Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/731/jEk1WYH5tgrvihy7WBisDdFF-FY.roa
File:                     jEk1WYH5tgrvihy7WBisDdFF-FY.roa (raw, json)
Hash identifier:          N599OQjbA1mo75s6VAEWYnhHF2eTV+KrS4KzB/vhghY=
Subject key identifier:   8C:49:35:59:81:F9:B6:0A:EF:8A:1C:BB:58:18:AC:0D:D1:45:F8:56
Certificate issuer:       /CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
Certificate serial:       6F
Authority key identifier: 91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/jEk1WYH5tgrvihy7WBisDdFF-FY.roa
Signing time:             Thu 31 Oct 2024 01:30:10 +0000
ROA not before:           Thu 31 Oct 2024 01:30:10 +0000
ROA not after:            Wed 15 Oct 2025 01:30:02 +0000
asID:                     18260
IP address blocks:        119.30.14.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 111 (0x6f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=91ACA44275EC0572BC6921502B241C14D44A9AA1
        Validity
            Not Before: Oct 31 01:30:10 2024 GMT
            Not After : Oct 15 01:30:02 2025 GMT
        Subject: CN=8C49355981F9B60AEF8A1CBB5818AC0DD145F856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:60:5b:b6:2a:32:82:11:dd:f2:5f:7d:91:07:
                    9e:84:9f:2a:96:67:55:26:de:9a:26:85:d7:c5:7b:
                    cd:1c:f4:d3:76:c5:5f:0f:84:c5:9b:89:5b:0f:0a:
                    4f:a7:b1:d7:c1:60:b4:d0:51:d7:af:c0:a4:f6:89:
                    a4:e9:5d:64:7c:f6:67:1a:2e:7f:4f:19:65:86:a6:
                    4a:cd:ba:10:d0:71:1e:73:e7:0d:c4:4e:0a:2e:8d:
                    70:6c:8a:c2:25:73:9f:f3:7c:3a:d5:54:94:bd:9d:
                    00:2a:fe:a1:a8:bf:5d:41:4f:5a:03:5a:05:36:c6:
                    d7:5d:13:4c:e8:b8:8a:4c:65:92:f1:69:bd:64:5b:
                    af:27:7a:db:de:35:13:f6:d9:40:ec:19:68:4c:c9:
                    29:6f:77:43:b7:73:9d:56:52:be:33:db:a9:5e:9b:
                    ce:bb:7f:63:9a:b6:33:c3:ec:26:8a:9f:33:02:31:
                    0e:c7:f3:5d:2a:36:7f:3b:dc:47:38:71:85:a3:fa:
                    c0:a3:80:44:ea:9f:6b:ef:b0:88:b4:a0:cf:10:63:
                    d8:8f:3d:68:52:73:9f:d2:92:98:d6:c6:0b:cd:9c:
                    d8:8f:35:50:c2:e3:2f:55:26:c6:6b:2e:00:15:49:
                    21:6d:e1:d7:90:fe:ca:bc:83:43:c0:54:5b:b9:90:
                    5d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:49:35:59:81:F9:B6:0A:EF:8A:1C:BB:58:18:AC:0D:D1:45:F8:56
            X509v3 Authority Key Identifier:
                keyid:91:AC:A4:42:75:EC:05:72:BC:69:21:50:2B:24:1C:14:D4:4A:9A:A1

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/kaykQnXsBXK8aSFQKyQcFNRKmqE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/kaykQnXsBXK8aSFQKyQcFNRKmqE.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/731/jEk1WYH5tgrvihy7WBisDdFF-FY.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  119.30.14.0/23

    Signature Algorithm: sha256WithRSAEncryption
         6e:b3:a5:39:c8:4f:a3:4b:4b:af:e5:94:ae:76:95:70:54:95:
         6c:d0:ea:9a:ce:c9:13:34:6c:ac:8a:ba:93:e8:2e:35:d3:06:
         f8:8a:04:5e:96:00:cc:eb:ce:cb:ab:81:cd:be:b8:e5:c2:7a:
         76:32:4f:df:4b:e2:13:1d:5e:84:01:ae:93:24:98:ae:7c:42:
         b2:85:2a:6c:4c:20:a9:bd:94:33:f1:69:b1:19:c1:cd:bc:d5:
         a7:35:8a:ee:e1:fd:7e:21:96:9a:34:b5:f8:73:82:b2:67:8d:
         49:cd:00:f6:6b:b0:be:66:c2:d5:dc:83:73:8a:6f:33:75:58:
         52:5d:81:b8:7f:bb:ea:6b:93:6c:e9:d3:ca:db:8a:cd:95:fe:
         e6:9d:9b:93:82:53:d3:2d:0e:86:3f:c5:77:17:91:27:24:1d:
         52:ab:e7:96:ae:5f:0d:af:6f:c8:c1:dd:d0:10:33:74:83:e3:
         2b:d8:b9:ee:2b:1a:23:21:2d:fa:89:71:37:e6:26:61:5f:60:
         58:0b:a0:f6:99:a4:f6:d6:07:73:7e:d5:8b:25:2a:bd:0b:2a:
         07:5c:30:23:20:59:c2:39:1e:35:5f:15:b8:ea:b7:bb:34:4d:
         d0:e8:30:b5:06:0e:48:da:9c:bd:80:88:68:8b:fa:b2:ec:f5:
         80:2a:b4:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:20:37 2025 by rpki-client