Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/bikpVnglEHxZooUbQJIwo2H5tNA.roa
File:                     bikpVnglEHxZooUbQJIwo2H5tNA.roa (raw, json)
Hash identifier:          VGiJubEfrZeGfSmA8XVXI8moy25enOFw67eiSKFmvTg=
Subject key identifier:   6E:29:29:56:78:25:10:7C:59:A2:85:1B:40:92:30:A3:61:F9:B4:D0
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       52
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/bikpVnglEHxZooUbQJIwo2H5tNA.roa
Signing time:             Sat 01 Mar 2025 01:30:50 +0000
ROA not before:           Sat 01 Mar 2025 01:30:50 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     23818
IP address blocks:        113.212.107.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 01:02:18 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 82 (0x52)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:50 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=6E2929567825107C59A2851B409230A361F9B4D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:8d:eb:bb:55:15:4e:12:7b:47:4c:c8:2b:31:
                    81:f9:ff:ff:cd:4d:bb:66:5d:1c:0f:ea:b8:3c:ac:
                    10:35:17:41:f0:49:73:b6:29:c7:c2:b1:c0:72:4c:
                    c3:36:0a:e3:41:43:fc:2f:60:85:d6:11:7f:ab:fd:
                    81:5c:9b:f1:db:34:1c:3f:6f:5f:58:e3:e7:34:dd:
                    62:4b:8f:04:e2:4b:8d:87:f1:82:56:6b:91:90:76:
                    33:54:9e:00:32:a4:db:22:21:d0:81:81:e2:56:ae:
                    d9:b3:d8:d1:b9:39:a0:f2:ce:31:b8:2c:1b:11:b3:
                    d5:55:09:dc:01:1c:fe:83:30:f4:6f:c6:59:f9:7a:
                    79:84:6b:ea:3c:c5:fc:9a:90:f4:2d:ab:2c:94:35:
                    92:ce:37:35:a5:e8:04:0b:8f:29:52:2e:7f:dd:c7:
                    c1:0b:e6:fc:6d:7e:05:76:07:55:f5:6e:c8:2d:f8:
                    de:69:72:58:08:15:45:8c:16:18:f5:78:9b:ff:7d:
                    7e:da:8c:13:9e:1c:81:3c:92:df:c3:f6:5b:11:2b:
                    d7:83:00:e2:95:be:44:b6:41:7c:82:d7:f9:0a:0b:
                    34:e1:b0:81:53:e5:66:f4:e0:cb:3a:19:20:ac:f2:
                    71:a9:eb:cc:da:3d:51:f5:57:2a:c4:16:4f:92:24:
                    62:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:29:29:56:78:25:10:7C:59:A2:85:1B:40:92:30:A3:61:F9:B4:D0
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/bikpVnglEHxZooUbQJIwo2H5tNA.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.107.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3c:93:6d:56:4b:c1:14:ab:9e:c3:cc:c3:ec:6c:da:9d:88:77:
         4b:6d:c2:87:85:6f:9f:21:73:f6:81:79:a8:39:7b:00:c2:cf:
         91:eb:ef:2e:9c:7f:f8:d6:01:1f:7b:ac:79:e8:ea:4a:18:29:
         1f:13:b1:10:e0:fb:a9:65:c9:7b:5a:ba:fc:03:21:56:4c:76:
         0c:0f:32:80:33:6e:9b:6e:a2:3a:04:15:57:57:92:21:86:42:
         5c:fb:a3:e0:3f:89:bd:67:ea:e7:27:00:d1:2d:50:2d:4b:1f:
         9e:77:d6:0f:06:b5:14:d3:00:2e:3e:a4:7c:3c:54:db:4b:09:
         4e:59:80:40:41:dd:8a:c1:21:ca:bf:fa:b6:32:aa:ff:c8:23:
         2f:43:cb:2b:8a:16:59:1d:c4:e7:71:7c:59:80:29:4e:67:06:
         71:14:4a:dd:ec:74:34:23:f1:31:d3:ca:d5:e2:42:4a:e8:ae:
         55:03:13:4e:b5:8d:e8:25:d8:ad:66:93:8c:b2:f8:89:4b:5e:
         d9:67:08:cb:a1:cb:e4:95:6e:95:32:17:4e:9a:b3:c1:24:51:
         c1:e6:4d:bc:4b:47:58:92:61:8f:19:dc:ca:7b:b5:0c:0b:24:
         70:11:60:f0:43:a3:99:1b:c7:0d:ea:b4:54:2b:be:8c:71:f8:
         3f:d5:51:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:36 2025 by rpki-client