Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/68/y2KT_OeoKqc31KfZw3UTxGfsN5Q.roa
File:                     y2KT_OeoKqc31KfZw3UTxGfsN5Q.roa (raw, json)
Hash identifier:          AWWZoPnJPJPslbwxyC6edWv8hrejW98sgIjDNenpcUc=
Subject key identifier:   CB:62:93:FC:E7:A8:2A:A7:37:D4:A7:D9:C3:75:13:C4:67:EC:37:94
Certificate issuer:       /CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
Certificate serial:       55
Authority key identifier: 65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/y2KT_OeoKqc31KfZw3UTxGfsN5Q.roa
Signing time:             Sat 31 Aug 2024 01:31:50 +0000
ROA not before:           Sat 31 Aug 2024 01:31:50 +0000
ROA not after:            Fri 15 Aug 2025 01:30:02 +0000
asID:                     9374
IP address blocks:        202.224.64.0/19 maxlen: 19
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=65DE52E64BE43E328AA69F3AB2D347F8833EC637
        Validity
            Not Before: Aug 31 01:31:50 2024 GMT
            Not After : Aug 15 01:30:02 2025 GMT
        Subject: CN=CB6293FCE7A82AA737D4A7D9C37513C467EC3794
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:26:50:39:a6:52:10:c6:bc:be:de:51:00:f2:
                    79:97:e9:37:19:e5:49:db:7f:94:66:85:92:37:60:
                    51:65:63:c5:5f:1e:7c:86:ef:65:c2:f0:6a:d8:95:
                    bd:8c:10:c3:b0:95:28:07:96:96:7e:c9:64:53:79:
                    78:b0:63:a4:c5:00:9f:11:29:e5:71:39:f2:99:c8:
                    74:ed:6b:7d:9b:02:d8:a5:32:cb:2a:93:f3:5a:00:
                    01:8e:c5:e9:ec:a4:70:8d:b7:10:16:ed:e7:66:49:
                    cf:46:0b:e7:4d:8d:f3:73:6a:9c:74:fd:47:e9:72:
                    d8:84:ea:8a:b1:d6:14:4d:21:73:bf:c2:07:87:9a:
                    9b:a1:e6:a5:ff:44:5a:3a:99:89:a6:64:7d:c2:9d:
                    bb:96:8f:cf:8b:2b:88:5f:4b:dd:f1:ab:44:df:0c:
                    ea:2a:01:ff:02:bd:ad:46:05:b1:85:92:e9:9d:51:
                    76:6c:c6:e3:5e:f9:29:31:7c:06:a8:af:13:c7:2e:
                    24:c9:68:89:c4:07:57:6b:d8:cd:e9:89:29:26:17:
                    41:4f:b6:0a:d1:9a:5f:d6:61:04:40:0d:72:fa:00:
                    ff:95:67:d7:fa:7f:3a:97:59:af:4a:86:d6:84:52:
                    60:5c:f0:58:ab:7d:a7:73:c2:f0:ca:31:3c:d8:33:
                    f5:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:62:93:FC:E7:A8:2A:A7:37:D4:A7:D9:C3:75:13:C4:67:EC:37:94
            X509v3 Authority Key Identifier:
                keyid:65:DE:52:E6:4B:E4:3E:32:8A:A6:9F:3A:B2:D3:47:F8:83:3E:C6:37

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/Zd5S5kvkPjKKpp86stNH-IM-xjc.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Zd5S5kvkPjKKpp86stNH-IM-xjc.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/68/y2KT_OeoKqc31KfZw3UTxGfsN5Q.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.224.64.0/19

    Signature Algorithm: sha256WithRSAEncryption
         17:dc:cb:56:92:e4:0b:29:9a:31:6e:22:19:b2:af:f5:94:44:
         2e:35:ce:a3:28:1d:43:67:63:c5:01:08:f2:ac:d4:f6:43:5b:
         4b:47:79:bd:39:1e:f1:d3:98:00:bd:d3:71:d3:33:3d:4b:d4:
         ec:ab:9d:97:d2:f2:d2:18:64:47:de:81:6a:5f:a2:ec:0c:be:
         be:51:7a:33:fc:9b:b1:87:49:b7:01:d7:11:0a:b6:66:eb:9e:
         07:d7:b8:0a:66:aa:d9:8d:ba:bf:63:4f:49:55:43:11:69:99:
         d5:68:9f:d2:e6:11:15:91:58:23:6c:85:20:d1:c5:8a:0e:33:
         34:89:ce:1d:26:6c:f9:ae:1f:88:0f:d2:3f:69:a9:bc:4d:3f:
         ab:81:2e:47:e8:26:c0:00:a5:81:c5:dc:9c:ee:db:01:f7:c5:
         a8:cc:5f:9d:fb:48:d8:0f:60:20:5d:0c:74:b6:41:d6:e4:15:
         d2:88:75:f4:f1:99:93:d9:5d:4d:c1:1c:a4:b4:96:d8:45:cc:
         2f:2c:ac:17:8c:66:2f:f3:e5:ec:6d:01:25:65:54:9b:4b:00:
         c3:41:3b:ae:eb:ae:2e:1e:05:b9:87:de:a2:0d:b2:68:22:50:
         a0:d5:6c:ba:0f:90:90:96:b2:e0:d3:e5:9b:05:f4:48:45:db:
         20:66:ae:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:07:27 2025 by rpki-client