Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/TOdUtcNydCycZB-cngB7neTttS4.roa
File:                     TOdUtcNydCycZB-cngB7neTttS4.roa (raw, json)
Hash identifier:          vKLD3w96TVp+9qWGybGizB57SMKzDKwm7TzvKu4+o1g=
Subject key identifier:   4C:E7:54:B5:C3:72:74:2C:9C:64:1F:9C:9E:00:7B:9D:E4:ED:B5:2E
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       04
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/TOdUtcNydCycZB-cngB7neTttS4.roa
Signing time:             Sat 20 Apr 2024 00:13:32 +0000
ROA not before:           Sat 20 Apr 2024 00:13:32 +0000
ROA not after:            Sat 19 Apr 2025 01:21:05 +0000
asID:                     131931
IP address blocks:        210.143.16.0/20 maxlen: 20
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 4 (0x4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr 20 00:13:32 2024 GMT
            Not After : Apr 19 01:21:05 2025 GMT
        Subject: CN=4CE754B5C372742C9C641F9C9E007B9DE4EDB52E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3c:76:88:4e:ab:eb:cb:bd:da:e1:40:f5:66:
                    bf:91:bb:ce:1a:32:48:03:64:40:b5:37:fd:93:13:
                    7b:d6:70:58:46:5d:31:46:58:17:08:40:5e:98:b1:
                    ae:fe:bc:f8:42:59:77:b2:eb:a0:b6:41:b0:eb:b7:
                    2c:11:f5:22:5a:22:f4:7c:4f:df:9c:e7:3a:c3:8c:
                    8a:fc:0b:75:b3:4a:6b:9f:1e:be:96:fe:c2:6a:46:
                    85:e0:17:79:a9:e5:37:f8:9b:8b:d7:fa:a8:b7:4b:
                    bc:7a:b8:01:33:b7:c9:91:88:4b:1b:51:5c:f4:06:
                    45:ec:38:a0:6e:a2:e9:73:9c:50:c2:d3:6c:82:f6:
                    e0:bd:e9:1b:c8:d5:21:db:0c:d5:66:d0:64:5b:57:
                    1a:c1:cf:cf:df:86:31:1e:84:f0:fe:d7:8c:73:00:
                    c5:b4:7b:84:9a:c4:f7:c3:c4:56:3e:fb:73:c2:8a:
                    64:3f:b5:82:b1:68:d3:b2:0c:48:78:df:30:11:c1:
                    e1:38:5d:70:8c:63:d4:1e:6b:4c:0e:74:71:b1:ad:
                    01:c4:c2:4a:5d:a4:6d:64:43:6e:6e:a0:92:28:3f:
                    df:66:c9:4b:65:94:3b:9b:33:68:77:49:09:81:23:
                    a8:51:73:48:77:72:b2:10:28:0b:23:5b:f3:c7:59:
                    4d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E7:54:B5:C3:72:74:2C:9C:64:1F:9C:9E:00:7B:9D:E4:ED:B5:2E
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/TOdUtcNydCycZB-cngB7neTttS4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.143.16.0/20

    Signature Algorithm: sha256WithRSAEncryption
         62:19:51:d4:5a:e9:86:22:2f:fa:1d:c9:db:07:ec:8b:d1:af:
         03:92:f3:d9:be:f6:40:27:b9:f8:97:f7:a9:8d:71:a4:b3:0f:
         ff:ca:1c:64:39:e8:f3:a5:dd:3c:04:d3:1f:20:df:ff:9f:bd:
         5d:b1:ce:84:9e:04:e7:c3:93:38:a7:48:57:35:06:98:93:f5:
         b4:7d:cf:a3:ed:af:43:ac:ed:2f:fa:11:83:82:f6:d9:aa:20:
         e0:d1:4d:a9:24:9d:9d:b3:14:6f:99:f5:9e:e9:16:04:b1:ce:
         d4:b3:f0:89:de:96:16:aa:78:98:88:75:40:fe:d9:61:d5:75:
         0d:31:8d:94:e4:0f:39:66:72:35:0e:11:fa:a1:e1:e2:8b:b5:
         61:8b:7e:28:33:41:de:c4:d3:b9:b3:86:42:4d:e4:bc:88:fa:
         d5:02:9e:29:e9:77:79:05:aa:9e:71:98:9d:11:57:20:23:77:
         64:8f:8e:53:58:cf:be:e1:7b:cd:49:1c:2d:a2:2a:fe:eb:f9:
         da:03:54:e7:e5:15:d6:b3:57:77:ef:f7:ab:cc:b1:a6:fa:07:
         db:ee:c5:41:6c:9a:2d:f9:af:3f:c0:5f:88:5c:c5:29:70:61:
         c4:bc:93:74:0e:6d:3d:15:bc:31:72:f9:f2:cb:63:df:27:df:
         63:83:ee:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:51 2025 by rpki-client