9:d4:62:e1:10:
         eb:7d:35:c8:93:95:5b:2e:8f:62:fa:75:7e:c4:01:09:08:e7:
         85:4c:11:4a:66:5b:56:bb:a2:e6:da:dd:9a:65:f3:cf:35:8e:
         18:23:36:f7:69:d7:74:33:fe:66:a7:b3:02:fb:9b:6b:fe:22:
         ae:81:ca:3f:ff:0e:9c:94:e0:40:79:29:60:43:81:3b:6b:a7:
         2b:53:da:34:94:02:63:01:fe:8f:f5:a3:09:5e:80:42:00:77:
         94:46:76:36:2e:68:32:20:1d:a4:79:17:d8:66:d4:5f:d4:c0:
         78:d3:72:d5:3b:5a:b9:00:ba:37:92:93:70:00:27:6b:2a:62:
         80:fb:48:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:12:17 2025 by rpki-client