Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/820/zRjw6UPaH7fS1Hsnr_ZfFEeqJC8.roa
File:                     zRjw6UPaH7fS1Hsnr_ZfFEeqJC8.roa (raw, json)
Hash identifier:          dcIcuH8Hm4p5k6GMl70cXayJY3Efps8PEbsUczyEAJM=
Subject key identifier:   CD:18:F0:E9:43:DA:1F:B7:D2:D4:7B:27:AF:F6:5F:14:47:AA:24:2F
Certificate issuer:       /CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
Certificate serial:       2E
Authority key identifier: 9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/zRjw6UPaH7fS1Hsnr_ZfFEeqJC8.roa
Signing time:             Tue 31 Dec 2024 01:31:28 +0000
ROA not before:           Tue 31 Dec 2024 01:31:28 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     23614
IP address blocks:        210.158.182.0/23 maxlen: 32
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 46 (0x2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FEB105C67E5FD5C9E1AFD06A343C841F05A7F15
        Validity
            Not Before: Dec 31 01:31:28 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=CD18F0E943DA1FB7D2D47B27AFF65F1447AA242F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:64:d7:ea:82:28:a5:8f:b2:b4:00:cc:28:c5:
                    c7:db:4d:fd:f4:73:38:43:3c:71:99:03:63:4f:c9:
                    0f:32:f9:ba:68:bf:1d:6c:6d:30:1f:6f:29:7b:7d:
                    b5:2d:48:ba:8a:e7:ad:6b:e1:5d:2c:0c:dc:1f:8c:
                    e5:e8:07:92:98:2f:d8:43:38:54:0a:a0:e5:15:f8:
                    b4:2e:90:9c:90:10:77:17:a7:04:87:7f:76:b6:c6:
                    44:1a:e0:49:68:88:61:fc:05:13:e0:16:5e:db:2c:
                    1b:f2:7f:87:65:db:19:36:df:3a:df:f9:c6:9e:30:
                    80:ba:83:03:39:d7:50:c9:05:93:2e:89:5c:b2:ad:
                    bd:3a:08:fd:cd:47:20:67:87:d2:91:56:65:e9:3c:
                    e1:a9:81:91:69:d0:ff:a8:f1:b5:61:f3:b5:98:53:
                    02:71:57:a8:2e:4b:63:53:93:38:36:14:57:1d:ad:
                    c1:91:8f:f3:4d:a5:ba:c3:9c:0c:e5:fa:9e:ba:5f:
                    a3:ad:f8:e2:cc:8d:85:e1:9d:0b:b7:82:a1:b4:81:
                    2d:e9:16:10:0c:29:0a:7b:75:35:44:4d:c4:e7:e7:
                    35:45:b5:3a:2e:d9:b4:b7:5c:9b:68:53:02:42:4b:
                    f2:7f:7a:70:dc:23:0f:b1:ef:d2:a2:44:cb:f9:3a:
                    6e:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:18:F0:E9:43:DA:1F:B7:D2:D4:7B:27:AF:F6:5F:14:47:AA:24:2F
            X509v3 Authority Key Identifier:
                keyid:9F:EB:10:5C:67:E5:FD:5C:9E:1A:FD:06:A3:43:C8:41:F0:5A:7F:15

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/n-sQXGfl_VyeGv0Go0PIQfBafxU.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/n-sQXGfl_VyeGv0Go0PIQfBafxU.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/820/zRjw6UPaH7fS1Hsnr_ZfFEeqJC8.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  210.158.182.0/23

    Signature Algorithm: sha256WithRSAEncryption
         bb:99:b2:6b:5e:32:a0:43:af:05:2f:af:f0:33:6d:91:58:88:
         01:92:22:92:d2:0b:58:f6:10:5a:65:54:ba:d2:3c:eb:6e:73:
         3a:4e:68:7d:7b:9b:46:3e:78:ef:3d:99:a8:4b:89:25:18:5f:
         f3:63:14:b6:40:3c:d6:cc:cb:b1:93:29:2f:e1:64:be:fb:e6:
         78:f7:51:e5:4d:4f:51:dc:1c:ce:d6:f2:80:e1:0a:93:54:b1:
         94:de:72:45:f6:3e:c1:08:a2:fd:4e:28:a9:ab:69:87:59:23:
         cf:fa:ab:20:77:ad:1d:1a:6b:c5:cd:75:a2:1e:eb:ba:1a:48:
         8e:4d:92:e4:ee:df:3d:c6:90:2f:f5:70:02:7c:05:bb:d8:72:
         53:36:46:7e:7a:b2:81:81:14:fc:21:ae:8c:83:a8:dc:52:73:
         8a:0a:89:80:ac:bb:22:30:c2:b5:c1:66:b2:47:63:c7:62:fa:
         8e:86:3e:94:2c:ad:82:00:be:05:d5:66:2a:15:18:43:ab:5f:
         d0:2b:e2:ef:89:bd:82:50:58:bd:bd:25:ac:73:4d:0d:03:6e:
         dc:3b:19:21:6c:67:57:e4:ff:50:73:c1:da:9d:8d:46:69:2e:
         31:6f:3d:f5:43:e6:27:8b:91:cd:0f:fb:6d:37:94:27:72:21:
         e3:49:06:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:36:40 2025 by rpki-client