Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/802/DMY28UXm4yK_Fxvouzsxpcm79nU.roa
File:                     DMY28UXm4yK_Fxvouzsxpcm79nU.roa (raw, json)
Hash identifier:          2Kd5IJNTIluIR2+S958gUHE2vwxXCphM+hcTU7y1BGA=
Subject key identifier:   0C:C6:36:F1:45:E6:E3:22:BF:17:1B:E8:BB:3B:31:A5:C9:BB:F6:75
Certificate issuer:       /CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
Certificate serial:       16
Authority key identifier: 23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/DMY28UXm4yK_Fxvouzsxpcm79nU.roa
Signing time:             Wed 31 Jul 2024 01:32:37 +0000
ROA not before:           Wed 31 Jul 2024 01:32:37 +0000
ROA not after:            Tue 15 Jul 2025 01:30:02 +0000
asID:                     23791
IP address blocks:        110.5.120.0/21 maxlen: 21
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 22 (0x16)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2362B2E3E478DCBAD6F42A4511290CFC373C24C6
        Validity
            Not Before: Jul 31 01:32:37 2024 GMT
            Not After : Jul 15 01:30:02 2025 GMT
        Subject: CN=0CC636F145E6E322BF171BE8BB3B31A5C9BBF675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:c5:8b:1b:53:eb:31:82:b3:bd:fd:06:13:b6:
                    8d:c0:2d:c1:4f:e2:ea:dd:86:7f:15:dd:bb:d9:c6:
                    0a:d7:dc:c4:c1:f3:64:bb:e0:3e:50:59:47:8b:b9:
                    82:47:bd:5f:73:ae:7d:af:af:36:3f:bd:1a:db:90:
                    7b:bd:ed:4d:26:c1:f3:41:be:6c:e0:aa:2d:b3:26:
                    3d:50:cb:da:d4:f2:7f:cc:b9:0a:d0:3c:aa:d6:f2:
                    dd:e6:e1:82:71:16:07:44:5b:ba:8f:fc:08:6c:40:
                    19:bc:9a:d9:10:08:02:3a:24:6e:25:da:2b:fe:af:
                    ec:cf:3a:42:90:1b:e3:d3:cf:b7:5d:02:45:38:ee:
                    f8:5d:c9:90:6a:b7:dc:1d:9d:f8:80:1f:48:4c:29:
                    7b:75:73:bc:e4:20:b4:65:ca:e9:c1:f0:cb:3d:42:
                    24:21:ab:9e:f8:ec:55:73:aa:5a:96:cb:a8:1c:3c:
                    63:64:df:04:0a:ad:e5:ee:9c:d7:c1:bc:02:4b:98:
                    f5:37:b1:41:49:ef:fa:1f:03:14:b8:49:43:ea:fe:
                    ca:70:f9:ad:2f:1e:75:6c:f9:c7:15:be:7f:d1:75:
                    81:b6:ed:2e:52:6f:67:d5:bd:de:b2:58:37:fd:c5:
                    3b:a8:da:61:92:4d:34:af:46:0b:76:b3:9d:57:9c:
                    85:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:C6:36:F1:45:E6:E3:22:BF:17:1B:E8:BB:3B:31:A5:C9:BB:F6:75
            X509v3 Authority Key Identifier:
                keyid:23:62:B2:E3:E4:78:DC:BA:D6:F4:2A:45:11:29:0C:FC:37:3C:24:C6

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/I2Ky4-R43LrW9CpFESkM_Dc8JMY.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/I2Ky4-R43LrW9CpFESkM_Dc8JMY.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/802/DMY28UXm4yK_Fxvouzsxpcm79nU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  110.5.120.0/21

    Signature Algorithm: sha256WithRSAEncryption
         60:d0:5b:77:b9:2c:0b:b9:8b:f0:a5:0f:69:b5:37:9d:40:0c:
         1a:81:a5:db:28:9c:9b:eb:23:0f:21:e8:b9:8a:50:ca:64:33:
         5f:e8:15:55:80:bd:2a:cd:3a:23:0f:00:6b:ea:14:2c:43:9d:
         b6:96:38:a4:7a:ec:ec:e4:aa:cb:9a:35:47:a9:ae:a9:f7:95:
         ca:d5:aa:ac:64:50:d1:c7:13:43:b9:38:8e:d1:73:01:f8:25:
         64:d2:79:a4:3b:e1:e8:fa:7e:8d:21:1e:74:63:3b:f9:9b:06:
         24:1f:4d:de:98:bb:7b:0e:ea:b8:dc:86:11:2e:86:71:05:3e:
         bd:b9:81:4e:93:5e:68:d0:af:bb:19:c4:85:34:3a:46:a3:14:
         33:a1:61:ec:53:12:18:c1:3f:6d:09:2e:0d:53:cc:5f:65:d8:
         f6:c6:df:af:3a:e8:8d:9c:8e:ff:c1:24:04:51:58:b1:08:7f:
         21:d8:bb:b0:48:f9:15:27:4d:e5:5d:0b:c5:be:fa:db:36:4f:
         70:41:30:62:f3:12:25:2a:51:a2:36:4b:e7:52:03:9d:22:3c:
         8d:53:64:03:55:30:3c:f3:21:f2:89:31:86:7c:30:03:0b:87:
         e5:ce:05:43:dd:82:0c:35:8f:d8:21:09:65:30:83:28:0a:85:
         86:2e:55:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:19:30 2025 by rpki-client