Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/WhrLl4RrpV1l4gJ4Q_H2DL1TsNI.roa
File:                     WhrLl4RrpV1l4gJ4Q_H2DL1TsNI.roa (raw, json)
Hash identifier:          3ATe4bZ+7n+xeaeekIoJSxTCP96ZsQFSWWP+fEwMOi4=
Subject key identifier:   5A:1A:CB:97:84:6B:A5:5D:65:E2:02:78:43:F1:F6:0C:BD:53:B0:D2
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       58
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/WhrLl4RrpV1l4gJ4Q_H2DL1TsNI.roa
Signing time:             Sat 01 Mar 2025 01:30:53 +0000
ROA not before:           Sat 01 Mar 2025 01:30:53 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2519
IP address blocks:        203.79.61.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 04:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 88 (0x58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:53 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=5A1ACB97846BA55D65E2027843F1F60CBD53B0D2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ad:27:73:46:06:74:6f:22:f6:0d:a3:b0:c3:
                    bc:ec:e1:4d:e2:d6:80:43:66:9f:9a:f9:bf:29:df:
                    ad:05:4e:02:6e:f8:6e:96:99:f8:11:49:65:6d:80:
                    41:b2:b9:08:01:c5:59:29:ef:53:67:3f:5f:c3:6b:
                    71:ef:b5:cc:e0:37:bc:c8:bc:9d:ff:7d:52:65:79:
                    d9:f6:32:a5:17:67:76:b2:21:72:cf:bc:a4:60:0f:
                    31:b4:8e:e6:d0:dc:a1:3b:69:27:ff:e1:95:c0:d9:
                    db:fe:69:70:66:b5:0a:d4:61:48:d2:92:25:c5:36:
                    1f:30:5c:69:21:e3:e4:4e:5d:e5:2a:8a:8a:02:f8:
                    62:0b:63:d6:c6:1e:21:37:d1:26:e0:39:d4:71:c2:
                    eb:7a:7f:f8:3a:90:78:47:38:7c:47:a6:00:e1:db:
                    f8:b2:f5:d6:56:ff:46:48:0c:e9:d9:b5:de:51:07:
                    40:fb:f3:60:a3:73:07:92:ad:fb:b9:48:15:1d:b8:
                    d2:34:7f:64:99:30:33:ff:8a:d4:47:01:db:c5:c4:
                    b9:fb:b2:be:08:d7:86:46:f0:61:7a:34:02:05:a2:
                    5b:a5:17:43:7c:41:b9:df:86:56:b2:fb:f1:1c:c3:
                    76:74:4d:88:72:b8:7e:5b:58:b3:8b:7c:a9:91:b8:
                    71:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:1A:CB:97:84:6B:A5:5D:65:E2:02:78:43:F1:F6:0C:BD:53:B0:D2
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/WhrLl4RrpV1l4gJ4Q_H2DL1TsNI.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.61.0/24

    Signature Algorithm: sha256WithRSAEncryption
         0a:e4:1d:1f:e1:b1:85:87:94:06:f3:13:1c:94:ab:55:03:c1:
         ba:e2:51:d8:2d:9b:ed:a1:63:17:4e:b8:cf:06:33:0d:e4:1e:
         a6:91:f0:89:60:2d:62:2e:9d:31:10:ec:fb:ae:fb:9f:04:9a:
         4f:a4:ae:c1:76:89:f1:8d:07:5d:4f:0a:6c:78:1b:31:69:57:
         b0:70:69:ce:6e:3b:19:09:45:51:40:39:f8:68:08:4a:1c:9a:
         25:fa:76:50:56:ea:1b:5a:59:75:1a:5d:51:b7:3f:0d:ed:43:
         7f:f0:09:dd:3e:b6:4d:52:c4:de:47:ff:7e:c3:05:6c:50:92:
         55:b0:86:d8:05:1d:48:50:21:6d:8e:ee:96:45:a3:46:7d:d8:
         b0:04:4a:b8:ec:43:3f:f4:07:92:a2:bd:3a:a6:f1:8f:51:2c:
         f8:82:34:50:9a:03:18:09:e3:52:87:65:68:6b:c1:dc:02:10:
         b3:5a:32:ca:89:e1:71:80:90:75:22:98:cf:67:07:25:97:ff:
         b3:70:09:b1:0d:2f:32:ab:11:10:3b:ea:29:0d:5c:6c:9d:04:
         04:c3:7e:bc:ee:dd:60:2e:a1:da:e0:3f:6b:e8:e9:36:05:14:
         16:bd:30:61:da:4d:cc:50:f0:07:d4:cf:a4:2f:17:02:59:16:
         dc:6b:9e:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:55:59 2025 by rpki-client