Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/818/bIfK_YiH_YLj1NEQ8u8Xw3omWfs.roa
File:                     bIfK_YiH_YLj1NEQ8u8Xw3omWfs.roa (raw, json)
Hash identifier:          Eo3jaxQ8cM7vUDOZ0upucafGGceXgO5mXAjT7FpnPms=
Subject key identifier:   6C:87:CA:FD:88:87:FD:82:E3:D4:D1:10:F2:EF:17:C3:7A:26:59:FB
Certificate issuer:       /CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
Certificate serial:       02
Authority key identifier: 1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/bIfK_YiH_YLj1NEQ8u8Xw3omWfs.roa
Signing time:             Fri 19 Apr 2024 01:28:41 +0000
ROA not before:           Fri 19 Apr 2024 01:28:41 +0000
ROA not after:            Sat 19 Apr 2025 01:21:05 +0000
asID:                     131931
IP address blocks:        103.164.72.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 2 (0x2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1B2E7E62DA8F12F3BB33E0B5E3CE002FDA28CF25
        Validity
            Not Before: Apr 19 01:28:41 2024 GMT
            Not After : Apr 19 01:21:05 2025 GMT
        Subject: CN=6C87CAFD8887FD82E3D4D110F2EF17C37A2659FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:22:00:f3:50:f2:4b:dd:4e:19:88:f3:e7:ff:
                    8f:44:f0:b2:12:40:77:34:b3:c1:dc:b6:15:45:16:
                    c9:33:d5:bb:79:f1:29:02:f6:9a:db:e5:ff:9a:67:
                    9a:6d:5d:c2:e2:75:9d:47:27:c8:e0:55:c4:c7:40:
                    aa:89:fa:bf:d1:cb:36:4a:32:cc:2e:59:1b:d8:a5:
                    ca:d6:dd:c6:ef:12:65:fd:8f:01:30:1d:6c:e3:c0:
                    0b:0b:20:ed:c7:16:83:bf:41:0d:ea:33:31:62:f3:
                    20:6a:77:bd:f1:49:56:b5:75:e8:e7:fd:c7:06:30:
                    e5:dc:b2:83:15:75:99:ab:cb:86:c3:06:22:83:30:
                    42:fa:68:45:f7:54:eb:63:ef:70:e3:4f:a0:93:5e:
                    89:f1:fc:88:ce:a8:02:ac:57:2f:4e:d2:0c:22:6c:
                    40:68:7a:0f:9e:f3:70:08:61:a9:2b:fe:f8:fb:ba:
                    4b:ba:3e:9e:75:51:e1:09:82:3d:ba:f1:19:1f:29:
                    65:bb:8a:f2:b5:dd:97:d7:66:68:ca:cf:66:e1:c9:
                    1a:a6:42:40:ed:61:35:21:5a:c4:47:90:72:4e:22:
                    d1:d9:47:f4:10:19:97:dd:ac:b2:b6:78:dd:89:68:
                    2a:d9:f8:ed:5f:a7:8b:a5:47:db:5f:f9:93:63:af:
                    a6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:87:CA:FD:88:87:FD:82:E3:D4:D1:10:F2:EF:17:C3:7A:26:59:FB
            X509v3 Authority Key Identifier:
                keyid:1B:2E:7E:62:DA:8F:12:F3:BB:33:E0:B5:E3:CE:00:2F:DA:28:CF:25

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/Gy5-YtqPEvO7M-C1484AL9oozyU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/Gy5-YtqPEvO7M-C1484AL9oozyU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/818/bIfK_YiH_YLj1NEQ8u8Xw3omWfs.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.164.72.0/23

    Signature Algorithm: sha256WithRSAEncryption
         28:26:df:8c:b0:e4:e5:a9:38:3d:e8:02:9e:fa:d1:c9:70:8c:
         63:61:f5:9b:7f:e2:61:60:99:97:c2:2e:3f:d8:c3:d6:f1:aa:
         d9:a5:1c:c6:b6:54:da:4f:d0:ad:f1:b2:ea:5d:9e:a7:d8:5d:
         f5:ce:61:3c:c6:ef:bb:db:b9:bd:e1:81:8d:cd:cf:5b:32:ce:
         a4:10:64:42:cb:3d:ee:e1:e8:ea:16:c6:0e:d5:fe:77:1d:d7:
         c8:3e:c6:d4:0a:04:5c:39:a9:dc:ee:f3:92:6f:4d:74:18:73:
         6c:d4:2e:a8:8e:ae:6a:8b:26:7d:8d:86:78:9f:c6:84:94:30:
         2d:ce:e1:b2:fe:3e:ae:36:25:66:42:66:c7:e7:b5:36:fa:92:
         7d:28:f7:21:88:65:e1:95:1e:dc:80:ca:cc:94:e6:73:ea:a4:
         6e:df:66:24:01:96:20:10:35:d8:29:22:a2:fe:b6:81:09:16:
         5c:c9:83:b6:ed:01:f9:a5:d8:96:83:a6:b9:7f:71:a5:b6:6d:
         d7:5b:12:47:15:3e:ce:23:0b:02:f3:b6:e6:8a:af:fd:13:dc:
         e1:d8:b7:20:0a:ed:2e:39:88:3a:29:87:1b:20:45:da:3c:85:
         b3:42:fa:04:fa:d5:e4:3d:96:e2:bb:43:49:79:46:52:60:05:
         34:be:13:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:16:30 2025 by rpki-client