Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
File:                     fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa (raw, json)
Hash identifier:          MbsLFAEMVej+V0m+BPZruuAIeS+wKZhfBIAoAdp02/c=
Subject key identifier:   7C:1D:EB:77:C3:F1:9A:C8:60:CF:B1:70:90:EE:B1:32:A1:9A:E8:7E
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       59
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
Signing time:             Sat 01 Mar 2025 01:30:53 +0000
ROA not before:           Sat 01 Mar 2025 01:30:53 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2519
IP address blocks:        203.79.62.0/24 maxlen: 24
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 05:35:38 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 89 (0x59)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:53 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=7C1DEB77C3F19AC860CFB17090EEB132A19AE87E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:a4:73:5b:9d:6c:57:d3:5d:2c:b0:9b:cf:55:
                    1f:a2:85:2e:60:fc:b2:b0:0b:38:62:df:c2:e8:82:
                    cd:b0:e9:fb:da:93:0b:fc:09:ca:1b:01:5b:14:4d:
                    93:5e:96:17:45:a8:52:75:9f:b7:71:95:f3:79:fe:
                    9e:a9:ba:51:c6:d6:36:f6:ff:d5:3e:b8:2e:ff:77:
                    db:e1:75:c3:73:ee:28:46:f4:63:20:1a:ff:24:cb:
                    33:cd:2c:ef:ae:12:ca:e3:af:1e:d3:a5:6c:a7:6f:
                    bd:8c:87:e3:5c:3c:6b:73:3e:7a:d4:1b:7d:24:12:
                    fc:82:d1:cb:4b:62:0b:35:2a:e4:0a:8d:39:1b:ee:
                    3f:5d:8b:a2:3d:fb:60:f3:51:17:03:1b:3b:1f:87:
                    e9:50:0d:8d:55:0f:01:18:da:b6:89:84:e2:43:b9:
                    6d:38:50:89:6d:8e:5a:30:f8:ac:e2:ee:16:b2:ba:
                    5f:29:41:7f:f5:33:f8:e8:9c:5f:28:5d:0f:69:9c:
                    4a:68:5d:ca:62:ff:bc:26:54:4b:1e:71:e8:48:f2:
                    da:3a:8f:04:bb:b1:d8:60:7d:bf:e9:0b:c3:86:fa:
                    04:ed:07:a4:61:63:9e:75:20:9b:2a:6d:df:27:e8:
                    99:a9:97:ae:7c:89:ef:1f:73:b1:5c:16:64:46:70:
                    6f:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:1D:EB:77:C3:F1:9A:C8:60:CF:B1:70:90:EE:B1:32:A1:9A:E8:7E
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/fB3rd8Pxmshgz7FwkO6xMqGa6H4.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.62.0/24

    Signature Algorithm: sha256WithRSAEncryption
         33:39:e1:b7:f7:ae:b5:54:14:85:45:c1:e6:ce:a0:e6:ed:2f:
         66:27:3e:81:e1:e8:2c:47:e6:b4:88:e1:13:d6:88:ae:59:c7:
         b8:29:f4:a3:2f:fe:cc:8a:3a:dc:77:39:15:e6:9e:91:54:42:
         1f:9c:a9:bd:9f:17:33:58:aa:66:67:e3:aa:cc:23:17:33:0f:
         11:c0:99:9a:4c:77:9d:7e:0b:0c:40:0a:ff:c9:8f:bd:1b:af:
         d7:07:4d:65:cd:cf:57:63:f8:4d:15:b2:f6:2d:57:98:c1:7d:
         86:16:bb:2c:19:7c:8d:1b:a5:74:77:38:74:0e:b8:75:19:f2:
         3f:79:66:ad:80:5b:12:b0:19:6f:57:10:59:55:06:f9:58:30:
         a2:85:41:34:24:7c:9f:99:a3:08:be:b2:ce:b5:23:ab:b1:e4:
         8c:6b:17:37:84:79:5b:9b:f5:fa:7b:b4:65:4d:a2:54:9f:7b:
         01:46:5a:d5:7c:fb:cb:14:87:06:32:a6:08:38:3a:88:82:8d:
         f6:42:6d:6d:c5:60:d1:a4:50:15:bb:3b:c0:a6:9c:48:dc:89:
         78:88:81:b4:81:96:c8:38:db:be:6d:99:63:f1:4e:e1:5b:34:
         da:d1:7c:2a:4b:4c:f3:cc:c4:41:d0:59:51:25:f4:87:03:ad:
         bf:01:70:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 07:01:22 2025 by rpki-client