Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/d07cYFuIJGw8quRxRwbq7_GKeus.roa
File:                     d07cYFuIJGw8quRxRwbq7_GKeus.roa (raw, json)
Hash identifier:          kwbHp/IVT/Sqp+PIllBlEBCEe2bjRJddH9o6losbJDM=
Subject key identifier:   77:4E:DC:60:5B:88:24:6C:3C:AA:E4:71:47:06:EA:EF:F1:8A:7A:EB
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       50
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/d07cYFuIJGw8quRxRwbq7_GKeus.roa
Signing time:             Sat 01 Mar 2025 01:30:49 +0000
ROA not before:           Sat 01 Mar 2025 01:30:49 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2519
IP address blocks:        113.212.105.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 05:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 80 (0x50)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:49 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=774EDC605B88246C3CAAE4714706EAEFF18A7AEB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:d4:c8:e1:46:36:8d:1e:02:d9:fb:39:42:b4:
                    72:3f:d0:ac:0c:eb:d3:1d:62:74:ca:d4:96:17:1f:
                    82:2a:5d:ba:e7:08:9a:52:90:74:a4:99:1b:a7:eb:
                    8f:d2:6e:82:81:b8:7e:6a:aa:fb:33:8d:37:50:e8:
                    f2:37:11:0b:70:e5:e1:45:80:28:89:a5:f5:da:02:
                    bc:b9:05:4b:69:0d:d5:1a:63:c4:e1:d4:b5:02:eb:
                    5f:30:46:e4:91:c9:3d:9b:ab:cc:7e:b6:c7:d6:48:
                    1b:d1:25:3b:00:73:a4:19:c2:d6:f7:0c:2a:74:2a:
                    2e:9a:12:a4:12:97:e0:5e:05:c6:02:93:4c:2e:c1:
                    9c:57:0e:66:11:5d:8a:01:86:da:51:65:24:68:e0:
                    bd:54:21:4d:97:4e:2d:92:f7:1a:34:d2:e4:3a:bb:
                    e4:41:60:32:52:12:1f:9d:ff:76:9e:db:7d:37:e9:
                    95:88:c4:f5:e5:53:2e:11:5f:ed:ad:86:a7:32:03:
                    d7:52:bf:a8:42:5f:09:af:54:55:32:63:5a:0b:8c:
                    63:7b:d7:55:15:a6:dc:53:c3:9d:00:e7:5d:a4:08:
                    68:50:68:df:18:b2:e4:67:da:d7:c6:15:d4:bb:e9:
                    80:6a:cb:a9:7c:43:00:be:87:5e:17:7f:15:b7:50:
                    66:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:4E:DC:60:5B:88:24:6C:3C:AA:E4:71:47:06:EA:EF:F1:8A:7A:EB
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/d07cYFuIJGw8quRxRwbq7_GKeus.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  113.212.105.0/24

    Signature Algorithm: sha256WithRSAEncryption
         27:33:9d:c6:ac:a6:42:b2:d0:78:ba:fd:dd:ac:af:d8:fe:72:
         81:be:a7:68:ad:81:a1:dc:d0:2d:0d:39:b7:21:69:bd:4c:b9:
         4b:a0:e7:bf:47:7b:d4:72:a0:43:21:65:5b:b6:11:99:75:a6:
         1c:a7:64:dd:e6:38:97:64:bb:aa:f6:95:3e:ad:86:2d:cc:b2:
         43:91:ce:9f:00:d0:0a:db:88:4e:c5:43:b4:a6:0f:81:e0:75:
         f5:95:6d:46:8d:63:30:c1:43:de:71:42:86:d5:d8:2c:dc:3e:
         d0:98:4c:7a:50:6a:ec:4d:f2:c6:0f:65:32:01:6e:dc:fe:d3:
         53:fc:ca:2a:41:36:70:5b:19:7f:16:b9:85:de:e4:0a:20:01:
         57:e8:ef:c8:1f:d8:41:8e:75:17:b1:bc:33:b5:d3:11:79:4b:
         cc:03:88:0d:49:0a:25:10:30:e0:9c:68:5a:bd:50:fd:95:55:
         55:f5:19:f4:ed:7b:f6:eb:d2:df:7a:51:98:ab:fb:42:41:73:
         af:03:30:6a:c1:5d:83:6c:0d:1e:39:be:f5:70:22:7e:97:08:
         b1:54:99:41:89:87:73:c2:91:f6:1c:c3:91:bd:86:86:b4:47:
         46:1e:7c:a4:83:56:a0:b4:2a:f8:08:8a:34:7d:82:5c:1a:a2:
         c9:8c:4e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:12:47 2025 by rpki-client