Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/-QZb-VqUdeLnmQO9O0tsPGO7Kec.roa
File:                     -QZb-VqUdeLnmQO9O0tsPGO7Kec.roa (raw, json)
Hash identifier:          B9HzwGcUKOs6eYYCeFFIEeavNQyEBq1rEaOexy8JE50=
Subject key identifier:   F9:06:5B:F9:5A:94:75:E2:E7:99:03:BD:3B:4B:6C:3C:63:BB:29:E7
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       37
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/-QZb-VqUdeLnmQO9O0tsPGO7Kec.roa
Signing time:             Thu 28 Mar 2024 08:33:50 +0000
ROA not before:           Thu 28 Mar 2024 08:33:50 +0000
ROA not after:            Sat 15 Mar 2025 01:30:02 +0000
asID:                     23818
IP address blocks:        113.212.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Fri 21 Feb 2025 05:15:04 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 55 (0x37)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar 28 08:33:50 2024 GMT
            Not After : Mar 15 01:30:02 2025 GMT
        Subject: CN=F9065BF95A9475E2E79903BD3B4B6C3C63BB29E7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:79:ab:bf:99:c1:f3:78:8e:c7:9e:46:1e:92:
                    c2:38:91:f6:2e:ea:38:aa:40:7f:00:79:d6:5b:7a:
                    17:d2:93:26:2b:7d:07:a6:1f:3f:05:3e:d8:37:85:
                    cd:e4:b7:2d:b4:fb:02:37:bc:15:1f:4a:59:5b:10:
                    5f:12:a4:b6:9a:1c:3e:8f:c2:85:b6:2b:37:f9:99:
                    76:13:74:5c:b9:af:8b:3a:cb:8a:77:26:b2:66:44:
                    62:4a:5a:a8:e5:95:7f:98:ff:6f:ad:a0:ff:e7:e6:
                    98:2a:49:14:ed:80:85:6a:67:72:74:96:53:f4:d1:
                    41:bb:9b:18:97:b4:bd:ee:8b:b4:52:64:a2:be:4a:
                    3e:48:9e:1e:c7:70:c8:ec:fa:6f:b7:f6:0f:c8:e6:
                    6d:4e:ed:be:58:91:5e:9f:e8:15:80:d6:71:65:a9:
                    58:02:17:a1:77:3a:69:69:f4:85:5a:fd:58:01:ea:
                    cb:aa:4c:38:8a:67:a2:d3:7d:23:08:49:03:0c:f0:
                    0a:8f:82:97:ce:93:b4:b8:c0:49:45:03:1f:a8:72:
                    91:05:70:bc:fd:df:01:ff:55:1d:f4:00:0d:cd:f3:
                    44:80:ef:a7:08:84:55:14:cb:f8:05:17:c3:dd:ce:
                    6f:b1:87:fa:7f:ce:f6:49:37:fa:8d:4a:a1:05:36:
                    4a:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:06:5B:F9:5A:94:75:E2:E7:99:03:BD:3B:4B:6C:3C:63:BB:29:E7
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/-QZb-VqUdeLnmQO9O0tsPGO7Kec.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6b:7c:83:1e:78:e0:2d:de:ee:c0:8c:3a:ae:f7:9b:04:ed:38:
         c9:09:fc:55:bd:d8:08:8e:d9:e3:8e:78:2b:c9:68:22:d0:4c:
         b1:0a:a1:98:0b:87:02:a4:74:37:3c:4d:8c:5b:02:8f:16:a1:
         f1:1a:31:8c:2e:0f:13:c8:e4:f6:ae:35:b1:30:c5:50:51:ed:
         c0:ba:8d:16:8c:d6:9e:a1:79:a2:a1:4c:d2:7c:6c:3c:5a:0a:
         00:e8:39:c0:80:92:74:d3:4d:82:ee:98:0c:db:10:c2:2a:25:
         45:e7:8e:bd:ce:27:4f:17:d3:b0:15:1a:89:b1:b2:db:07:99:
         89:1d:29:07:3d:f6:17:5a:43:8b:ec:45:3a:13:ac:69:d8:0d:
         34:63:55:1b:ba:d9:32:6c:71:ce:91:57:7c:fe:18:0b:8f:1f:
         c0:4b:2a:d0:5b:65:b9:78:b2:d0:5a:0e:89:32:e2:91:37:48:
         2d:b7:3e:08:bf:a4:da:99:b1:06:4c:4c:db:c9:76:f0:70:b8:
         ef:62:d3:56:5c:10:af:f4:fc:b2:01:b0:cc:2b:db:0c:24:91:
         79:56:0f:92:0f:7f:c4:fe:ca:c6:a2:91:46:6e:dd:69:d6:84:
         cd:9b:fa:55:80:2d:96:a5:82:42:5d:5a:f5:6c:ed:44:98:ee:
         ad:ff:e0:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 22:10:26 2025 by rpki-client