Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
File:                     fzj2SAo08Y94Xi3rmJLD567jfAU.roa (raw, json)
Hash identifier:          m9N5nM9U1Bh+1N4MWLySde7mookMkz/F+nW7D+AvY94=
Subject key identifier:   7F:38:F6:48:0A:34:F1:8F:78:5E:2D:EB:98:92:C3:E7:AE:E3:7C:05
Certificate issuer:       /CN=1933DE3EF96450CA120C77A5EA826434DD149549
Certificate serial:       3F
Authority key identifier: 19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
Signing time:             Tue 31 Dec 2024 01:30:52 +0000
ROA not before:           Tue 31 Dec 2024 01:30:52 +0000
ROA not after:            Mon 15 Dec 2025 01:30:03 +0000
asID:                     55385
IP address blocks:        202.174.58.0/23 maxlen: 23
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 26 Feb 2025 19:44:24 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 63 (0x3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1933DE3EF96450CA120C77A5EA826434DD149549
        Validity
            Not Before: Dec 31 01:30:52 2024 GMT
            Not After : Dec 15 01:30:03 2025 GMT
        Subject: CN=7F38F6480A34F18F785E2DEB9892C3E7AEE37C05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:58:09:ac:62:d8:b3:1b:21:63:c7:d6:b2:e0:
                    50:01:b8:75:c3:13:8e:88:f6:bf:02:02:0f:80:1b:
                    84:06:1f:68:1a:42:4f:46:4a:2e:ae:78:24:21:08:
                    1b:6b:1e:36:50:81:41:7a:0c:e8:e4:33:3b:55:fd:
                    69:02:f0:97:8a:ff:5c:58:6c:13:ff:8b:83:16:55:
                    46:91:16:5a:95:96:4e:25:8c:7a:d1:c1:51:44:b1:
                    a1:7f:9e:8b:dd:6a:18:f1:69:b1:81:6c:d7:d2:db:
                    d6:4e:29:19:c7:de:db:c2:5b:4c:5c:f4:48:47:11:
                    65:8a:af:18:01:6d:16:0d:c4:0f:28:ca:c2:dd:d7:
                    bb:7f:c1:6e:1f:c1:35:b5:0a:3b:e3:97:03:45:49:
                    a8:75:b6:85:84:3a:18:a6:ed:ef:ef:ca:44:1b:dc:
                    4c:76:17:99:0c:49:53:af:29:7e:d6:51:76:3c:a7:
                    a8:75:7c:01:c1:9e:9f:5e:03:ff:24:ae:82:be:81:
                    26:97:6a:7b:ef:dc:4a:c1:58:cf:21:74:0f:1f:55:
                    83:6d:4b:d9:a0:07:9a:cf:a3:62:f6:76:a0:9d:e7:
                    33:55:ee:80:04:eb:f8:15:3a:43:43:3e:81:3f:66:
                    18:c6:a3:11:23:e7:af:d8:eb:c1:53:21:06:c6:be:
                    40:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:38:F6:48:0A:34:F1:8F:78:5E:2D:EB:98:92:C3:E7:AE:E3:7C:05
            X509v3 Authority Key Identifier:
                keyid:19:33:DE:3E:F9:64:50:CA:12:0C:77:A5:EA:82:64:34:DD:14:95:49

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/GTPePvlkUMoSDHel6oJkNN0UlUk.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/GTPePvlkUMoSDHel6oJkNN0UlUk.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/877/fzj2SAo08Y94Xi3rmJLD567jfAU.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  202.174.58.0/23

    Signature Algorithm: sha256WithRSAEncryption
         72:f2:32:fa:0f:bf:b6:0a:7f:03:a6:f7:4b:69:e3:23:78:74:
         fd:86:67:2b:0f:fc:8a:4c:4f:43:09:74:7d:d8:45:aa:ea:29:
         ad:e2:f4:00:46:09:4a:36:3e:5a:89:4c:98:09:4e:58:fb:07:
         83:7a:00:0f:79:fa:73:fb:7b:71:1e:d6:fc:37:fd:18:6b:13:
         b3:4b:1f:a0:09:18:10:01:63:82:72:46:ea:7b:43:56:28:90:
         ec:95:ab:18:84:83:6e:10:2e:80:64:98:2d:8a:4e:46:d1:14:
         96:48:c2:0d:9b:b8:a9:f8:d4:61:f7:3c:27:d2:10:49:a9:f4:
         a2:eb:9d:54:b4:5b:97:82:88:19:4a:3b:aa:d7:98:8c:7e:90:
         d2:f7:49:12:a0:1c:ee:1d:57:78:45:b0:ce:31:17:d5:66:e4:
         97:df:ae:8b:d8:c5:8b:f5:7c:64:4e:4a:72:f6:1d:d4:15:76:
         bf:5b:f7:b2:23:4a:f1:77:6b:8b:7d:87:f2:c8:51:5d:76:5c:
         bf:76:03:2f:77:d4:10:2a:e6:ed:3b:2e:65:3f:4b:bc:30:c2:
         e4:90:58:e1:a7:55:49:19:d3:45:c9:e9:50:c4:d0:23:02:de:
         6f:42:cd:97:e3:2f:2e:cd:d9:ea:49:82:75:87:e4:5f:66:e8:
         c3:b4:05:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 19 22:16:51 2025 by rpki-client