Route Origin Authorization

$ rpki-client -vvf rpki-repository.nic.ad.jp/ap/A91A73810000/883/gSMGjv25KhNXYsxeG2mJHvq8540.roa
File:                     gSMGjv25KhNXYsxeG2mJHvq8540.roa (raw, json)
Hash identifier:          cBSqbQwaYfja74KCYDHRFfST7Cpfq5aNurCPj/2edm4=
Subject key identifier:   81:23:06:8E:FD:B9:2A:13:57:62:CC:5E:1B:69:89:1E:FA:BC:E7:8D
Certificate issuer:       /CN=87EE394CC8B1651B758F388F73A88E68BD27222F
Certificate serial:       55
Authority key identifier: 87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F
Authority info access:    rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
Subject info access:      rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/gSMGjv25KhNXYsxeG2mJHvq8540.roa
Signing time:             Sat 01 Mar 2025 01:30:51 +0000
ROA not before:           Sat 01 Mar 2025 01:30:51 +0000
ROA not after:            Sun 15 Feb 2026 01:30:03 +0000
asID:                     2519
IP address blocks:        203.79.52.0/22 maxlen: 22
Validation:               OK
Signature path:           rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.mft
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.crl
                          rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/ukQSs19ainFHv8ZntZtSDarH2o8.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/ukQSs19ainFHv8ZntZtSDarH2o8.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 20 Mar 2025 04:24:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 85 (0x55)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87EE394CC8B1651B758F388F73A88E68BD27222F
        Validity
            Not Before: Mar  1 01:30:51 2025 GMT
            Not After : Feb 15 01:30:03 2026 GMT
        Subject: CN=8123068EFDB92A135762CC5E1B69891EFABCE78D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:07:9b:8b:7c:37:14:f9:25:8a:41:7d:a7:2c:
                    11:49:6d:42:44:d2:dc:8e:09:a7:3a:47:14:d4:6a:
                    e9:f5:5a:07:12:a6:d9:3a:dc:07:64:03:f8:3d:a5:
                    0c:62:dd:05:58:46:b9:da:36:31:4e:5d:69:f2:e1:
                    db:b4:99:ef:dc:5c:fa:4e:58:89:99:58:50:c6:53:
                    58:4c:08:7b:61:3c:d0:15:02:27:9d:e1:06:0e:4f:
                    53:dd:61:fe:94:90:82:fd:35:a5:61:70:79:fe:3c:
                    f4:f2:58:1c:a8:64:c8:09:3b:7e:c1:68:09:96:cf:
                    bd:26:54:a6:e9:31:ad:02:ea:00:39:3e:53:03:4e:
                    a6:46:10:2c:69:b4:fb:e5:75:de:5a:e5:c3:37:dc:
                    55:74:51:76:87:01:55:41:22:bd:ad:6f:11:0d:6c:
                    20:4e:65:90:f9:c9:e3:d6:47:86:c5:35:6e:b0:84:
                    bb:d5:75:ca:44:a0:70:ff:9d:24:be:06:d9:4d:f3:
                    34:30:1a:26:07:02:c7:83:ba:85:a5:44:c0:8b:22:
                    c6:cc:50:64:93:cb:20:33:ac:90:10:0b:e6:8b:d5:
                    4f:6b:74:9b:6b:55:d7:87:74:77:91:68:47:91:55:
                    ae:8a:76:0a:f9:33:64:ac:61:9b:7d:d7:22:b8:c9:
                    df:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:23:06:8E:FD:B9:2A:13:57:62:CC:5E:1B:69:89:1E:FA:BC:E7:8D
            X509v3 Authority Key Identifier:
                keyid:87:EE:39:4C:C8:B1:65:1B:75:8F:38:8F:73:A8:8E:68:BD:27:22:2F

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/h-45TMixZRt1jziPc6iOaL0nIi8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/h-45TMixZRt1jziPc6iOaL0nIi8.cer

            X509v3 Key Usage: critical
                Digital Signature
            Subject Information Access:
                Signed Object - URI:rsync://rpki-repository.nic.ad.jp/ap/A91A73810000/883/gSMGjv25KhNXYsxeG2mJHvq8540.roa
                RPKI Notify - URI:https://rpki-repository.nic.ad.jp/rrdp/ap/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  203.79.52.0/22

    Signature Algorithm: sha256WithRSAEncryption
         0d:ad:bf:25:17:93:9b:f0:1b:d3:68:98:18:06:2f:66:41:c3:
         e3:19:0a:f6:c1:67:30:5d:b1:94:89:5d:21:f8:40:2c:ea:52:
         44:5f:57:75:da:00:41:d4:a9:c8:a2:5a:5b:0b:7e:2a:5f:d7:
         2e:ba:d3:dd:eb:b2:8b:46:c6:eb:90:c6:15:82:bf:d1:e1:d4:
         ea:76:07:7f:88:0d:d8:48:1e:69:76:c6:44:d1:06:cf:38:46:
         b2:ad:71:8e:65:36:ca:51:16:83:9e:1f:59:fc:b0:cd:6d:97:
         aa:41:6c:e4:f5:57:b2:cc:d8:8a:9e:3b:35:72:2c:25:c7:3d:
         57:45:30:af:bb:a2:86:2f:25:14:dd:99:55:fd:da:64:91:44:
         4a:39:c9:e6:b5:8e:4a:b3:b0:21:c7:7a:1c:fd:56:66:6e:6e:
         96:ea:8d:57:94:ec:98:3f:c8:09:48:df:1c:31:47:68:60:78:
         93:bb:97:d3:b9:6d:4b:70:de:c1:77:63:b0:a3:58:72:59:e2:
         d5:fe:ea:a7:a6:80:61:18:9d:d5:dd:0c:be:dd:40:97:8f:73:
         d3:10:19:59:48:55:ba:69:c6:a7:1a:db:08:04:33:c4:3c:cf:
         bd:f0:ba:5d:5a:6a:77:cc:bb:e0:b6:08:3c:92:58:07:7f:c0:
         e6:f7:04:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 13 06:39:21 2025 by rpki-client